Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gswf8-I_VGwIG_-lFB87oklcgNY.roa
File: gswf8-I_VGwIG_-lFB87oklcgNY.roa (raw, json)
Hash identifier: f8nWuQgQiAyjgKDXptYSduJ0FXC7cPV93LeX/24bq2Q=
Subject key identifier: 82:CC:1F:F3:E2:3F:54:6C:08:1B:FF:A5:14:1F:3B:A2:49:5C:80:D6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gswf8-I_VGwIG_-lFB87oklcgNY.roa
Signing time: Fri 05 Apr 2024 18:52:54 +0000
ROA not before: Fri 05 Apr 2024 18:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14822 (0x39e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 18:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=82CC1FF3E23F546C081BFFA5141F3BA2495C80D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:19:5e:c4:ae:2f:bc:97:fc:14:de:af:fc:
0f:72:bc:06:cd:8f:46:33:4b:98:ec:60:ad:d7:6d:
c5:c5:9d:bf:7d:10:73:6d:7a:a7:e9:64:0b:04:12:
86:a3:f1:39:13:f0:92:be:0f:8b:70:ac:b7:c8:06:
60:85:b1:38:23:5f:a8:1f:00:20:55:bc:f5:91:ad:
1e:bb:63:c7:4c:75:e5:21:b9:bf:a1:d9:61:c9:2b:
37:17:ce:94:c2:f8:c8:8b:cb:fc:72:25:bf:c7:0a:
da:e3:51:f7:2f:0f:70:6d:66:7a:be:fc:f3:26:37:
3f:f5:b6:ba:07:e2:12:59:21:4a:4c:9d:bf:bc:4c:
86:a6:aa:8d:1c:ef:dd:02:58:d5:85:be:6a:0b:f3:
d1:81:35:2d:48:99:b4:cf:6b:a7:6b:10:76:bd:32:
5f:f0:f6:f7:90:ba:3d:0b:8e:36:20:2f:7e:a8:5e:
ae:6b:18:5f:35:d3:ca:46:4a:9f:66:d2:be:74:11:
3f:d7:2f:a5:ab:78:63:7f:f4:6c:7d:cd:91:11:38:
e9:8c:bb:c5:02:e0:83:29:eb:d4:c5:23:2a:40:a2:
27:44:86:eb:e8:1f:07:e5:a3:bb:73:0e:b4:40:d9:
97:fe:05:e9:ee:ab:f3:c1:68:25:38:a1:be:29:0b:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:1F:F3:E2:3F:54:6C:08:1B:FF:A5:14:1F:3B:A2:49:5C:80:D6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gswf8-I_VGwIG_-lFB87oklcgNY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:4c:32:f2:ee:81:57:2c:6a:f3:58:09:7c:28:f7:63:e1:af:
d2:9f:e6:b3:1e:4a:68:81:77:cf:7d:27:4a:78:68:82:3e:ba:
42:9c:60:e3:b7:03:31:d4:cf:f3:c8:6e:74:01:72:7c:52:f0:
c2:a8:58:31:9f:07:ab:16:e9:ee:2f:e7:22:59:91:47:a9:7c:
4a:ab:b9:3f:eb:42:f7:c8:94:9f:4e:20:4a:00:d4:e4:25:c9:
33:a4:13:e8:62:3f:bb:96:7d:aa:b5:38:1d:b9:7a:0c:c9:54:
37:2f:20:6d:e3:ce:43:1d:ca:64:2d:ac:b7:ef:db:e9:b5:3d:
a5:85:f1:7d:6a:d9:44:69:a6:79:32:b1:ef:8e:8a:3e:b6:32:
02:3f:ee:49:95:7f:4d:75:48:e3:a1:52:9f:20:e2:66:d1:fd:
27:59:d7:39:a4:37:ef:0f:a2:26:b3:20:55:55:5b:47:e7:fe:
73:60:fa:f6:e1:5b:d7:1f:37:11:f5:ec:35:f7:75:31:01:0f:
ef:f9:e3:da:aa:83:bd:fa:fc:55:5d:9c:58:d6:5c:51:8f:53:
9e:ee:94:06:e5:fe:81:f6:39:a8:eb:35:c5:5e:e5:cf:a5:25:
ea:05:47:58:e1:0c:5d:e2:62:d6:c8:56:0f:65:e7:c3:b1:d9:
f4:23:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org