Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/p8IDSUgSMITn_jQVt_LfTz3jiwI.roa
File: p8IDSUgSMITn_jQVt_LfTz3jiwI.roa (raw, json)
Hash identifier: UXoWJ0ULGjdcXJ2KaHbN26QiGP1WqiXJ4S7Znhb11pg=
Subject key identifier: A7:C2:03:49:48:12:30:84:E7:FE:34:15:B7:F2:DF:4F:3D:E3:8B:02
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D3A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p8IDSUgSMITn_jQVt_LfTz3jiwI.roa
Signing time: Wed 10 Apr 2024 05:22:41 +0000
ROA not before: Wed 10 Apr 2024 05:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15674 (0x3d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 05:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A7C2034948123084E7FE3415B7F2DF4F3DE38B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:5d:77:d4:c3:ca:5a:de:4d:f6:64:30:41:
46:94:aa:24:77:e2:03:ce:e1:63:a6:96:7c:e9:6f:
de:b4:cf:6b:3d:0f:d3:64:1f:15:4b:39:32:a9:0c:
4e:8a:36:db:12:b8:de:6b:c1:3e:ac:91:61:3a:94:
e0:9e:67:e2:30:6a:81:36:25:d5:76:79:fd:d7:79:
94:25:73:a2:b1:72:eb:21:31:d7:07:b2:4e:e3:e0:
b1:67:08:bc:42:39:d9:bb:8c:69:71:99:b3:ba:2c:
c3:76:49:cf:e2:f6:1f:d6:17:ea:be:8c:d8:a0:eb:
af:c4:9c:76:e0:a0:fd:0f:ec:39:2c:bb:52:37:9f:
45:68:de:58:93:e7:88:eb:e0:c8:e8:9b:8d:9c:43:
11:55:da:18:97:9c:6f:e3:8d:68:f6:d8:9b:da:d3:
4d:35:f0:bc:f2:c4:e2:13:c4:7e:5f:68:78:d1:2a:
25:45:a2:f2:ad:25:21:99:95:f2:be:b4:48:ab:3e:
86:ae:31:17:b7:ef:04:ca:c4:c2:1f:f1:8e:03:f8:
c8:f9:81:30:e7:06:0b:f7:53:6b:a9:84:1c:ba:21:
a8:8b:f4:5b:df:0b:61:5c:21:9e:5f:68:6c:1b:d2:
f2:16:7e:16:d9:5f:52:da:8d:e9:30:bc:75:98:8c:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:03:49:48:12:30:84:E7:FE:34:15:B7:F2:DF:4F:3D:E3:8B:02
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p8IDSUgSMITn_jQVt_LfTz3jiwI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:c4:ef:fb:ca:66:17:b5:f2:18:28:9f:fd:81:4a:88:34:98:
2f:8e:5c:85:dd:e7:77:65:08:5d:ca:ee:67:5d:2e:95:e5:fd:
64:c7:46:a0:4e:24:e1:fd:91:19:f3:ae:39:4b:f4:aa:6f:98:
2c:98:91:4f:ba:43:4c:ea:b4:ad:5a:54:11:66:3f:16:03:e9:
62:cf:ec:89:48:6e:17:95:ca:74:c1:54:3d:7b:d1:53:10:84:
58:17:19:6c:ec:ac:19:08:bd:14:23:87:51:59:56:71:4a:d2:
1d:28:d8:b1:c0:a4:ce:d2:8d:56:c3:90:05:57:84:09:54:93:
bd:89:fe:01:2f:2c:d3:0e:96:4a:b5:55:d0:62:dc:fd:db:a9:
a5:40:5b:7f:93:78:e2:67:4d:e6:14:9e:12:60:92:f5:ed:56:
3d:c6:00:4b:0e:ef:bf:90:09:df:21:92:45:6f:5a:da:24:a6:
4c:39:f2:0a:62:2d:8d:b5:93:65:30:fa:d9:9e:d9:92:0b:12:
20:ed:37:d6:8b:00:f9:df:06:28:c0:7c:28:01:03:be:b7:eb:
37:ea:09:7a:b7:9f:9c:9b:4e:08:f3:11:a2:cd:d6:91:ae:ac:
f0:84:d6:5d:7b:a9:7b:15:86:45:08:e2:ef:55:e1:c5:06:50:
4a:6f:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:11 2024 by rpki-client on console-ams.rpki-client.org