Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qG1_a2phQd2feQROkLwBR5ipouc.roa
File: qG1_a2phQd2feQROkLwBR5ipouc.roa (raw, json)
Hash identifier: NyKK1B5IDt9N0Ml1rqz1WwZobM53dYdgfNYvHf1yIQI=
Subject key identifier: A8:6D:7F:6B:6A:61:41:DD:9F:79:04:4E:90:BC:01:47:98:A9:A2:E7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F7A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qG1_a2phQd2feQROkLwBR5ipouc.roa
Signing time: Sat 13 Apr 2024 05:22:50 +0000
ROA not before: Sat 13 Apr 2024 05:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16250 (0x3f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 05:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A86D7F6B6A6141DD9F79044E90BC014798A9A2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:07:07:cf:2d:ca:d4:b7:41:19:b9:81:87:
45:54:a3:ad:98:a8:c0:76:46:18:e0:e2:68:9a:ac:
20:a8:fb:9c:06:30:8b:d8:81:64:74:3c:cb:1c:96:
f4:df:d1:cf:cf:f2:1d:98:d4:bf:8a:45:f9:d7:c1:
50:9b:ee:58:49:0a:7e:14:00:1a:33:5d:2d:28:b3:
25:c5:ab:42:93:1f:3e:a5:9d:3e:74:c9:77:00:11:
30:09:63:54:9a:59:e3:99:69:22:90:6c:5e:fd:ee:
c0:35:d6:65:83:5b:ae:d9:05:d8:30:3d:aa:60:78:
96:e5:40:40:b6:46:80:77:35:9c:74:90:8c:fb:3c:
14:4e:00:95:41:4a:17:72:e2:6c:72:04:85:b3:7e:
3f:dd:bc:fa:cb:84:7e:4c:e3:cb:fa:8c:86:dd:9c:
7b:98:11:29:4a:79:6e:f9:08:1c:f6:60:9d:7e:20:
fd:1c:99:45:1e:05:fc:0a:66:1d:5d:5b:b1:99:38:
d1:54:96:33:af:a0:13:57:c8:ce:ca:95:cd:b6:d7:
b7:c7:91:e8:df:0d:bb:ec:f3:a8:19:e6:08:c7:0c:
7d:a0:bc:b0:aa:85:92:4c:5b:12:ab:9e:62:bc:59:
a9:3c:fe:b4:85:8f:8f:8f:7f:ae:d9:16:fb:1c:9d:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:7F:6B:6A:61:41:DD:9F:79:04:4E:90:BC:01:47:98:A9:A2:E7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qG1_a2phQd2feQROkLwBR5ipouc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:4d:1b:a7:dc:0e:df:db:fc:45:fd:af:92:bd:11:ab:3e:06:
a8:3a:df:10:5f:20:12:66:ee:97:f4:59:28:8f:a5:e3:d0:bc:
89:aa:c5:a1:c6:9e:2f:40:70:b3:99:67:f0:61:4d:69:92:f2:
60:81:94:bc:c1:61:18:5b:ef:b9:14:71:6b:43:69:5c:ef:bf:
3d:fc:91:80:d6:7b:1d:4c:68:a1:59:fa:08:4a:3c:1c:12:88:
4d:26:60:1c:48:18:11:b2:8d:10:04:33:5c:b7:db:60:bd:70:
16:ce:1c:8a:43:bf:b9:5b:a7:7d:09:eb:2a:33:a6:b6:ed:30:
8b:5d:e1:92:8e:d3:df:d1:47:28:4b:11:f0:56:8e:a3:ef:ea:
85:47:f8:e2:5d:9f:89:b7:52:f8:54:e1:78:70:e6:9a:c7:5c:
88:f6:9a:1a:73:23:25:dd:c2:24:f5:ef:55:a9:13:81:2f:cf:
d8:b0:91:e7:51:2f:41:d9:d9:74:23:4a:66:36:9f:07:e0:be:
a4:e7:ae:87:46:74:ab:54:0b:bc:fc:17:99:8a:f0:4e:44:6f:
ce:b9:c9:e6:58:41:cc:30:b0:6b:d7:d4:e7:50:7a:b0:cb:8a:
2c:8d:e7:d8:b3:bb:25:ee:28:54:a0:62:11:cf:fa:d2:67:09:
ce:33:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org