Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Qv3au26DQ_O4G0lH9Q4xQWafvrw.roa
File: Qv3au26DQ_O4G0lH9Q4xQWafvrw.roa (raw, json)
Hash identifier: YFqNQVq//tO/jRwy4Slmn7kvL9ZACQgMPXc0Yjx/9+U=
Subject key identifier: 42:FD:DA:BB:6E:83:43:F3:B8:1B:49:47:F5:0E:31:41:66:9F:BE:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 523E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Qv3au26DQ_O4G0lH9Q4xQWafvrw.roa
Signing time: Wed 08 May 2024 05:53:56 +0000
ROA not before: Wed 08 May 2024 05:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21054 (0x523e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 05:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=42FDDABB6E8343F3B81B4947F50E3141669FBEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:ea:1e:fd:63:88:a7:d3:59:b4:f7:4c:6d:
15:bf:cf:1c:2a:89:24:a7:d0:77:c5:9a:f5:a4:2b:
af:e8:34:63:8e:1f:8e:4e:97:ff:9e:78:e6:8b:a8:
14:f1:e4:e1:f2:b5:d9:4d:3d:55:2a:4b:65:c2:a3:
84:b6:fc:f8:58:e1:42:41:aa:0a:6f:38:27:db:09:
d3:79:6f:da:38:97:8b:24:18:46:81:db:5c:dd:dd:
11:77:26:d6:b1:99:10:e2:c5:9e:92:3b:a4:5a:95:
5b:df:ed:fd:0e:b3:5e:4f:19:01:32:51:68:c8:34:
89:ff:01:b9:72:c9:5f:5c:cd:ba:be:03:bf:a2:8d:
cd:bd:80:58:5d:a8:bf:e2:94:16:b7:78:7e:56:be:
5c:e1:d8:51:c9:5a:e6:ae:27:5d:c2:24:16:fe:be:
05:81:f9:af:64:38:42:f6:14:7d:08:ca:fa:02:8a:
f7:b2:2c:a1:65:4f:49:6e:90:72:98:49:1c:cf:77:
45:e9:4a:34:e8:3c:3d:cc:01:69:84:9b:b7:fc:6d:
16:c8:d1:ea:68:db:40:7a:7a:79:36:a2:cd:65:d0:
2b:ae:8b:e1:02:45:b2:8a:09:83:fb:9a:48:ee:c4:
90:e8:e5:55:2e:78:d8:a6:d6:d6:e1:0a:29:54:fd:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FD:DA:BB:6E:83:43:F3:B8:1B:49:47:F5:0E:31:41:66:9F:BE:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Qv3au26DQ_O4G0lH9Q4xQWafvrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:6f:45:6e:b9:f7:16:c9:29:4b:4b:d7:56:45:e6:16:23:af:
f4:47:68:af:61:98:9e:aa:e5:37:f6:b4:23:56:b8:9a:63:75:
85:6c:e6:e0:e8:bc:92:ad:3e:34:6e:84:15:c2:22:31:34:1b:
c7:e8:b9:91:39:21:71:6b:ef:08:37:80:22:5a:3d:36:7e:af:
e1:f4:0e:e8:26:7f:63:11:f7:12:9d:1c:29:b4:c1:7b:f1:6b:
7c:26:61:d5:88:e6:07:4f:af:35:41:e9:b3:27:8e:cf:ea:2b:
cc:ec:ba:99:7f:94:d5:8e:50:45:a1:81:07:cc:af:e8:ba:fd:
21:52:a9:20:a7:52:25:dc:50:86:9f:f3:fa:8d:c0:6e:f1:86:
68:c3:e3:ce:7f:ab:8a:36:eb:82:51:0a:92:f7:5e:84:91:6d:
54:ec:99:00:bf:d9:88:ac:18:e9:ce:32:0b:ad:ae:65:c0:44:
40:f9:4b:ce:0a:e1:44:6e:16:c2:b0:4c:a6:ff:ef:a5:87:3c:
1b:ed:b0:32:98:e6:9a:2c:b8:17:15:2a:78:7a:b9:d8:98:a8:
1b:8d:0c:0b:f8:74:b4:58:10:f4:bb:34:7f:a9:50:28:68:4d:
70:9a:c7:c8:d9:9d:8d:c4:33:94:3c:e8:5e:43:c6:1b:49:0a:
5b:da:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org