Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZarmCnONerIMBF5NY5Fwb1XIrYs.roa
File: ZarmCnONerIMBF5NY5Fwb1XIrYs.roa (raw, json)
Hash identifier: +yh6ZiHPhUrKfDzYAVCu1uxqqbG15S0U5T85kXl3YiE=
Subject key identifier: 65:AA:E6:0A:73:8D:7A:B2:0C:04:5E:4D:63:91:70:6F:55:C8:AD:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43CE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZarmCnONerIMBF5NY5Fwb1XIrYs.roa
Signing time: Thu 18 Apr 2024 23:53:00 +0000
ROA not before: Thu 18 Apr 2024 23:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17358 (0x43ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 23:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65AAE60A738D7AB20C045E4D6391706F55C8AD8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:03:1e:8c:67:8d:3b:28:73:ac:90:0b:14:
49:bb:55:1c:5d:54:c2:9a:db:0a:a4:07:a5:13:24:
bc:d3:5e:fd:c8:73:f0:d5:da:ef:76:0b:e9:87:df:
86:0c:cb:1c:e7:7a:71:7b:c6:76:e4:11:ce:06:71:
94:80:0d:fa:67:f4:59:e9:09:9a:18:4b:55:d0:43:
e8:e5:d3:28:9b:63:a1:37:13:77:cf:e6:a3:83:f7:
b1:af:b0:9a:75:38:62:0f:70:e5:4c:2c:4c:a8:ae:
5a:47:4b:4d:e4:4a:76:ee:ee:1a:25:c8:ab:16:22:
14:08:29:c8:83:84:f0:f1:1e:ee:54:7f:fa:6e:13:
d8:2e:92:a0:23:b7:4e:bb:85:92:0b:ad:5e:50:e6:
9c:33:1c:63:38:73:31:4d:e9:f4:cf:d6:10:23:9a:
67:ea:1c:a6:b7:90:69:fd:50:3d:91:04:eb:28:78:
7c:5e:2c:d1:0e:0c:3c:8f:0a:d4:a4:de:97:4a:25:
0f:f0:f6:6e:3b:fd:64:bb:30:1b:b7:fc:72:2a:d0:
10:4b:a5:55:75:21:89:13:0e:13:c9:94:94:fb:2b:
e0:47:c1:2f:a6:19:b8:13:ee:79:9e:6e:60:06:2f:
6c:0c:28:cf:0b:9d:14:53:a5:97:aa:25:9c:c2:3d:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:E6:0A:73:8D:7A:B2:0C:04:5E:4D:63:91:70:6F:55:C8:AD:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZarmCnONerIMBF5NY5Fwb1XIrYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:88:e1:37:7c:d7:90:2e:a2:2c:3e:f2:4d:58:e6:3c:8c:4a:
34:3c:6c:b1:85:e7:de:4b:f5:b5:ae:ef:63:bc:d0:38:a3:01:
2d:1a:eb:26:6d:79:a4:1a:04:d3:8a:81:81:bb:3d:f0:b4:da:
3e:c0:7d:76:ff:94:fd:30:42:c8:c9:45:14:b1:01:4a:b2:29:
75:f8:ee:d1:b6:a8:10:5f:e2:c7:d8:0e:b0:44:68:0f:8b:1f:
11:1f:a6:c4:dd:1a:bc:16:fc:b1:f8:45:bd:be:4f:95:67:51:
c7:53:19:b5:f2:5b:7b:33:93:b5:30:45:a8:63:48:f8:7e:6e:
4f:bd:ef:7c:2f:ff:b7:b6:ea:34:ed:48:ab:c3:18:15:e6:0c:
11:1a:83:cb:dd:2c:b2:7c:f6:96:08:f8:f1:e5:50:7d:7f:20:
bc:56:15:87:27:cc:08:1a:98:ec:06:2f:12:45:1f:a9:24:29:
a7:52:d3:f1:42:19:88:11:8a:73:17:4c:bd:32:8c:84:78:02:
d0:8e:71:01:1d:c5:14:49:b7:74:fe:b8:24:78:05:75:2d:a3:
53:0e:d9:ac:83:0a:0a:2c:27:12:c3:46:b0:a3:0b:a3:36:4b:
36:86:fa:04:31:70:0d:97:09:4b:87:3c:e0:14:40:74:bb:a4:
b5:a4:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org