Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eCMQYDCHFy0gng3g5Bvir7bdEWo.roa
File: eCMQYDCHFy0gng3g5Bvir7bdEWo.roa (raw, json)
Hash identifier: le8e0XEG85xS3wRhAyMvMPuuTYMr/c1hBNO+3Dtgq7c=
Subject key identifier: 78:23:10:60:30:87:17:2D:20:9E:0D:E0:E4:1B:E2:AF:B6:DD:11:6A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4542
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eCMQYDCHFy0gng3g5Bvir7bdEWo.roa
Signing time: Sat 20 Apr 2024 22:23:05 +0000
ROA not before: Sat 20 Apr 2024 22:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17730 (0x4542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 22:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=782310603087172D209E0DE0E41BE2AFB6DD116A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:80:93:2e:ad:2e:d1:93:3d:f0:8d:f9:14:
12:05:12:0d:fc:ec:65:68:39:a4:6c:75:f5:95:67:
25:88:0e:40:e7:76:ad:7e:9a:62:df:02:e6:b8:d9:
ae:f7:79:e4:ec:6e:fc:43:76:b9:03:50:2a:0e:24:
6c:ac:82:90:11:e9:0a:59:33:c7:b9:87:45:f9:71:
af:c7:63:d4:6f:fd:0d:2d:4c:45:bc:52:06:46:48:
fa:72:84:25:58:9b:b7:ec:3f:5d:0e:8a:3f:e0:b7:
6c:ea:e8:8c:98:f1:58:58:fd:17:98:a1:ef:c2:63:
d1:76:6f:f3:a3:f0:1a:84:bc:39:3a:eb:77:ed:0b:
80:59:e5:74:02:b7:94:df:27:7a:fe:f5:25:3a:37:
ee:60:1c:6b:a5:5c:26:31:ed:42:aa:ea:ba:5f:39:
cf:8f:1b:d4:56:b2:82:81:96:19:6f:b7:45:c3:85:
5e:b2:93:c9:c2:72:5c:e5:66:5a:2a:a1:a1:a5:94:
fe:06:30:fe:af:d5:fb:a2:89:3a:74:5c:fa:45:75:
88:d3:2b:35:0a:f2:91:a7:18:e3:d0:72:36:7d:6d:
5b:9c:fb:e9:d2:e2:22:f0:a6:0b:db:24:af:cc:07:
5f:80:be:97:e3:86:9d:61:40:5d:d1:02:57:5a:54:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:10:60:30:87:17:2D:20:9E:0D:E0:E4:1B:E2:AF:B6:DD:11:6A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eCMQYDCHFy0gng3g5Bvir7bdEWo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:af:b0:a5:7b:62:32:85:68:f0:41:3e:7f:01:72:d5:ef:b4:
d6:d3:36:ee:31:d3:e8:41:49:e8:16:f1:33:4f:18:42:f2:17:
e6:b5:22:aa:0b:6e:64:cc:b9:49:b2:24:a4:84:35:29:51:d6:
18:73:04:2e:b0:a5:fb:08:58:98:c8:89:4b:c8:b9:ea:2e:c5:
51:c0:7f:24:b1:27:4f:3b:37:2e:ab:06:35:e6:9b:91:52:02:
07:2c:7d:19:1b:7d:62:a2:f5:be:2e:aa:d8:45:26:40:4e:47:
35:62:d4:4a:c1:09:8d:cb:97:b5:60:74:38:9e:d1:de:a8:57:
9e:40:7e:35:ef:c6:95:41:be:58:dc:99:55:71:50:41:2e:d2:
b1:a4:cd:8e:08:ee:6b:cb:7c:74:81:be:70:b5:67:6e:b2:e0:
d4:74:dc:12:7e:d5:17:b0:b6:4b:12:be:a5:35:36:7e:e1:7b:
d6:1d:64:05:39:7b:62:3e:15:2c:a0:7e:92:37:1c:9e:7b:d2:
0d:77:fa:4c:07:8c:5e:ce:ae:32:7f:32:a7:2f:c1:82:e6:21:
7c:95:c8:a2:6e:64:52:f2:f3:ed:a5:5d:74:16:be:04:9b:e1:
7f:d9:00:b0:c4:ff:87:5f:37:2a:74:2f:74:67:43:81:1d:b6:
f9:7f:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:58 2024 by rpki-client on console-ams.rpki-client.org