Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c-sCBAyyLpegyvzBRR3Ok1j_Usc.roa
File: c-sCBAyyLpegyvzBRR3Ok1j_Usc.roa (raw, json)
Hash identifier: F+OvO5yLEtX3t6UqjDey8+ex+UKOP6xo7czLfwvAQ8Y=
Subject key identifier: 73:EB:02:04:0C:B2:2E:97:A0:CA:FC:C1:45:1D:CE:93:58:FF:52:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 369E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c-sCBAyyLpegyvzBRR3Ok1j_Usc.roa
Signing time: Mon 01 Apr 2024 09:52:11 +0000
ROA not before: Mon 01 Apr 2024 09:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13982 (0x369e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 09:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73EB02040CB22E97A0CAFCC1451DCE9358FF52C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:8c:84:b5:de:19:50:e5:50:df:03:95:f5:
17:0c:96:3c:3c:f7:3b:25:39:39:66:b9:83:14:62:
40:7c:03:e3:82:43:6c:de:71:ec:3b:04:d6:4b:89:
71:d5:a4:04:3b:7f:a8:e1:1a:51:a6:94:63:7d:6f:
8b:f5:c8:05:3b:c9:13:6d:da:ed:ce:18:7b:8e:be:
33:d9:f7:52:26:d2:80:a4:6f:50:b3:f0:e4:c9:a6:
7d:1c:af:51:ce:f9:ce:53:d6:96:bf:d4:f4:66:29:
5b:71:d7:a9:2f:35:13:a8:26:81:7f:6d:d2:cc:55:
31:1a:c9:3f:bc:d0:3c:e8:22:8f:82:b5:8e:3f:6e:
06:2c:87:30:e2:af:a2:2f:4e:34:6f:02:98:65:54:
1d:ba:cf:a6:70:89:b8:bc:9e:c0:9d:b2:48:77:1b:
74:31:a7:e0:4e:4a:8f:81:8d:e2:d5:4e:d2:df:c1:
a8:82:ec:0a:b8:d8:66:7d:52:3e:5e:7b:e6:08:41:
99:61:d0:92:a8:e8:68:ce:60:f9:0d:86:b4:d4:a7:
0e:84:01:dd:72:f7:61:d2:a3:5e:57:1c:bb:6e:de:
64:63:57:ee:08:95:23:55:df:92:43:7b:1b:af:c7:
a3:e5:d4:59:62:02:0b:7a:bb:5f:d5:cf:59:fc:a9:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:02:04:0C:B2:2E:97:A0:CA:FC:C1:45:1D:CE:93:58:FF:52:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c-sCBAyyLpegyvzBRR3Ok1j_Usc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:4a:02:55:6e:95:a2:e7:2f:a5:15:04:e0:5a:e3:3e:e3:7c:
d6:84:5e:d6:f3:86:2a:d0:49:59:25:60:3d:92:43:66:4e:31:
44:27:e9:c9:4f:39:57:4b:bd:25:70:3e:c1:b2:0b:b6:e8:5a:
d9:3e:4a:1b:3f:e4:2b:0c:f1:61:34:00:3d:57:e9:bc:76:61:
07:2d:52:fd:25:3f:58:0e:e6:c4:36:3c:ad:5f:4a:31:53:07:
83:bf:55:96:75:8a:a7:59:41:a6:b6:6b:aa:48:83:ef:4e:fa:
08:69:6e:12:35:f0:98:44:7f:da:68:f0:49:1e:ac:06:01:a9:
21:48:60:ce:9c:b4:25:12:92:c5:c6:5b:20:1d:5c:eb:fe:ae:
61:84:74:ce:04:19:3f:23:12:77:1e:33:15:39:6e:98:42:a1:
48:be:9a:c9:32:68:4b:6b:52:4b:e7:e5:f7:da:70:36:69:96:
15:d1:3c:1c:1d:d2:fb:2d:ff:92:bc:99:bc:b6:76:b0:81:06:
9b:16:07:af:46:74:6d:38:43:67:7e:ac:8d:9b:96:c8:d5:c4:
38:34:7a:fd:83:d3:e1:ed:6e:6a:95:51:1b:d9:be:1f:f7:28:
61:17:f5:b4:34:60:19:d8:82:71:af:af:1b:f5:f3:1e:e9:0f:
44:04:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org