Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/frvftT_q6uEOg9qGWeq-hKqSVd4.roa
File: frvftT_q6uEOg9qGWeq-hKqSVd4.roa (raw, json)
Hash identifier: at/i3mkJxwvLsiebS9Z9mcT9xjIqLzpjGiD6CfnSlrg=
Subject key identifier: 7E:BB:DF:B5:3F:EA:EA:E1:0E:83:DA:86:59:EA:BE:84:AA:92:55:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56BA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/frvftT_q6uEOg9qGWeq-hKqSVd4.roa
Signing time: Tue 14 May 2024 05:24:07 +0000
ROA not before: Tue 14 May 2024 05:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22202 (0x56ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 05:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7EBBDFB53FEAEAE10E83DA8659EABE84AA9255DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:08:b5:8a:ab:81:21:27:97:5e:84:79:08:
ad:f9:66:99:c9:62:68:e3:96:d5:ac:4e:ea:ef:51:
19:ba:59:8d:91:26:ee:53:7a:d0:89:69:14:89:e3:
3f:eb:5e:a8:09:83:31:40:47:d9:f3:75:92:fc:be:
4b:76:67:b9:c1:70:93:54:dc:b9:d7:fe:17:bf:76:
5e:d6:8d:84:d4:c9:ea:d2:32:2c:f1:e5:02:58:86:
90:b9:03:e0:67:9c:51:83:62:66:2f:45:df:fc:2c:
9c:e4:78:d1:a5:a6:f5:f8:3a:05:aa:09:09:98:fa:
2c:49:94:27:44:e4:f4:e6:b9:5b:b8:d6:e6:13:49:
e8:bb:c1:c5:43:2b:17:0e:23:88:92:89:24:9c:28:
d6:92:04:89:a9:14:d2:e1:2e:50:66:32:34:b2:a3:
cd:ce:be:21:06:3a:d0:b1:4a:3b:86:cd:31:fb:40:
10:67:fc:72:ce:50:90:ba:72:5d:ef:ba:b1:d0:98:
5f:fa:e0:51:0f:fb:49:0b:aa:15:c7:c6:77:37:9c:
fc:a0:cd:11:69:00:14:36:f1:f7:e5:d3:62:0f:62:
5c:47:2e:ad:31:6c:71:cf:1f:02:f7:30:c9:87:e8:
77:ab:cd:1c:dc:22:be:d7:14:6e:d9:a8:b8:52:78:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:DF:B5:3F:EA:EA:E1:0E:83:DA:86:59:EA:BE:84:AA:92:55:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/frvftT_q6uEOg9qGWeq-hKqSVd4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:48:e7:3d:64:90:6f:f0:69:02:56:2c:48:cb:0f:5f:27:3c:
2a:68:e4:ca:14:33:4d:1b:89:78:7d:e6:e2:3a:0d:63:00:c9:
40:93:ee:85:86:5f:90:d6:ca:85:17:a6:78:e3:5a:0b:71:c8:
23:c0:c9:ee:dd:bf:90:65:7d:86:e5:5c:83:e5:c8:3f:fd:0e:
0b:6a:1e:d5:cf:72:75:63:8d:cd:a9:f0:87:c7:d9:e0:50:5f:
4a:6a:97:6c:89:38:05:40:c3:43:45:70:a9:50:e0:3e:f0:e6:
a7:b1:2c:c1:80:be:e2:38:ac:de:18:17:15:7a:f3:8d:b2:d1:
29:4c:8b:d6:c1:92:00:7f:48:4e:b2:dc:d9:e6:63:7a:12:ce:
34:e6:97:a7:41:96:2f:be:1e:41:af:35:9a:20:6c:60:7d:eb:
a6:b6:33:5a:ad:36:28:ff:1a:45:4a:c2:b7:87:39:16:d8:85:
2e:3f:96:63:ce:07:80:a6:4d:2f:c3:5f:70:7f:ec:d4:82:a7:
45:1e:9f:4a:69:95:7c:3c:98:b3:66:df:02:15:c1:a7:4c:1f:
67:be:80:24:0e:7e:9c:0b:70:56:33:5d:57:e5:ef:46:83:ea:
b8:1e:e2:29:2f:f1:e2:80:50:52:28:1a:a5:66:e2:36:67:ea:
24:e5:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org