Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dPNtv2LwlG_3cpBPbI6E_FMDTnE.roa
File: dPNtv2LwlG_3cpBPbI6E_FMDTnE.roa (raw, json)
Hash identifier: 2nRCDlou+yQjDcFJeLNdnAlq26txzTRB6xiYvlo8+6M=
Subject key identifier: 74:F3:6D:BF:62:F0:94:6F:F7:72:90:4F:6C:8E:84:FC:53:03:4E:71
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dPNtv2LwlG_3cpBPbI6E_FMDTnE.roa
Signing time: Thu 04 Apr 2024 03:52:22 +0000
ROA not before: Thu 04 Apr 2024 03:52:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14510 (0x38ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 03:52:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=74F36DBF62F0946FF772904F6C8E84FC53034E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:6e:a3:b5:8b:69:50:7e:d5:77:95:32:87:
17:94:2f:d3:3b:d1:3d:0a:44:b4:5e:2c:94:75:fc:
75:f9:13:88:f9:6c:b4:a5:e3:ab:84:3c:5e:d4:ef:
b5:65:2a:93:b6:9c:d7:6f:da:6d:9b:14:f6:0b:4a:
a0:4e:b2:25:27:49:ec:df:50:7a:57:6b:b2:3e:18:
42:41:06:ae:63:78:69:7e:20:09:6b:c0:68:2f:59:
da:f0:51:a7:d2:5d:2f:0a:d4:82:5c:c0:4f:44:e1:
e3:ec:76:69:24:65:61:af:e5:25:38:0c:43:40:fb:
55:83:4b:c3:70:6d:1f:84:20:79:07:38:a4:77:39:
41:de:db:45:4f:e7:60:ba:27:4c:09:77:e3:5c:32:
47:a7:1a:c0:35:03:10:0e:c8:cf:4c:76:d5:98:68:
b0:2f:84:55:81:e2:a4:bd:df:89:78:c0:fb:41:9f:
10:e3:c7:81:1c:9e:ed:f5:a2:52:e4:70:ba:2b:03:
fc:8f:3e:d4:ce:c3:05:84:ad:a3:e1:47:2a:56:7c:
2a:18:2b:cd:22:39:ac:6a:67:88:8a:3c:c4:2e:c9:
fd:52:fc:4a:4c:0a:6e:85:48:92:95:54:26:e4:59:
f3:4d:25:47:3c:1b:a6:f4:07:b6:69:9c:21:28:b4:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:6D:BF:62:F0:94:6F:F7:72:90:4F:6C:8E:84:FC:53:03:4E:71
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dPNtv2LwlG_3cpBPbI6E_FMDTnE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:2e:a6:d6:2a:89:96:9a:d5:06:c4:cb:c0:1d:e1:1a:74:6e:
cc:2c:3b:0a:0f:05:71:e7:fe:8d:ba:28:48:45:6c:8e:a0:3d:
b6:14:7a:0f:05:1f:b9:9f:7a:b2:42:05:8a:18:a7:e8:1e:e8:
66:ce:18:38:73:3e:fc:08:6f:47:42:91:fc:55:cb:cf:8a:fa:
3e:88:ac:54:b9:36:9c:eb:43:55:46:d3:3c:a4:fd:d5:93:89:
f6:43:2c:c8:bf:89:19:08:55:d0:e9:ca:85:97:95:be:b5:22:
eb:53:e9:20:57:c1:8a:2f:3b:8c:20:70:21:1f:98:d9:2f:87:
d3:7f:e4:86:e7:04:66:0c:b2:37:3c:b2:eb:e5:6e:5f:08:16:
57:db:be:4e:d4:15:10:82:91:ce:82:5f:08:5f:5b:e0:08:27:
74:54:23:29:02:7b:e9:63:05:71:71:61:87:90:b5:ce:c6:4b:
1a:50:29:cb:7f:db:d5:84:db:ba:51:5f:eb:6b:91:35:e8:22:
f4:95:2f:ce:03:98:3d:98:b2:13:bf:0b:0f:cf:62:c5:6e:80:
11:fc:da:63:69:17:b9:77:43:d4:e4:16:dd:77:82:55:ae:7a:
17:ff:18:54:1a:44:2e:30:b3:12:51:11:45:16:5f:04:31:ab:
39:59:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:57 2024 by rpki-client on console-ams.rpki-client.org