Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bZg69VKA7OGDikuOgXc1i3QOC4c.roa
File: bZg69VKA7OGDikuOgXc1i3QOC4c.roa (raw, json)
Hash identifier: U7VwqDdFWS2WcLSCghELKfNQgnGm90rR6PCPKSE2Fwc=
Subject key identifier: 6D:98:3A:F5:52:80:EC:E1:83:8A:4B:8E:81:77:35:8B:74:0E:0B:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bZg69VKA7OGDikuOgXc1i3QOC4c.roa
Signing time: Tue 07 May 2024 21:53:56 +0000
ROA not before: Tue 07 May 2024 21:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20990 (0x51fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 21:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6D983AF55280ECE1838A4B8E8177358B740E0B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:09:1a:60:4e:05:32:ed:5a:c6:d7:55:55:
b2:35:eb:8e:2a:8b:75:c2:57:e2:7f:e4:f3:af:28:
92:62:0a:0a:c6:ea:0f:f3:06:52:fa:1a:d6:89:0f:
c5:9f:66:3e:c1:c5:1f:6c:b0:cb:0a:dd:e4:66:8e:
6a:ba:df:db:bc:9b:f0:3b:e8:fd:f6:73:86:30:d3:
52:14:ad:85:58:7e:60:fb:49:e6:8f:8e:70:04:18:
ae:11:f2:7c:19:54:80:16:85:c1:db:82:a6:88:d2:
08:36:63:f6:86:d9:d8:b1:3b:4b:d7:53:d7:3a:71:
4e:e5:9d:4e:0e:88:b9:bc:2c:c9:74:31:67:e3:7f:
49:d2:8b:f3:d9:c0:28:d4:f3:33:98:e0:0a:44:91:
65:51:9d:48:bf:61:ee:5d:f0:92:83:00:a4:c2:ae:
76:b7:b3:64:14:85:aa:00:5c:14:1c:7b:c2:60:4c:
fe:58:19:b7:9d:30:4c:a8:40:67:ac:13:21:52:ea:
32:b6:87:73:b0:ea:49:06:93:cb:6a:84:49:8e:e8:
4a:18:7c:11:82:5b:5b:fd:a8:9a:db:ea:36:34:8f:
f2:d8:60:f5:56:6b:a5:9e:e1:28:26:0b:45:db:a4:
b6:f0:b2:b5:08:0d:b7:8f:d9:5a:af:02:2b:2c:be:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:3A:F5:52:80:EC:E1:83:8A:4B:8E:81:77:35:8B:74:0E:0B:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bZg69VKA7OGDikuOgXc1i3QOC4c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:4d:49:b6:c1:bb:7f:50:d4:44:a6:33:04:96:a8:bf:5a:60:
c6:85:b5:f0:14:4e:e3:4d:aa:b7:1f:2b:5f:81:dc:ee:8a:dc:
12:96:3f:5b:a2:c5:0e:8c:7e:47:c3:62:a8:42:cc:4a:59:9d:
ec:2b:b4:f2:eb:ab:5c:66:84:4a:0f:83:76:12:54:a3:6b:5d:
77:bb:7e:2e:e3:69:11:8d:de:84:8e:8e:15:43:dd:1a:d0:b1:
cb:2f:02:df:7e:2e:96:c6:05:e3:bb:59:70:bd:ae:72:ec:fb:
78:76:1d:03:1b:97:f8:9b:b7:e1:9a:c8:22:75:b4:b8:fa:3f:
56:48:dc:97:d8:7c:ae:64:98:fb:c0:ee:20:54:87:57:e1:33:
dd:af:eb:c8:9e:7e:44:a5:56:c2:97:24:71:f6:de:4d:d3:bd:
df:c1:b9:31:33:91:71:a8:98:6e:b7:3f:15:b6:ac:f9:95:6d:
8e:fa:f5:76:72:5c:ae:80:ed:c1:b9:61:bf:03:c0:2e:5c:91:
2c:82:49:98:14:0b:0c:9b:6e:72:fb:cc:56:02:da:06:8d:01:
32:f5:48:97:88:29:d7:d2:d8:81:65:3b:ea:ca:c7:24:3f:c0:
51:7c:02:bc:e3:7e:cd:fb:e1:fa:99:47:bf:07:4b:74:26:87:
9e:8f:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org