Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_SYWytMF4f9yTdsFHmZ5T1al41Y.roa
File: _SYWytMF4f9yTdsFHmZ5T1al41Y.roa (raw, json)
Hash identifier: 4euqnzWiOOl76oFE+W+sFfa5EZmuL7TgokxiPo63tw8=
Subject key identifier: FD:26:16:CA:D3:05:E1:FF:72:4D:DB:05:1E:66:79:4F:56:A5:E3:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3892
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_SYWytMF4f9yTdsFHmZ5T1al41Y.roa
Signing time: Thu 04 Apr 2024 00:22:20 +0000
ROA not before: Thu 04 Apr 2024 00:22:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14482 (0x3892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 00:22:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD2616CAD305E1FF724DDB051E66794F56A5E356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:51:56:67:59:0a:e7:19:aa:6c:9d:d8:d7:
80:b0:3b:11:e1:f5:d7:6c:bd:0f:8d:54:f5:bd:74:
de:b4:6e:8d:74:94:4f:2f:21:12:16:da:eb:28:e5:
2c:c2:6f:b3:d3:e4:65:a3:f6:25:44:45:e7:8f:3d:
7a:8e:71:f7:7e:f7:d0:21:3d:29:97:69:6b:88:40:
81:4b:f0:b1:56:f0:2a:64:7a:37:d8:02:f2:29:92:
ca:05:46:8a:a9:d3:1c:dd:79:81:ed:db:88:c4:39:
6c:b4:b9:4c:6c:20:eb:67:40:f9:44:f2:de:b2:52:
2c:42:56:c0:79:b5:87:49:0c:80:ac:2f:d2:43:04:
d6:63:88:2a:da:c9:51:b2:db:32:c4:7a:28:d4:17:
f5:bb:bd:cf:76:0d:2a:2a:6b:b2:b1:8b:d1:d1:a3:
f0:cb:50:4e:6f:e1:1f:c4:92:83:47:1d:aa:0e:58:
cd:a4:26:9e:22:50:19:1c:7a:0a:4e:02:be:a9:df:
b0:3c:a1:ef:88:d9:41:35:66:2e:2c:b4:a9:d0:55:
20:9a:67:59:37:01:b3:43:90:1a:10:c4:96:b0:ad:
18:05:c2:d7:5f:66:35:07:d3:ca:6b:d0:a9:ab:7f:
9b:d1:2f:21:05:6f:61:c7:8e:7c:65:57:47:fc:a8:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:16:CA:D3:05:E1:FF:72:4D:DB:05:1E:66:79:4F:56:A5:E3:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_SYWytMF4f9yTdsFHmZ5T1al41Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:e1:08:91:40:b6:3b:4a:9f:4a:ad:73:30:3c:8e:45:ff:32:
2c:b9:57:cb:3f:76:f4:25:0b:42:fe:51:10:c1:fa:e0:eb:f0:
8b:92:91:a4:64:12:bd:1d:bc:f5:73:44:80:01:92:c9:d0:8f:
2b:17:68:77:60:02:22:81:2c:cc:11:2c:fc:2f:26:a6:4e:34:
52:88:e6:d8:3d:5a:de:ec:1d:05:c9:d4:37:54:0f:80:ed:e0:
b4:a6:8e:7e:b4:fc:70:37:8c:4f:b6:1a:9b:a0:c0:32:71:0e:
85:bf:25:09:d1:b2:4d:8f:36:7e:ef:f0:0f:70:98:2e:9e:b0:
b0:d0:7c:f3:ae:06:90:0c:a4:00:97:65:22:0f:2d:63:49:f3:
a2:3b:30:4a:cc:82:a5:e1:ec:80:49:0d:0c:c8:63:5a:8b:bd:
17:9a:58:97:17:e9:eb:19:56:0a:56:af:0b:e1:39:fd:9b:be:
d7:3b:75:14:f3:a3:95:a4:d2:06:f3:46:f1:55:2f:82:50:54:
e4:ee:81:4e:84:f1:7d:d6:25:4b:4c:dc:7a:12:ad:9d:14:d0:
cc:c1:45:1a:60:e1:a2:52:05:a0:cb:2f:d0:4f:b0:8a:6f:8f:
72:5a:78:f7:65:37:3c:9c:44:de:84:2b:26:44:ec:80:48:c5:
32:8e:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:52 2024 by rpki-client on console-ams.rpki-client.org