Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dWV_ylkqgvJOIjPqxkD6cusZDPw.roa
File: dWV_ylkqgvJOIjPqxkD6cusZDPw.roa (raw, json)
Hash identifier: 1SpaYPURYWv1ud9hUw5+7cMkvUvYOVjLRvEyKnV+udk=
Subject key identifier: 75:65:7F:CA:59:2A:82:F2:4E:22:33:EA:C6:40:FA:72:EB:19:0C:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CFA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dWV_ylkqgvJOIjPqxkD6cusZDPw.roa
Signing time: Wed 01 May 2024 05:23:39 +0000
ROA not before: Wed 01 May 2024 05:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19706 (0x4cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 05:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=75657FCA592A82F24E2233EAC640FA72EB190CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:85:3f:0a:67:a7:9e:3b:1d:6d:a5:70:d1:
5c:ea:d4:62:8d:8c:5e:9c:54:04:0f:35:63:05:6d:
8b:0b:3e:35:a5:10:8e:f9:a1:14:c1:ab:84:2a:6f:
6c:ad:ef:75:c0:a8:f6:83:b8:a1:e2:6d:83:66:9a:
37:76:71:31:26:b1:ce:f1:7f:a8:b6:58:8b:5f:92:
f1:23:8b:b8:f2:4d:fa:ec:3e:ee:6f:7d:71:8d:11:
74:52:75:b1:03:d9:30:ca:85:92:11:b5:a6:c5:b0:
56:ae:71:28:a3:8a:0f:e2:6e:90:cc:e8:61:cb:e5:
b5:0a:41:0c:36:b1:47:c6:3d:7e:85:98:a9:dd:69:
fb:71:8c:23:c8:67:07:d4:7f:94:59:0c:42:d7:3c:
35:84:83:3a:b8:c3:a6:9c:1f:9e:7b:b0:93:49:c8:
c7:28:09:38:b0:0b:f1:95:f5:ff:15:5d:1d:cf:e2:
2d:cf:b7:ce:6b:fa:2f:93:72:63:03:f8:83:e2:9c:
e0:e5:18:7b:5e:30:40:00:9b:99:a4:dc:ef:ed:6e:
84:89:7d:22:cf:b6:5a:24:e3:9f:62:61:ed:19:dc:
8b:e3:ca:ee:e4:e6:b5:fb:ba:04:28:30:b9:13:0b:
f6:cc:38:27:fd:02:df:7a:45:82:cf:ad:48:73:35:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:7F:CA:59:2A:82:F2:4E:22:33:EA:C6:40:FA:72:EB:19:0C:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dWV_ylkqgvJOIjPqxkD6cusZDPw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:76:70:2e:9b:45:c3:36:c9:9e:57:60:1b:83:03:70:c6:3b:
98:32:0b:89:54:77:68:8d:fe:9c:31:4e:af:ea:32:44:1f:62:
e6:71:8d:61:28:86:37:09:7a:4b:be:dd:52:e1:37:a0:19:ad:
43:29:eb:64:c5:3d:54:3d:b8:8f:48:2f:0e:6d:2a:22:16:b2:
bb:60:21:d3:34:5c:cc:73:84:97:d7:2a:60:c5:f1:db:d7:f7:
87:f1:4a:7c:86:61:0d:43:6f:5c:81:86:b9:32:11:f3:e9:25:
a3:a8:58:7d:27:bc:cd:7f:b1:21:c2:5f:1a:7b:8b:8e:1b:de:
dc:37:39:ea:aa:f0:ce:e3:61:8e:03:ec:6a:e0:d8:91:18:e5:
61:aa:19:f7:85:f1:19:57:92:a0:a8:69:f0:a2:9d:83:01:ea:
0e:e5:34:7f:94:8d:90:d5:0e:1b:9b:2a:5b:d6:ae:b9:ba:b4:
77:06:84:b4:03:8f:2d:3c:2f:72:ad:38:b9:e3:6e:36:6e:58:
43:a4:60:a9:64:9b:77:15:c3:00:0e:1b:4c:20:94:68:52:30:
84:62:32:39:09:e9:eb:bf:63:1a:2b:a5:78:c5:62:f7:99:fc:
c7:1e:cb:43:af:47:6d:0d:56:4d:95:04:4b:85:88:a2:98:56:
f6:39:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org