Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Y62DWj_iML-jqtH7ufPFmzL-Nzs.roa
File: Y62DWj_iML-jqtH7ufPFmzL-Nzs.roa (raw, json)
Hash identifier: yjlBjJ7VLV/KvCqO5eC2DSsb0Md2kSlw3SidfdS4ICc=
Subject key identifier: 63:AD:83:5A:3F:E2:30:BF:A3:AA:D1:FB:B9:F3:C5:9B:32:FE:37:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 358E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y62DWj_iML-jqtH7ufPFmzL-Nzs.roa
Signing time: Sat 30 Mar 2024 23:52:08 +0000
ROA not before: Sat 30 Mar 2024 23:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 23:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63AD835A3FE230BFA3AAD1FBB9F3C59B32FE373B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:cf:6e:a6:8a:ca:96:90:d1:eb:33:98:f6:
22:0c:ed:18:bf:d6:c5:9a:1f:a8:1f:ed:81:c9:0f:
9b:53:45:e6:09:c8:49:be:fb:98:24:d5:aa:ee:3b:
18:ab:1a:c6:de:e6:5c:55:1e:99:27:e7:e7:71:1b:
a4:85:7d:93:79:f0:82:39:e1:dd:76:aa:a1:b6:66:
a5:0c:f4:41:23:c3:6f:84:72:a9:a6:8e:c6:85:fd:
0f:c9:1b:c3:13:14:6a:c0:52:4f:89:24:99:32:45:
79:e4:01:ae:3a:77:59:5f:09:b9:fd:54:7c:d8:1d:
13:2f:44:8b:90:a2:5e:78:3c:86:a1:71:63:74:22:
4a:98:3a:aa:89:24:0d:b0:e1:65:46:cb:35:b6:ca:
5f:ec:36:12:20:68:8d:f5:cb:87:46:62:3e:43:07:
f0:d1:6a:5d:ae:6d:3b:ab:16:34:d7:8c:fb:ed:8a:
fa:88:fd:3d:33:22:ac:16:46:57:7d:c3:09:01:16:
b9:75:3a:80:17:4c:7f:36:4b:8d:48:38:90:7d:ef:
aa:8a:62:85:5c:ea:d2:73:de:77:7f:2e:5a:24:44:
fb:0d:19:d9:0d:54:fb:97:37:3c:25:06:71:ce:6c:
d6:0e:44:e1:72:8d:1a:8d:6f:0d:ea:6d:ea:2f:6d:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:83:5A:3F:E2:30:BF:A3:AA:D1:FB:B9:F3:C5:9B:32:FE:37:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y62DWj_iML-jqtH7ufPFmzL-Nzs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:0e:06:d2:98:09:dd:59:80:c4:bd:14:36:2f:96:c8:2e:18:
e1:63:d8:2c:5a:5d:75:47:39:14:13:6e:18:72:2c:9c:a9:d0:
35:cf:c5:d0:f4:35:fe:8c:f2:79:3b:51:a5:90:40:07:0c:b1:
ea:72:2f:da:70:bf:cc:12:ab:6a:77:b0:44:62:02:32:3f:66:
b0:97:ff:90:75:75:bb:60:96:a0:f7:ff:b1:1f:43:b6:f9:9e:
83:b6:ea:7d:6f:8c:d2:1d:57:bf:52:ac:b5:e8:27:ff:da:59:
84:11:79:de:f6:29:a2:fb:05:ed:a9:31:be:90:85:85:d7:2b:
7e:08:02:19:2c:95:16:57:b0:16:44:cd:f5:ca:6a:5e:2a:ab:
bf:64:73:48:67:5b:46:38:f1:9f:c2:e1:39:0b:d2:ee:7d:26:
07:c6:db:4d:70:35:d9:f1:c1:f6:e5:5f:9a:18:60:85:c9:8c:
3a:ad:37:47:fa:8c:91:8a:07:d5:a5:8a:5d:36:bc:5d:be:6f:
30:5d:50:0c:f7:6e:0f:25:a3:20:c5:17:06:5a:b9:70:49:f4:
ee:b8:f6:0e:e9:0c:67:e2:cd:a6:56:2f:76:97:40:2c:c6:7c:
40:82:00:5f:ab:d1:21:91:4e:fd:24:12:05:c0:b7:c0:e6:9e:
78:a5:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:49 2024 by rpki-client on console-ams.rpki-client.org