Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eOuGl3JvbsCBSN7aGZ0lNP7ywtU.roa
File: eOuGl3JvbsCBSN7aGZ0lNP7ywtU.roa (raw, json)
Hash identifier: sylSyWS5tHkZkgLnNoaI0g4zqkIOHLJHeeb3vVXcrhE=
Subject key identifier: 78:EB:86:97:72:6F:6E:C0:81:48:DE:DA:19:9D:25:34:FE:F2:C2:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D6A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eOuGl3JvbsCBSN7aGZ0lNP7ywtU.roa
Signing time: Wed 10 Apr 2024 11:22:41 +0000
ROA not before: Wed 10 Apr 2024 11:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15722 (0x3d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 11:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=78EB8697726F6EC08148DEDA199D2534FEF2C2D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:71:30:de:40:05:ea:cf:44:d3:31:ee:0b:
25:26:38:fc:88:88:88:f5:43:00:fd:b8:52:7e:e0:
fc:e0:41:cf:4b:78:6a:ea:86:49:cd:cc:f0:1a:5c:
ed:6d:5e:32:fa:fb:d9:a8:d6:e0:53:3b:ca:50:31:
74:9e:91:12:94:fb:2a:0e:66:42:6f:11:80:ec:27:
21:b6:bd:f8:26:1d:1d:e6:44:82:18:2a:b8:25:c3:
8b:07:75:ae:c6:6d:3b:d7:ab:7d:c7:c9:3a:a1:ba:
1b:27:c7:2b:e9:35:6d:12:38:ff:21:c2:3b:cf:e2:
2c:10:9e:59:bc:a5:4a:02:bf:67:07:28:d3:83:f1:
19:63:7d:d8:76:c1:eb:51:b4:06:b3:2a:eb:ab:eb:
1b:a7:ae:14:ea:94:5b:30:66:4b:c5:79:21:49:e5:
ac:d3:64:91:ec:cc:00:71:4c:c9:29:76:32:c6:a4:
70:20:33:0c:49:90:8c:96:76:a2:98:cb:8d:46:6e:
49:35:30:96:08:c2:e0:88:59:86:c6:39:42:7a:10:
3a:a6:27:08:1a:46:57:e4:5d:65:4c:15:82:8a:c7:
8b:45:45:d3:a1:7a:8b:b4:2d:01:7a:bb:ce:15:2f:
be:c6:96:59:36:c3:ea:ba:03:7a:9c:02:e7:0e:06:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:86:97:72:6F:6E:C0:81:48:DE:DA:19:9D:25:34:FE:F2:C2:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eOuGl3JvbsCBSN7aGZ0lNP7ywtU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:ed:13:7a:76:b3:01:63:ff:ef:2b:db:1a:21:12:58:26:9a:
5b:9c:64:06:3e:cd:c3:49:21:e3:fb:51:00:2e:c1:ff:76:e3:
9d:fc:5c:4b:8d:16:04:40:00:66:64:cc:35:a9:5d:0e:26:dd:
25:eb:81:02:d5:2a:5f:a9:59:52:6a:24:60:93:e7:3e:58:13:
19:a7:15:d9:08:c1:d6:99:f0:41:59:dd:71:a7:69:5c:f6:50:
09:a8:1f:11:f4:a9:86:66:71:c8:ec:c9:07:9c:9a:88:e1:ae:
56:f5:8b:01:92:15:b8:0d:46:32:3b:53:a8:b7:04:98:3c:80:
80:50:c0:ca:6b:19:cf:c8:d4:d4:28:e6:bd:03:8c:af:db:5c:
d2:d9:4e:b6:f0:82:c0:95:56:27:b7:a8:76:ab:10:8a:cd:32:
85:25:16:71:75:0c:1f:eb:1e:c5:d1:bb:1e:da:76:2e:a8:b7:
dc:aa:bf:c4:6f:e3:d0:2c:da:5b:ab:df:8c:ac:c6:b6:c9:bb:
63:a5:19:89:83:4c:f4:83:9c:b4:5d:a0:05:97:4b:9e:c8:bb:
ed:74:26:05:04:a1:2f:56:5b:20:06:5f:74:24:fc:85:dc:11:
4c:df:21:16:d5:87:39:f2:c5:f6:d0:03:39:67:12:23:ae:e6:
86:bd:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org