Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qEk6RPnUWej5a_t6XqeSvqh5RHE.roa
File: qEk6RPnUWej5a_t6XqeSvqh5RHE.roa (raw, json)
Hash identifier: GzvPf0BeDp6yoKH6uCjOA8GBFwC6AEFE78gKlzgir/Y=
Subject key identifier: A8:49:3A:44:F9:D4:59:E8:F9:6B:FB:7A:5E:A7:92:BE:A8:79:44:71
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 576E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qEk6RPnUWej5a_t6XqeSvqh5RHE.roa
Signing time: Wed 15 May 2024 03:54:10 +0000
ROA not before: Wed 15 May 2024 03:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22382 (0x576e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 03:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A8493A44F9D459E8F96BFB7A5EA792BEA8794471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:f8:27:d4:0b:7f:f1:6d:d2:7b:96:1b:0a:
ac:1b:a5:f6:1e:23:52:aa:56:e2:45:bf:36:c5:2b:
44:d8:95:f2:b5:79:81:81:7c:88:e5:d5:45:00:10:
07:d3:88:b4:38:79:3f:bc:61:13:21:4c:97:1e:46:
81:ed:44:05:e1:61:21:89:2f:fa:0b:a8:5d:f6:d2:
f4:9d:1d:70:ae:9c:0c:58:b9:80:08:9b:4d:6d:22:
85:b5:13:90:96:c8:1c:6e:4e:06:dc:8a:39:13:cd:
79:c6:a4:32:85:f5:b4:f3:79:ff:96:b6:f5:58:39:
83:f8:e7:9b:d1:c5:ad:95:78:59:28:f7:dc:8f:4d:
d2:92:87:04:79:92:d8:28:be:05:c6:6d:5c:9d:1d:
75:66:bf:f0:12:17:bf:d2:0d:24:82:5f:50:1a:af:
86:4b:97:a0:66:a9:64:4e:4e:d6:c8:bc:1e:64:04:
9d:e8:08:7a:d3:36:1b:46:16:a1:39:39:fc:d5:af:
e9:84:d5:54:c4:46:69:56:79:37:fe:26:7c:a7:c3:
56:a8:96:18:57:60:e3:79:6a:8a:4e:d8:73:01:b3:
f7:28:68:41:51:22:c3:29:40:06:20:c5:74:6b:63:
0c:43:59:50:bb:62:d4:29:22:6a:83:bd:19:b8:33:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:3A:44:F9:D4:59:E8:F9:6B:FB:7A:5E:A7:92:BE:A8:79:44:71
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qEk6RPnUWej5a_t6XqeSvqh5RHE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:53:b3:c5:fc:6e:c8:1a:c8:85:64:19:89:c7:e5:7a:c1:eb:
2a:d7:9b:f2:24:a8:97:3e:e5:22:ec:88:ee:07:42:6c:c3:38:
96:49:55:d6:c4:5d:93:c9:ad:7e:89:b4:ef:b7:65:bb:5f:70:
69:7d:c6:0f:06:2a:a2:6e:f2:ab:b4:7a:6e:89:8f:c5:15:08:
02:cd:85:b3:e5:5e:4e:d6:29:b3:31:e5:8d:d8:df:0c:9b:91:
fd:dd:c7:3e:02:56:81:75:da:c9:a5:4d:60:3c:bf:0f:f5:86:
38:3c:c7:07:c9:fa:55:9a:e3:53:cf:ef:8d:79:d7:75:fc:b8:
82:dd:44:2d:21:43:a9:e0:15:7d:00:7a:95:f4:de:56:e3:dc:
04:44:29:7c:9f:89:14:d0:9d:a3:1e:f1:bb:1a:38:c7:10:e5:
e8:7f:85:63:66:e7:92:82:db:7f:d7:72:f4:f0:14:48:ec:c7:
ac:a6:62:2c:76:31:01:0c:8f:ae:30:4e:d5:4e:4f:58:9a:d3:
64:76:63:ba:3b:2f:6a:6b:bf:7a:d0:90:ca:58:92:8c:a6:e4:
77:36:fe:79:4f:1c:94:cc:8d:7b:f5:27:76:37:d1:62:b4:61:
6a:3d:15:8b:d2:37:27:5d:39:91:fb:d5:36:92:54:e2:3c:90:
fd:b7:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org