Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V6y9ESoJn6uiei9u3yZZsI2hDrM.roa
File: V6y9ESoJn6uiei9u3yZZsI2hDrM.roa (raw, json)
Hash identifier: ooRBKI+9l7zeO+2DpUdfY6+L+dgj4CqVlbVBMZ3uq0g=
Subject key identifier: 57:AC:BD:11:2A:09:9F:AB:A2:7A:2F:6E:DF:26:59:B0:8D:A1:0E:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 335A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V6y9ESoJn6uiei9u3yZZsI2hDrM.roa
Signing time: Thu 28 Mar 2024 01:22:00 +0000
ROA not before: Thu 28 Mar 2024 01:22:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13146 (0x335a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 01:22:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57ACBD112A099FABA27A2F6EDF2659B08DA10EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:7c:e8:73:87:27:3b:1e:b8:bb:1c:1e:84:
74:3d:26:9e:5d:f5:4e:d4:b7:ad:3d:d0:ca:b9:c5:
7c:04:c5:0b:db:2d:40:6f:09:0f:48:d7:d6:ce:72:
f0:90:0c:94:1a:8f:cd:3e:1f:d1:87:5c:27:a9:da:
68:49:52:9f:ca:33:c7:3a:c1:43:e6:0d:ad:86:c4:
30:6b:01:4a:05:b0:4f:c0:84:ee:60:ff:38:9e:bd:
a8:b4:76:3d:9c:d6:f8:36:dd:53:6f:49:f5:68:a0:
d9:e5:28:ef:ed:c5:47:b7:f1:22:87:42:1c:23:ec:
84:ea:8b:39:57:ea:e1:8d:4b:75:da:25:56:0f:ab:
42:45:61:50:02:a3:bb:20:90:8a:6e:df:a8:8f:e8:
b3:bd:85:a1:50:4d:b9:cb:11:0e:9f:9b:86:7f:b8:
1c:70:f8:98:cf:0a:1e:c1:3f:bb:97:0c:60:97:c2:
aa:b8:3b:06:f9:e4:40:dd:b6:e1:76:25:2b:fe:13:
8e:73:08:35:db:ed:f6:ad:d1:12:95:7a:f9:ab:d5:
72:2e:94:9a:1b:27:64:fe:99:ad:45:63:71:3c:09:
29:31:58:bc:cb:fa:6e:7b:84:78:50:7a:bb:12:34:
4a:b6:e8:e3:6b:ba:ee:36:9d:d6:8e:59:7c:47:e7:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:BD:11:2A:09:9F:AB:A2:7A:2F:6E:DF:26:59:B0:8D:A1:0E:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V6y9ESoJn6uiei9u3yZZsI2hDrM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:61:46:cb:f4:b1:0a:c9:e7:27:49:7c:f4:32:2c:e2:6a:77:
68:71:59:fb:71:d8:47:2d:87:b4:8d:63:7a:98:2b:eb:71:42:
f3:4a:1e:32:1f:4b:5f:63:ea:31:ff:3b:35:07:3a:42:65:1b:
8e:c4:b9:4c:0c:9a:3a:b6:c6:39:3d:10:10:53:86:04:e4:84:
b9:98:fd:f8:2d:66:27:b9:62:a0:ea:84:41:3a:ab:2e:56:b6:
00:ef:1d:af:a9:9d:26:47:a6:8c:70:83:ef:83:a2:5d:05:fc:
a8:e8:6c:0c:da:7c:b1:ae:c5:69:ba:cb:af:d6:5c:7d:15:c0:
67:04:73:db:66:f0:7e:06:74:d7:e5:2e:b9:34:82:4e:47:e0:
cf:29:55:7c:2e:07:54:74:4b:74:7b:0a:11:33:2c:3a:9c:ec:
26:5f:bb:ca:e8:f3:44:d9:74:49:ae:74:6d:ee:da:06:72:b9:
2a:cf:3b:7c:da:0b:19:d6:9e:2c:8f:8f:4d:0b:c9:56:9e:a0:
1c:ba:1e:4c:21:4a:5e:e6:83:c1:4a:ae:49:b5:ee:0d:47:b2:
03:6a:36:56:ad:a4:06:a4:e1:4b:b9:05:46:28:19:82:da:c8:
4b:0d:70:3e:e2:84:2e:47:c9:6f:32:f3:e7:e5:d9:55:d6:85:
68:0c:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:45 2024 by rpki-client on console-ams.rpki-client.org