Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NuCpJTK3bN5Y4cEMOlTERRePCTc.roa
File: NuCpJTK3bN5Y4cEMOlTERRePCTc.roa (raw, json)
Hash identifier: RvJdgDYp9akzfzkUj4z56t3UhJF8z4ttUfQTZLw0OGg=
Subject key identifier: 36:E0:A9:25:32:B7:6C:DE:58:E1:C1:0C:3A:54:C4:45:17:8F:09:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5116
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NuCpJTK3bN5Y4cEMOlTERRePCTc.roa
Signing time: Mon 06 May 2024 16:53:51 +0000
ROA not before: Mon 06 May 2024 16:53:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20758 (0x5116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 16:53:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=36E0A92532B76CDE58E1C10C3A54C445178F0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:d3:7d:2e:eb:46:f9:39:6b:21:91:da:ab:
f4:d1:0a:63:ac:d7:aa:68:cb:ce:8c:05:64:97:e0:
82:3b:b6:d4:a5:fb:56:3c:ef:e5:71:cb:fe:a0:59:
74:65:48:2b:2e:5a:2c:1d:d3:ed:1d:0e:12:95:d8:
0b:4f:8c:50:49:bb:14:01:91:ba:75:2b:b2:df:8e:
e9:15:59:90:7b:36:0e:22:60:78:04:0a:06:96:ca:
2a:3f:51:ec:f8:0c:b9:9f:c0:8b:25:ac:3f:c6:d6:
6d:7f:49:7c:9c:bb:96:be:b2:ed:19:ba:3f:66:cc:
ad:c5:da:6a:c6:24:67:77:91:c2:e3:0a:0a:23:e3:
8c:2d:8b:4d:0d:8c:a4:c8:0d:c4:c8:0d:00:db:55:
8b:9f:03:ad:d9:01:8d:ca:ff:7a:b0:6a:8e:01:16:
a6:6a:f2:7c:1e:c9:f7:55:b2:85:83:d9:05:a7:b4:
5b:8e:7a:83:59:3e:cd:9c:68:35:f4:98:31:0f:42:
ad:74:3a:58:76:a8:59:a8:53:fc:8e:ad:73:b3:43:
7e:5b:fe:e9:97:e8:41:42:da:2a:36:14:72:2e:8d:
a0:f8:d7:2f:4e:f7:ae:74:0f:8b:30:b6:6b:e1:31:
fa:89:42:1c:40:a9:7f:e1:ca:32:93:47:43:7c:c1:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:A9:25:32:B7:6C:DE:58:E1:C1:0C:3A:54:C4:45:17:8F:09:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NuCpJTK3bN5Y4cEMOlTERRePCTc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:d3:b4:54:be:31:b1:ff:1d:23:84:53:03:a2:3e:8b:7e:c9:
72:71:ae:4f:8a:3b:8b:60:2d:89:52:9f:ea:84:c9:c8:f7:23:
d6:02:5a:e1:fb:7a:b2:d9:e9:4a:e3:3d:c3:79:c1:f4:5f:78:
3e:43:7c:d4:07:44:9d:dc:01:28:83:80:28:bb:4a:99:a8:53:
96:c4:26:e6:e9:8f:b4:e2:de:7c:40:67:b6:bd:03:f3:38:9d:
8b:37:6e:eb:71:a8:c9:80:fd:11:a4:40:2a:46:4f:7d:16:ee:
58:e5:bb:07:5d:bd:b7:37:fd:f8:7d:e5:88:2f:1d:08:f2:6b:
a3:31:c6:be:eb:ca:f2:c1:32:a0:ec:0d:d7:5b:04:60:de:91:
9a:8d:5a:89:8f:83:e1:cb:5d:e9:ed:ed:f3:de:00:28:51:61:
9b:cd:5a:0a:8f:c1:38:91:1c:3b:ed:f4:96:90:5c:4f:df:9f:
86:3b:a9:79:16:5f:b9:89:52:1a:e2:6b:03:dc:26:76:a0:75:
ac:4b:42:32:82:7c:8e:02:81:c7:1c:5f:33:a4:00:01:54:e6:
72:5b:d2:46:f9:1f:e0:a6:ff:02:65:c1:2f:5c:77:f0:d2:25:
69:27:f8:dc:ad:f0:3a:ce:84:df:7e:76:24:14:3c:76:17:2c:
17:76:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org