Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mv_IBbCXbELrSWqDSYTcsS--SJI.roa
File: mv_IBbCXbELrSWqDSYTcsS--SJI.roa (raw, json)
Hash identifier: MuK4TXJrmZB3r3aUprJVxkG1WN326ZkL597nDug4f2w=
Subject key identifier: 9A:FF:C8:05:B0:97:6C:42:EB:49:6A:83:49:84:DC:B1:2F:BE:48:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F4A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mv_IBbCXbELrSWqDSYTcsS--SJI.roa
Signing time: Fri 12 Apr 2024 23:22:50 +0000
ROA not before: Fri 12 Apr 2024 23:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16202 (0x3f4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 23:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9AFFC805B0976C42EB496A834984DCB12FBE4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:79:f0:21:55:3d:9e:a0:1e:24:0b:02:88:
ea:8a:24:d2:84:d2:c2:62:11:f0:2b:2f:cd:3f:96:
6f:c9:51:6f:9e:ca:d3:8f:52:be:60:4b:4b:c2:17:
9c:05:19:d5:51:f7:a9:07:44:33:0a:5e:6c:4d:cc:
5c:bd:f1:57:a6:2a:f0:bc:0f:d3:ca:70:df:65:d8:
d6:ff:6f:37:bf:7c:be:10:ab:10:cc:4d:1c:2d:c2:
1e:5f:d5:c6:a3:bf:06:c3:1c:b9:dd:58:60:12:e4:
82:79:6d:10:0e:c2:3c:87:f7:51:27:91:1e:bb:88:
41:be:89:c4:a6:05:50:72:63:d0:b2:f7:e8:05:6f:
95:19:23:e2:a0:1a:9b:f6:94:65:eb:da:0f:ec:1a:
f2:18:33:85:21:0e:95:ea:8b:3a:59:d4:f1:ae:a2:
81:7e:94:25:da:b2:f2:ee:19:e8:be:6f:0a:e8:77:
f3:b5:f4:4b:29:a9:8d:71:d4:96:73:2e:53:a9:1b:
41:a2:96:99:ac:0f:79:e1:17:2b:10:0f:c0:7d:88:
c1:4f:4b:4c:7a:9b:a8:26:ce:72:1c:c2:82:39:6c:
0d:79:d1:5d:e7:ed:74:b1:ac:d3:1e:de:ce:12:17:
43:78:98:6e:4c:5d:5f:51:ff:18:cf:57:2b:f5:c8:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:C8:05:B0:97:6C:42:EB:49:6A:83:49:84:DC:B1:2F:BE:48:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mv_IBbCXbELrSWqDSYTcsS--SJI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:be:80:8c:e0:c9:64:98:2b:94:d7:70:f7:97:c8:95:2a:ee:
af:ad:1b:aa:c2:3c:f9:89:29:28:8c:63:f9:55:71:7b:3d:8d:
48:62:82:6b:78:c1:df:85:84:1d:52:e0:c5:0d:a7:c7:be:78:
ae:a0:8b:d5:d4:0c:9c:38:2d:4e:b2:e3:6a:0b:0e:d3:ed:78:
7d:bf:b7:dc:f8:f2:47:26:0b:da:d8:ae:75:14:3e:68:ae:d7:
5b:e1:7f:f4:c5:b9:c6:25:ac:3c:c6:e6:c6:11:67:0f:9e:a1:
9b:4c:10:d6:fe:17:93:75:20:f7:93:31:17:bc:39:ad:78:1b:
93:5b:63:d1:90:c4:4a:a0:17:da:78:0a:ba:7e:04:8f:3b:dd:
fa:f4:a8:63:8f:c3:90:24:97:8c:e7:aa:a1:b7:a9:e7:df:04:
55:f3:73:67:5a:c9:57:00:10:94:d5:13:ec:7e:0d:43:c9:44:
82:97:69:c7:b8:df:ec:27:ae:a3:08:61:b2:c9:f6:eb:3b:27:
7b:22:42:fc:1b:11:14:d9:bc:0d:cb:e6:e9:0d:2b:7a:c0:09:
95:34:5c:65:9d:02:b8:43:55:58:07:29:9b:5d:7d:17:5b:48:
ab:cd:bc:6e:6c:10:32:48:ac:ef:14:bb:b2:3d:e8:de:00:9d:
95:e7:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org