Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hwO9DEMEWQ9_dkly_xxgbYtKDS8.roa
File: hwO9DEMEWQ9_dkly_xxgbYtKDS8.roa (raw, json)
Hash identifier: Os+PpaeEv4fJfEWJzLxcqRG7YxMLERiDn9ZhvJeDvmY=
Subject key identifier: 87:03:BD:0C:43:04:59:0F:7F:76:49:72:FF:1C:60:6D:8B:4A:0D:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C2E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hwO9DEMEWQ9_dkly_xxgbYtKDS8.roa
Signing time: Mon 08 Apr 2024 19:53:00 +0000
ROA not before: Mon 08 Apr 2024 19:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15406 (0x3c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 19:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8703BD0C4304590F7F764972FF1C606D8B4A0D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:41:cc:5a:fd:e4:5e:a0:5c:0b:95:26:3b:
40:a5:5b:88:e6:78:e2:af:56:e4:09:53:b2:05:13:
ff:60:f1:89:b5:ce:24:1c:37:73:c2:88:cb:ea:b6:
b6:d9:da:5f:37:3e:19:13:99:6b:2b:48:47:bd:fb:
27:12:f3:32:79:3a:95:3f:f8:ed:f2:07:62:d3:b8:
b5:ab:29:9b:d6:6a:12:05:7e:eb:37:2b:16:1c:da:
33:5a:49:a9:a7:5a:73:7a:dd:7e:6f:c6:85:2a:91:
2c:09:96:fa:dd:66:58:80:d8:ab:a7:fa:dc:9c:5f:
cf:72:55:b5:fd:e2:83:98:b8:26:e7:64:b8:d7:44:
7f:61:21:72:59:f6:00:aa:f5:3d:c1:c5:62:59:a4:
79:aa:af:7e:fd:f6:e0:4b:27:8b:42:57:e2:69:20:
4d:ed:bc:cc:fb:54:a9:a1:4c:07:14:22:0c:b2:49:
69:10:e8:07:92:0a:46:8c:cb:a5:00:36:ec:d5:4b:
ac:db:07:25:4a:72:4d:97:28:80:8c:11:5d:50:d1:
f2:86:d7:f5:85:d9:91:a6:a9:fa:04:32:71:7a:32:
ab:d0:0e:4a:b7:1a:ce:2d:26:54:85:83:91:69:33:
35:f0:2a:fb:eb:61:e7:51:35:da:01:58:12:bc:d8:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:03:BD:0C:43:04:59:0F:7F:76:49:72:FF:1C:60:6D:8B:4A:0D:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hwO9DEMEWQ9_dkly_xxgbYtKDS8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:76:7b:93:60:c5:68:bf:78:10:6e:5b:4d:41:05:3e:3a:8a:
8b:3a:52:87:08:43:b2:e0:8c:76:1d:2c:6d:28:1e:52:2f:c6:
6b:06:9c:cd:14:56:4f:1e:e7:38:59:00:df:c6:a8:e3:87:89:
3c:c9:e6:f5:81:36:8c:65:5d:27:b6:d5:70:2b:76:e0:e1:25:
d9:30:64:ee:e5:d7:cf:75:02:bc:15:58:36:cf:ab:62:5c:14:
94:a6:29:90:63:e4:be:89:93:c1:bd:ec:a3:38:f5:ca:d1:92:
74:16:6b:bf:42:15:78:b4:1c:cf:58:be:f0:a6:8a:0f:ef:d0:
77:45:b8:1d:45:0f:b4:03:c8:34:b2:3f:d8:a7:37:9b:ee:d6:
4c:d3:7e:57:8d:60:47:bd:3f:0b:2b:cf:46:27:4d:90:dd:9f:
32:f2:f4:ab:b6:ea:c6:d0:f6:91:f4:3f:d3:5d:fe:d4:a8:15:
e9:52:1f:30:95:dd:d3:b8:05:83:24:24:58:37:9e:df:a3:b8:
c2:5b:fc:a0:4d:d0:ad:da:48:90:92:34:ef:e9:da:eb:7e:8a:
93:56:99:85:43:0d:0f:bb:95:ef:d2:b0:9d:af:e0:84:b7:98:
38:0f:f8:d3:76:41:26:f3:d2:58:d9:f4:66:9b:06:7a:9a:b5:
92:18:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org