Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j1jq6xFWg-vAfI93CKxPw5cjrN8.roa
File: j1jq6xFWg-vAfI93CKxPw5cjrN8.roa (raw, json)
Hash identifier: oDoLRe2p65jfO+IPULVBzqh3A+jCop6a1NpYF99aNwQ=
Subject key identifier: 8F:58:EA:EB:11:56:83:EB:C0:7C:8F:77:08:AC:4F:C3:97:23:AC:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j1jq6xFWg-vAfI93CKxPw5cjrN8.roa
Signing time: Tue 09 Apr 2024 17:22:42 +0000
ROA not before: Tue 09 Apr 2024 17:22:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15578 (0x3cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 17:22:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F58EAEB115683EBC07C8F7708AC4FC39723ACDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:a8:88:a7:f3:f2:f6:f2:b9:28:ea:ab:0a:
07:07:49:f0:89:2b:f4:9a:c5:6b:9e:1c:15:bb:f8:
ae:83:ab:95:72:6e:fb:a8:10:4b:ac:0c:0d:24:f3:
86:eb:70:b5:6c:c5:c7:79:b0:1a:c8:c9:96:ef:ba:
79:b4:f1:d0:0d:80:58:55:5a:b6:47:a4:dd:80:a0:
6d:cb:78:56:1b:d5:02:9d:f2:c5:bb:51:ba:d9:70:
60:8a:fb:5c:13:de:94:30:6c:09:0c:32:1f:15:80:
f3:67:c8:62:50:3a:97:17:ae:78:4b:f7:39:cc:c1:
9d:ce:de:bc:b8:23:5f:f5:32:46:39:3c:d3:8d:0a:
db:29:bf:05:12:cc:59:02:d3:0c:24:2c:fb:4d:a5:
bd:5e:b5:a1:6b:d1:cd:f4:a3:29:65:31:be:b9:ac:
0b:83:ae:02:f6:49:86:eb:a4:61:46:46:17:b1:2b:
15:25:c6:06:69:c8:8a:4c:70:42:78:6c:f0:20:cc:
3b:a5:02:34:57:bc:03:b7:31:fa:2f:e3:8c:15:0c:
f8:0c:82:b3:14:18:97:67:b0:4a:33:c4:29:7d:fc:
94:39:04:05:93:bd:bb:b4:72:3f:64:4d:dd:c3:10:
44:49:7b:04:65:e6:da:62:17:aa:ee:d3:d3:6b:87:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:EA:EB:11:56:83:EB:C0:7C:8F:77:08:AC:4F:C3:97:23:AC:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j1jq6xFWg-vAfI93CKxPw5cjrN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:0a:06:47:cd:17:40:97:c6:fe:39:08:a0:cb:88:e4:02:1f:
36:2f:ab:8c:4a:d5:2f:24:af:fa:73:50:12:3e:09:08:bc:bd:
d9:49:75:24:0d:15:fb:1a:ef:1b:92:c0:a7:08:af:34:87:a7:
47:a6:c7:bf:a5:09:77:2c:40:22:32:c4:4e:d6:21:7f:ec:fa:
ce:70:cf:74:93:d4:f2:de:25:cc:81:74:a8:ac:7c:ce:90:f2:
27:9f:51:ba:d4:f7:69:6f:f2:1d:eb:59:c9:dd:49:45:a0:ef:
be:63:75:65:b6:36:ca:37:ab:96:59:1e:85:cb:44:9f:bd:4b:
f9:b7:38:6c:3a:26:0b:52:47:e6:b3:b7:97:95:63:c7:9d:59:
7f:6f:99:29:94:c3:62:00:6c:70:1a:bb:97:3b:cc:2e:b9:76:
df:8b:b7:8a:91:fe:b3:42:bc:0d:e6:d7:70:a4:5e:2f:76:c8:
df:51:fd:c7:39:9e:84:1d:b3:98:cb:44:ed:cb:db:47:33:11:
e9:d9:bf:cc:79:3e:f3:a8:f1:32:ae:6d:e2:e2:d9:c8:20:e9:
37:cd:dc:e8:89:b8:cc:9a:7c:99:d1:19:56:58:ae:92:d2:12:
10:02:ca:3e:40:79:94:44:26:78:60:78:6c:af:ce:c7:04:45:
c8:f0:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org