Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/e9KYUE2omUO6Ck3FTF1WbSy8FAI.roa
File: e9KYUE2omUO6Ck3FTF1WbSy8FAI.roa (raw, json)
Hash identifier: 1ayKAIro+9y2pPZ9QHylxhgxRN7lFT48E5FaL6yuYBU=
Subject key identifier: 7B:D2:98:50:4D:A8:99:43:BA:0A:4D:C5:4C:5D:56:6D:2C:BC:14:02
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e9KYUE2omUO6Ck3FTF1WbSy8FAI.roa
Signing time: Sat 20 Apr 2024 04:53:27 +0000
ROA not before: Sat 20 Apr 2024 04:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17590 (0x44b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 04:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7BD298504DA89943BA0A4DC54C5D566D2CBC1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:d1:bd:ce:0c:7a:88:0d:86:f1:2c:9d:d2:
2c:66:b6:96:e5:41:13:7e:03:d8:24:d1:05:17:57:
2e:c1:fc:76:de:4b:68:dd:35:ab:c8:d0:54:b5:b0:
ef:ed:52:a4:9c:23:d7:58:cc:64:20:42:cf:05:b2:
a9:67:f8:dc:13:21:5d:c8:76:e4:9a:54:60:ca:77:
b5:04:ae:31:70:56:90:d8:a5:42:06:83:9e:4d:bd:
1d:8a:d6:74:15:1b:09:25:8a:01:30:c3:ad:a9:57:
dd:f7:33:e5:a4:c2:76:44:63:20:71:b1:3d:e9:22:
09:bd:20:e6:ef:c3:01:9b:e5:9a:39:24:1f:58:99:
0f:ab:27:3b:d3:e8:b6:52:96:3c:e1:36:58:f2:66:
ab:86:3f:97:e2:ff:ff:65:8a:2a:51:a1:b4:9d:9f:
45:3f:91:86:52:8e:41:ad:67:ca:bf:9c:d8:cd:64:
32:27:7d:44:e1:1f:21:34:fc:0f:ec:0f:a8:43:9d:
48:64:6b:6f:85:3e:64:e7:4f:8f:43:3e:e6:d9:08:
ee:50:af:2d:56:aa:97:af:b8:c9:70:4a:38:30:73:
52:6b:16:95:51:a6:8d:a5:6f:f0:41:f5:80:dd:d1:
21:1c:3b:48:de:ce:2f:f8:70:ff:66:10:2c:d8:96:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:98:50:4D:A8:99:43:BA:0A:4D:C5:4C:5D:56:6D:2C:BC:14:02
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e9KYUE2omUO6Ck3FTF1WbSy8FAI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:60:5d:b2:37:b4:13:1a:cb:04:72:2f:52:d6:0e:fe:38:9b:
4f:97:c5:51:b4:bc:a3:05:d0:7e:22:29:db:b9:ac:aa:d8:cd:
17:b4:f2:1c:2a:3e:ae:65:68:96:28:8b:d4:fd:04:e3:d5:af:
59:fb:43:a7:82:db:e1:a1:84:fb:57:ad:1f:a9:ad:b2:58:eb:
e8:16:fe:11:a2:c3:64:c4:c4:c2:d6:a7:60:c9:bc:d3:95:15:
28:e9:4d:a2:df:c4:3b:e6:50:39:9b:76:97:ba:22:b7:8d:69:
8d:22:6f:63:7a:85:13:f9:59:12:c6:a9:8d:b0:c2:7c:11:33:
b0:62:47:c8:56:14:55:6d:44:b5:30:cd:dd:09:94:f6:2a:c9:
b3:80:77:06:93:88:b6:b3:9b:b0:f3:01:c5:31:66:05:cf:89:
61:ba:a6:f6:34:78:cf:82:38:71:01:62:05:7c:07:e2:38:8d:
ba:d8:39:ff:65:05:67:9f:8f:cc:76:62:93:8b:fd:97:a8:3e:
12:79:1a:6a:f2:72:25:4c:b8:c6:71:05:2a:b4:0e:9a:36:9c:
cc:ec:a0:00:78:7b:cf:e4:f1:ff:2f:0c:9f:8a:70:64:12:59:
69:c5:36:05:63:78:8b:70:4e:45:72:f8:27:d0:e6:c7:7f:e8:
1e:2f:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org