Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bNiyBY8mIRZsd8uATjBcloaI1rQ.roa
File: bNiyBY8mIRZsd8uATjBcloaI1rQ.roa (raw, json)
Hash identifier: sA6D8/dowHjzLZ2nW7NUN0I+UzIW2XAJrKrEKB55RP0=
Subject key identifier: 6C:D8:B2:05:8F:26:21:16:6C:77:CB:80:4E:30:5C:96:86:88:D6:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bNiyBY8mIRZsd8uATjBcloaI1rQ.roa
Signing time: Thu 09 May 2024 03:24:02 +0000
ROA not before: Thu 09 May 2024 03:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21226 (0x52ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 03:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6CD8B2058F2621166C77CB804E305C968688D6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:6f:fc:98:f7:e6:d7:14:13:bd:a7:57:7c:
48:50:93:c4:e7:89:74:b2:4f:59:7a:06:18:77:fe:
4f:a3:3c:80:9f:d6:af:4c:f0:3f:61:37:3f:3c:18:
d8:12:cb:3a:d9:f2:8e:46:0f:0f:5d:36:2b:74:99:
47:f3:4e:a9:a3:c8:ed:1e:19:48:df:01:a8:46:19:
16:0f:da:1c:65:17:57:db:ff:1b:99:26:b8:5d:9d:
31:3e:ff:10:39:f2:a8:e2:6b:0e:37:c2:68:56:cc:
87:7a:10:05:36:34:7a:4f:3b:7a:24:bf:aa:cb:51:
14:30:d2:c0:74:08:f7:e3:9d:fb:b5:5a:4e:95:96:
9f:dd:55:0a:19:ad:7f:32:00:7e:85:a6:19:8c:43:
7b:40:0c:45:37:c4:99:96:b7:e2:0a:8c:e0:ff:63:
d2:47:d2:99:bd:92:91:ed:4e:d3:87:7d:b5:0d:cb:
74:c5:12:45:2a:61:1d:97:ba:50:f1:89:eb:d6:a2:
6e:26:31:86:0f:12:c9:4b:fb:fc:ae:43:1a:51:88:
d7:b0:00:9a:63:2a:02:d4:50:40:bc:cf:61:35:25:
4c:70:af:63:30:09:db:6e:15:4a:47:b2:f1:06:53:
d7:40:81:a6:1f:43:fa:dd:7b:4c:ea:55:44:b0:ee:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:B2:05:8F:26:21:16:6C:77:CB:80:4E:30:5C:96:86:88:D6:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bNiyBY8mIRZsd8uATjBcloaI1rQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:59:94:95:f9:3a:35:ec:cd:2f:4f:d2:8e:f5:df:78:82:23:
eb:78:d1:6a:f0:0b:eb:e6:ee:90:ce:15:d1:08:9e:2f:92:89:
56:ef:ff:bf:68:86:1e:a1:f6:6e:e0:a4:f4:bd:ae:69:f2:05:
0c:ac:b4:8e:31:77:cd:06:e9:43:f0:de:ca:97:6c:99:32:42:
1d:6b:d3:b9:1e:07:81:d2:95:fb:11:a8:12:b2:95:73:3c:89:
f9:fd:85:5e:06:a8:43:bd:f0:a5:71:54:62:c5:3d:9f:f9:ff:
3c:b5:2f:65:83:38:dc:46:3d:bb:64:69:37:d3:37:0f:50:66:
dd:84:12:a8:6c:b1:8e:53:23:4d:9e:3a:77:6c:a8:04:3d:68:
b4:47:76:95:da:a8:67:e3:24:07:c6:de:18:9f:7c:ba:12:2c:
79:13:46:71:92:7f:7a:5f:aa:c0:0d:64:27:8e:2d:12:d7:43:
da:a6:fe:d8:f4:5f:81:7a:42:fd:72:05:7c:01:2c:4c:9a:65:
98:3c:cd:eb:b6:fe:bc:f9:b6:d5:29:df:2e:23:3b:65:da:0f:
fb:e9:2c:1f:df:cb:79:e6:36:58:f2:09:78:6c:21:11:a4:45:
49:04:7e:27:70:25:5b:0c:1e:fd:8e:e1:aa:83:81:e9:ad:55:
93:2b:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org