Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pjSBfKWYOt9J1fEmBuDZDmcpXUk.roa
File: pjSBfKWYOt9J1fEmBuDZDmcpXUk.roa (raw, json)
Hash identifier: odHd3JgxgL1bQkDmHGkK2BE0M04GmAnHuNQ8gfnyZNs=
Subject key identifier: A6:34:81:7C:A5:98:3A:DF:49:D5:F1:26:06:E0:D9:0E:67:29:5D:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DFA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pjSBfKWYOt9J1fEmBuDZDmcpXUk.roa
Signing time: Thu 11 Apr 2024 05:22:45 +0000
ROA not before: Thu 11 Apr 2024 05:22:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15866 (0x3dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 05:22:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A634817CA5983ADF49D5F12606E0D90E67295D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:9d:df:d6:99:74:8c:7f:d6:2c:f4:be:5f:
11:18:53:68:22:64:92:d2:92:73:40:c3:8b:db:57:
3a:07:92:25:e0:c3:5e:95:98:3d:fe:68:a8:22:c2:
ed:ba:13:0f:72:26:97:40:36:ff:2b:a5:e0:96:fa:
e2:8d:63:0d:03:04:40:dc:bb:4a:93:0b:81:51:64:
86:59:63:11:37:df:02:74:a6:85:ec:e4:f8:77:5e:
41:43:cd:a1:44:fb:fe:ef:ea:58:c4:39:00:3d:28:
f4:16:1d:2f:21:a3:92:a2:e6:05:01:6f:26:e8:3a:
3c:d9:42:7d:09:a8:64:03:2a:93:ae:3a:e8:aa:8d:
8e:da:75:8f:0c:e1:3a:73:2a:75:dd:53:89:fd:a3:
b7:43:39:e6:58:b1:27:93:36:5f:e3:43:77:f9:94:
9f:d6:59:b8:cb:2e:a7:ce:e6:43:f2:d4:34:89:50:
b3:3a:dc:09:60:ef:52:5e:d0:08:00:55:5f:6e:d9:
1f:c4:cd:7b:5e:60:3e:69:c1:22:4e:55:ac:67:d7:
d4:ec:a5:4b:b4:e2:d6:ad:67:ad:bc:79:69:47:13:
ec:e2:7b:eb:80:87:d5:9e:4c:de:e5:ce:4a:ab:36:
b4:34:52:18:80:18:4e:d4:1a:85:c1:9b:7e:8f:29:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:81:7C:A5:98:3A:DF:49:D5:F1:26:06:E0:D9:0E:67:29:5D:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pjSBfKWYOt9J1fEmBuDZDmcpXUk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:82:88:88:90:fe:5b:10:4f:11:5e:b6:37:94:8c:d7:be:fe:
e0:96:4a:e6:40:c6:13:66:5c:71:46:bf:62:62:24:25:70:61:
20:a1:be:10:92:d6:89:2a:b0:29:88:d5:d7:64:9b:4a:1a:c5:
8b:47:c3:34:ff:8b:b7:f3:cf:b0:4d:c0:d6:d5:a8:83:a8:b9:
c5:29:f4:a5:4f:ef:e2:84:e9:47:40:fc:aa:9a:59:d4:86:2b:
0e:bc:ea:44:ac:d8:46:d2:8d:26:90:8c:f2:df:2c:00:86:b0:
63:93:43:3c:0d:30:c6:08:59:b2:7a:f5:ee:3a:73:f2:74:10:
6b:85:b9:41:9b:46:e1:eb:3f:49:0c:eb:01:15:24:f4:7f:c9:
e8:9d:b4:c8:d7:1d:9b:d3:a1:7c:f9:e3:30:60:0b:d9:cc:77:
a6:78:5a:9f:0a:41:62:35:f7:5e:a5:ef:c9:80:75:7c:fb:8f:
da:cd:14:72:1c:5e:a7:de:69:a8:76:bb:ad:e6:06:95:02:7b:
79:d8:38:34:56:d5:a5:37:58:05:09:88:ad:35:43:93:74:73:
10:26:29:b0:63:70:39:3c:d1:7e:71:3a:84:52:12:63:d9:5b:
41:44:54:9f:7c:4f:a8:62:86:3e:6c:34:8f:c8:1f:0c:b3:f5:
91:e1:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:11 2024 by rpki-client on console-ams.rpki-client.org