Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UAZc1-4fYnWg8Yd6ab7dIxe6oyc.roa
File: UAZc1-4fYnWg8Yd6ab7dIxe6oyc.roa (raw, json)
Hash identifier: glQwWW0dstIfky32IOEO1kGBNeuILwaEYxJY6MTq+ts=
Subject key identifier: 50:06:5C:D7:EE:1F:62:75:A0:F1:87:7A:69:BE:DD:23:17:BA:A3:27
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 569A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UAZc1-4fYnWg8Yd6ab7dIxe6oyc.roa
Signing time: Tue 14 May 2024 01:24:13 +0000
ROA not before: Tue 14 May 2024 01:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22170 (0x569a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 01:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=50065CD7EE1F6275A0F1877A69BEDD2317BAA327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:b8:22:af:8d:75:e1:e7:8c:24:f1:c0:22:
7f:88:d7:04:71:b3:72:35:80:da:22:94:85:99:98:
cb:9b:84:d0:4b:6f:9c:68:11:ca:e8:96:4f:dd:e8:
26:42:00:fc:fa:64:34:c6:d0:46:eb:5c:7e:96:a1:
bb:48:77:07:5a:8a:fa:14:7a:4a:3a:15:04:a8:7a:
99:ff:6d:95:69:a4:5d:96:2d:10:c3:68:be:d5:9f:
0b:f0:e7:60:d4:64:de:9e:9e:5a:ce:ef:5c:e9:4c:
55:a5:28:a7:a3:26:58:14:04:0c:02:f9:79:b5:ea:
b7:03:8e:74:af:05:d2:25:6f:08:a8:0f:05:ab:2a:
51:a6:a3:2a:8f:c7:f8:f2:d3:ae:d6:19:69:5d:0a:
d7:17:29:68:61:7f:af:8d:f9:a7:b9:1c:47:68:91:
5d:8b:60:35:95:d5:32:a4:30:7c:f4:80:01:17:08:
98:4e:3b:5e:66:6b:34:cf:00:1b:43:e2:37:bf:9d:
0f:32:bd:74:e1:1e:65:c7:96:a3:fa:b3:ce:ae:cb:
06:bd:e9:cb:59:bb:9f:ba:09:28:3d:e3:62:97:d1:
6b:4c:69:cc:9c:6d:66:66:0a:1d:49:ac:55:a4:75:
24:ef:cf:0e:e0:da:30:c5:63:d8:ec:14:51:87:bb:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:5C:D7:EE:1F:62:75:A0:F1:87:7A:69:BE:DD:23:17:BA:A3:27
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UAZc1-4fYnWg8Yd6ab7dIxe6oyc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:7e:9f:7a:54:21:f1:a5:4f:7d:31:ad:3b:22:ab:de:80:df:
0f:be:44:a9:25:e7:da:3d:8f:fa:b9:88:d9:8c:29:5e:2b:6a:
a9:3f:8d:42:26:28:ef:3b:31:7e:84:e9:7f:f0:8f:14:e6:7f:
32:ed:d1:45:d0:fe:ab:99:27:44:2e:c7:d1:68:39:19:b0:3e:
87:98:6a:3c:9c:5f:5c:d9:b3:49:a0:97:fc:a8:8a:41:0a:31:
fe:8a:ab:7a:fa:8c:ec:3f:e2:7b:f8:7c:7f:43:05:4b:f7:f7:
9e:d9:83:69:d7:45:c7:8b:49:77:75:b2:98:43:33:a3:5f:1f:
f9:68:37:da:17:19:ed:82:b8:32:e8:05:3a:8b:98:b5:21:45:
5a:fe:98:59:a1:72:36:83:3e:87:17:c5:16:cf:3f:39:09:7e:
96:65:d8:2b:b9:70:a4:b2:83:f7:47:a1:0c:44:d2:ce:ed:23:
60:06:c2:5a:af:bf:8a:38:f7:10:4b:44:95:51:7b:7f:ed:3e:
fe:2e:99:ca:5a:f2:1a:3b:ee:f2:eb:2b:aa:a6:6e:f1:d4:fa:
68:ef:4c:1b:9a:05:40:02:cd:c1:38:8d:69:2e:df:c2:ca:9c:
55:50:5f:7d:57:31:76:d9:21:a3:76:52:6d:33:ff:40:62:d4:
2f:5f:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org