Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QuLKJeChNJsctkITqLi2QppnPpM.roa
File: QuLKJeChNJsctkITqLi2QppnPpM.roa (raw, json)
Hash identifier: YUrbJfLNSK+NphZ4c1J8Vdaioyuj6NHOwwn1r7DGZoo=
Subject key identifier: 42:E2:CA:25:E0:A1:34:9B:1C:B6:42:13:A8:B8:B6:42:9A:67:3E:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QuLKJeChNJsctkITqLi2QppnPpM.roa
Signing time: Mon 08 Apr 2024 09:22:35 +0000
ROA not before: Mon 08 Apr 2024 09:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15322 (0x3bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 09:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=42E2CA25E0A1349B1CB64213A8B8B6429A673E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:50:40:59:d6:0b:a4:95:e2:06:fc:40:88:
d5:c6:23:99:66:6d:10:f2:c6:11:08:cc:01:b0:e1:
04:5b:24:87:c1:69:10:be:87:9e:bd:30:4e:e3:51:
86:4e:e2:ee:e7:d5:2c:1e:c6:ec:a6:52:e3:92:7a:
ef:dc:6f:03:fc:44:99:c2:df:a4:6e:0c:9a:eb:62:
5b:2d:6c:bb:2a:fa:77:09:ba:07:df:e6:1f:72:c5:
14:fc:6f:89:a3:74:fa:7a:58:5b:4c:f6:15:58:f6:
31:43:d8:c8:8c:16:cf:05:97:14:70:7f:75:52:cf:
f4:9a:c3:a1:da:01:fb:af:65:54:f8:fb:0a:d5:d7:
88:ff:37:3f:84:f0:d4:e6:3a:4b:b0:09:48:2a:b2:
9d:f4:3f:85:82:da:34:25:80:08:65:99:f1:2c:cb:
fe:5d:06:4e:f0:62:c8:46:ed:8d:a2:44:54:3e:5d:
aa:6c:59:f9:b2:51:32:7c:72:1c:51:2d:e0:0b:43:
b9:ca:ec:c5:64:f4:67:59:da:ba:87:ab:dd:94:f9:
b5:db:96:28:01:1a:40:4d:40:05:4b:52:8d:96:44:
60:80:25:d9:16:dd:f1:bb:dd:e7:f6:9d:29:87:51:
3d:ab:11:90:17:b4:91:aa:17:09:1b:5d:53:e0:2f:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:CA:25:E0:A1:34:9B:1C:B6:42:13:A8:B8:B6:42:9A:67:3E:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QuLKJeChNJsctkITqLi2QppnPpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:2d:33:7f:d3:bd:e8:da:03:fe:07:52:82:e7:79:90:01:bb:
20:d9:85:1c:8f:2c:32:5f:2a:31:f4:07:c2:8f:02:8f:9c:4d:
44:f3:d1:5d:8c:05:bb:7d:08:6f:c7:5f:64:65:23:0c:70:b9:
c6:62:82:6b:8f:a8:3b:30:93:ad:ff:a1:b4:76:f1:0c:52:0d:
f8:21:6c:ec:b7:b3:f6:c8:e6:45:0e:ed:93:44:51:48:35:80:
76:79:d6:c8:e2:c2:c3:f9:68:6b:9b:a4:78:ca:69:ba:ad:ef:
23:8d:dc:5c:87:e1:5e:4e:64:1e:61:3d:ce:a1:75:2a:79:ea:
a4:cc:46:3c:68:85:91:78:d9:5d:da:2f:bf:24:98:33:e6:1c:
3f:ee:8d:8e:24:a5:9a:8c:3d:21:00:cc:47:30:1c:54:68:81:
9a:d6:66:1e:e7:fc:90:31:e9:1d:6a:19:00:72:5e:f7:6e:85:
54:23:82:cb:13:8d:9d:7f:ff:42:9c:a4:e3:ec:20:bf:de:5b:
c0:79:d1:94:b1:a5:b8:ff:7a:17:21:97:61:ad:47:53:ab:9d:
83:2e:f4:13:ef:5e:44:4c:f7:1b:61:7e:57:1d:1a:f8:cc:fe:
83:aa:dd:3d:4d:6d:40:ab:7c:32:43:da:be:7b:a3:43:69:28:
f9:7c:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org