Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RmDAkhyZo5IDy1HLCN6sGtBNaCQ.roa
File: RmDAkhyZo5IDy1HLCN6sGtBNaCQ.roa (raw, json)
Hash identifier: nBf6YiSCyBkHLqO062Yb0coGRKCds0KTymBp08yKI70=
Subject key identifier: 46:60:C0:92:1C:99:A3:92:03:CB:51:CB:08:DE:AC:1A:D0:4D:68:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CB6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RmDAkhyZo5IDy1HLCN6sGtBNaCQ.roa
Signing time: Tue 30 Apr 2024 20:53:35 +0000
ROA not before: Tue 30 Apr 2024 20:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19638 (0x4cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 20:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4660C0921C99A39203CB51CB08DEAC1AD04D6824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:9b:49:72:55:96:e0:2f:3c:c6:8d:c2:6c:
0e:4f:da:3f:02:b8:6d:bf:88:09:32:eb:e4:2a:42:
74:1f:83:d7:77:31:ee:4f:b7:48:aa:48:29:08:02:
cc:f9:d9:4d:c7:f0:c1:cb:17:80:ff:4f:e0:60:26:
22:0f:22:fc:dd:6d:95:37:13:cc:e7:04:d0:21:59:
c8:2f:5c:e2:80:40:d7:99:b0:6e:32:d1:1c:c4:8d:
5f:16:ab:01:41:d1:7a:74:7d:f6:35:28:1b:0a:fa:
a0:2f:c6:b8:8e:9c:a5:ca:74:50:90:23:e4:a0:f3:
93:16:5f:2b:d2:06:e6:e9:c3:dd:49:63:fc:7d:ad:
34:ff:ec:62:d4:87:78:3a:67:7e:03:99:0b:37:a8:
3d:a8:ce:27:05:c7:46:ac:a6:12:8b:7a:4d:a0:43:
c3:72:2b:5e:2b:ce:51:a8:d3:6d:c5:64:53:6a:da:
4d:08:56:ad:e4:23:ca:9e:dc:9c:cb:8a:da:e0:22:
0a:ee:ba:37:d5:3b:17:62:d6:91:29:ae:f6:d2:58:
87:f1:64:45:50:fb:f0:4d:74:36:9f:34:bc:95:e3:
51:f3:ad:c3:93:43:50:73:9e:06:65:21:7a:8a:26:
d0:b5:44:c1:29:25:cf:d4:b0:4d:55:f2:db:2d:38:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:C0:92:1C:99:A3:92:03:CB:51:CB:08:DE:AC:1A:D0:4D:68:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RmDAkhyZo5IDy1HLCN6sGtBNaCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:f5:b5:8c:9a:eb:4a:df:27:9e:98:c3:18:28:b8:64:cb:e3:
ed:bc:b2:a7:b8:4e:a9:03:44:04:50:11:57:c5:5f:ee:9c:33:
41:03:45:d1:4a:2a:af:d7:b9:dc:86:26:56:a8:93:89:1f:36:
3f:33:41:57:03:50:ff:cf:5c:75:dc:ca:4c:3a:eb:b0:95:69:
67:11:9a:ae:64:74:64:f2:97:99:30:da:6f:82:5a:ba:53:f7:
6f:25:6d:3d:a8:eb:aa:e0:5e:99:d8:08:58:ef:bd:72:2b:b1:
a5:de:33:f5:e6:f5:e1:8a:ff:36:47:b9:5e:ce:1a:2f:b1:52:
53:f7:47:93:09:b4:cb:dd:41:af:de:4d:64:4b:7c:79:ab:b8:
01:8a:b3:e4:cb:5c:be:89:6c:6b:41:65:7e:63:40:1d:58:7b:
cb:26:e2:e5:4e:0e:2f:07:4e:61:ae:86:c5:c3:97:3d:51:1e:
b1:20:d0:35:a1:50:07:54:e4:6b:84:2e:79:d6:72:f4:81:9b:
de:9f:a3:90:96:7b:f5:ef:95:49:02:f7:4f:43:29:af:7c:79:
f3:04:55:37:61:e9:4d:17:05:ed:b2:5b:d3:48:2c:98:01:4e:
5a:37:4c:3c:36:4f:85:5b:7b:86:62:a7:e3:50:1a:ec:48:aa:
59:f5:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org