Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r7pji_oIW2T7hoLY0Tgt9X_Rh4g.roa
File: r7pji_oIW2T7hoLY0Tgt9X_Rh4g.roa (raw, json)
Hash identifier: RSp3rEQ/f0eUOOzl4KS28ozOsTvkJmq2xHl1iKv5oD8=
Subject key identifier: AF:BA:63:8B:FA:08:5B:64:FB:86:82:D8:D1:38:2D:F5:7F:D1:87:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 409A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r7pji_oIW2T7hoLY0Tgt9X_Rh4g.roa
Signing time: Sun 14 Apr 2024 17:22:52 +0000
ROA not before: Sun 14 Apr 2024 17:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16538 (0x409a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 17:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AFBA638BFA085B64FB8682D8D1382DF57FD18788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:fe:8a:17:41:d9:ea:e7:ee:ec:7d:75:60:
1e:45:bf:b9:27:ba:dd:bf:0c:c8:a7:de:be:6a:7a:
c5:58:35:83:d3:a0:33:ab:1e:97:39:31:26:7d:34:
89:82:86:67:0b:fb:18:6c:85:eb:94:18:8b:06:6f:
31:7c:e6:42:f8:5f:3c:66:29:7f:f3:01:7f:3c:25:
83:61:9e:40:f8:56:ad:f4:b1:56:4a:02:29:85:2f:
5f:2d:62:74:ab:30:eb:16:bc:e3:78:00:55:21:0d:
73:21:f0:aa:78:67:e0:a3:0f:3e:4a:2a:b9:1e:b0:
88:2b:98:62:ff:a3:88:a1:f0:50:f8:80:5e:32:bf:
e5:35:09:2b:0e:0c:bb:8b:4a:0f:30:93:a9:7d:6f:
bc:d5:2b:ae:83:09:5a:ba:57:1f:7d:c1:5d:8e:8a:
69:ba:26:cf:5b:34:83:de:fc:0d:af:9a:25:47:ff:
ab:e3:12:5c:16:9e:44:27:de:92:c3:88:b9:c6:9b:
86:dd:2f:7e:d1:e3:9a:c6:ee:34:0b:7d:3d:2b:65:
bb:2b:93:e6:a7:94:2a:99:4c:c0:3a:e0:13:75:24:
bb:58:e7:56:20:dc:f5:f0:61:87:5d:55:38:23:dd:
0b:df:0d:fa:f4:7c:c3:91:fd:f7:8c:e6:0c:c0:d5:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:63:8B:FA:08:5B:64:FB:86:82:D8:D1:38:2D:F5:7F:D1:87:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r7pji_oIW2T7hoLY0Tgt9X_Rh4g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:93:8f:d6:72:84:73:2c:69:6c:0a:e9:18:89:5e:e9:46:46:
70:08:21:dd:f2:7c:14:f5:8f:7f:02:b9:ee:3c:3a:44:11:73:
c4:d5:fc:5d:4d:69:e8:51:80:42:24:84:5e:7e:05:dd:c1:f0:
57:66:7e:8b:e7:5f:66:ec:29:01:21:92:ed:19:10:df:3e:50:
0a:2f:0a:28:7c:f5:92:2c:79:85:31:90:5a:6c:3b:48:30:24:
13:7d:09:25:1e:c0:52:8f:08:72:38:7d:fb:14:1c:78:0c:5d:
f2:b5:50:1f:7d:55:47:7c:08:16:89:92:ed:7e:09:8c:7b:61:
a2:63:78:65:88:be:be:f5:ba:f4:ea:81:a8:02:38:52:0d:7e:
0a:92:22:56:be:9a:8e:e8:86:bf:05:63:8b:20:b0:fc:a4:21:
c7:02:4b:08:cb:25:e0:42:d0:03:0c:24:88:31:cb:32:a3:be:
93:77:ea:47:d6:ad:62:e8:f2:92:24:c8:8c:81:32:0c:e3:33:
80:f1:12:9c:23:f1:fa:f6:64:7c:28:ca:6f:72:32:f7:93:42:
7e:5c:b5:13:9f:86:44:37:ed:95:a9:75:34:bf:c1:20:52:ea:
37:3a:33:c8:18:a6:e8:ff:c9:8c:a1:a4:a6:b6:fb:ed:b1:e2:
45:e4:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org