Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dDlfUYuVWQtmr2qC1KkuveR0ljg.roa
File: dDlfUYuVWQtmr2qC1KkuveR0ljg.roa (raw, json)
Hash identifier: 4ne44Sv0xaTcy8s4+UyO1Xc0NbrvSEVLDt+ZxqX3eLo=
Subject key identifier: 74:39:5F:51:8B:95:59:0B:66:AF:6A:82:D4:A9:2E:BD:E4:74:96:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5476
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dDlfUYuVWQtmr2qC1KkuveR0ljg.roa
Signing time: Sat 11 May 2024 04:54:01 +0000
ROA not before: Sat 11 May 2024 04:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21622 (0x5476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 04:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=74395F518B95590B66AF6A82D4A92EBDE4749638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:df:57:f5:3b:31:a3:d6:43:6f:64:3d:98:
2b:40:83:1f:3c:68:94:ba:1d:fc:b2:e9:f3:c8:7e:
f8:29:53:38:e2:5e:75:75:db:ab:9b:2b:c9:06:8d:
8a:ed:a1:23:a8:35:71:e7:83:8b:62:d6:4e:cc:bd:
2b:bb:f7:57:92:e5:d9:85:24:45:1c:32:b1:7f:f8:
31:15:ea:f3:96:c9:fc:3f:05:64:ce:da:11:cb:de:
c9:b4:24:23:75:5a:eb:a1:2e:10:19:d7:b4:e2:d7:
10:3e:61:cb:06:e4:45:e6:3a:e9:4a:4a:10:c9:ee:
4c:69:87:15:ea:87:72:95:ea:11:ff:7d:f0:9a:02:
9a:31:b9:9b:7b:bf:41:61:0e:05:ee:0c:2b:eb:8a:
f2:94:ff:c3:6c:d3:cb:1f:38:2d:2c:95:72:68:06:
da:ca:e2:69:5c:b0:2f:fc:af:a1:46:6a:1f:0d:89:
18:37:88:f1:10:7e:bf:72:8c:15:da:9d:a5:a0:a2:
a4:90:26:85:b8:b6:18:3c:6c:0d:0c:02:8d:4a:21:
95:6e:b3:9b:b8:ef:74:5d:17:e3:0c:19:d4:27:4a:
03:83:1d:38:7a:9b:ef:ab:43:24:8a:70:fd:f4:63:
9a:2f:85:a7:d5:fc:27:34:b8:36:dc:a1:93:07:52:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:5F:51:8B:95:59:0B:66:AF:6A:82:D4:A9:2E:BD:E4:74:96:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dDlfUYuVWQtmr2qC1KkuveR0ljg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:e9:c2:5e:43:9c:51:34:f0:7a:3a:fc:5b:52:2d:f2:c3:b8:
b2:18:73:47:5e:de:d4:85:91:56:56:c8:58:02:c4:4c:c0:6e:
db:47:27:44:0e:d0:80:bd:67:33:73:df:07:fc:b8:9e:c2:a1:
93:65:1f:b0:d0:fd:17:84:81:b7:9e:24:40:77:d5:71:7c:f3:
77:1d:c1:91:0b:58:89:65:a2:83:41:7c:5d:41:62:45:a0:08:
87:15:06:84:7b:0c:67:7e:07:65:ad:34:06:06:c6:37:cb:12:
ee:0a:a3:bd:a1:dc:f7:82:9a:69:3e:86:b1:63:ce:82:f0:a4:
b8:ba:3c:94:2d:41:3c:36:24:71:27:d7:94:57:61:6d:51:c0:
73:16:6d:ec:27:67:43:4d:3a:51:07:25:3a:74:2b:d0:a3:7c:
f8:16:cb:7d:d6:c1:a6:f5:fb:e7:4e:33:e8:e9:c0:4b:fb:8d:
ef:c6:6b:14:5f:90:b3:8e:12:17:17:50:17:b9:4e:5f:89:ab:
dc:60:fa:be:d2:ff:0c:ca:1c:05:28:40:9e:24:1b:1e:91:69:
47:32:7a:65:22:95:b1:d9:89:74:59:3a:85:38:0a:2c:ee:49:
dd:12:e9:db:e1:85:90:94:e8:41:cd:43:16:61:60:2f:b5:7c:
98:31:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org