Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/simhayyhchpwAxgmf_6AtPf8rJI.roa
File: simhayyhchpwAxgmf_6AtPf8rJI.roa (raw, json)
Hash identifier: nRV+FkKE1yJ7VKO4AXv5uVFj9iiL8VimR9fUCtWH5Co=
Subject key identifier: B2:29:A1:6B:2C:A1:72:1A:70:03:18:26:7F:FE:80:B4:F7:FC:AC:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 341E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/simhayyhchpwAxgmf_6AtPf8rJI.roa
Signing time: Fri 29 Mar 2024 01:52:04 +0000
ROA not before: Fri 29 Mar 2024 01:52:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13342 (0x341e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 01:52:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B229A16B2CA1721A700318267FFE80B4F7FCAC92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:7d:e0:94:f8:1e:59:97:bf:b7:6c:ef:bb:
5c:76:a4:2f:e6:e3:fd:7c:10:5c:ef:f7:1c:14:5f:
0d:40:dd:6e:c5:8d:6a:4e:70:30:7d:23:79:db:b3:
bf:c5:87:57:8e:70:27:14:ee:9c:8d:19:3c:e1:4d:
6f:0b:d6:1b:f2:b3:ae:6e:d5:20:b4:b8:99:ae:06:
35:9f:e0:d7:8c:69:90:f1:78:5c:3b:10:d5:cf:57:
29:0a:64:9f:61:f2:06:6e:e7:cd:47:a4:0c:b7:0b:
7c:43:08:74:8a:80:ff:fd:d3:17:12:2c:e0:7d:6e:
20:98:fd:f8:a3:68:a8:c7:0a:85:3d:9b:a6:10:5e:
49:e9:98:bf:09:c0:d8:a7:7f:ea:e3:d1:e4:4c:75:
c1:98:2f:9b:5d:f7:1e:4a:a9:6d:c2:2d:2e:1f:d8:
2b:f4:2a:50:6e:f6:5f:0e:0e:96:4e:46:0c:d8:a5:
af:f1:d5:e8:05:f1:9c:f4:51:c9:76:d6:fc:fa:d4:
27:02:05:93:60:f5:a3:d0:08:2e:f2:c8:f1:58:a3:
94:37:66:c4:6c:ba:b2:32:5a:94:a4:1f:5b:d6:8b:
04:9f:72:2b:58:65:84:bb:4e:5a:60:7e:a7:5a:e4:
a7:bd:8d:64:d9:46:3b:d4:15:a7:38:a9:df:89:cd:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:A1:6B:2C:A1:72:1A:70:03:18:26:7F:FE:80:B4:F7:FC:AC:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/simhayyhchpwAxgmf_6AtPf8rJI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:6b:cb:99:66:c2:b1:c5:42:3c:17:99:4d:5a:13:1e:f0:17:
d2:e8:c4:5a:c3:1d:07:26:fb:7e:12:fd:c8:f4:85:57:66:94:
fa:08:cb:c3:aa:d6:d3:bf:44:d9:17:c1:6e:6c:4a:4b:fb:a4:
d2:ab:92:8b:b6:75:4b:31:6e:1e:13:68:bc:fb:12:25:d5:9f:
7d:40:86:42:56:dc:96:ba:f1:44:20:a8:6b:4f:7d:18:3c:b5:
60:0e:c3:01:11:20:cc:53:6c:69:fd:93:0f:2e:19:cd:8a:37:
1e:8f:66:28:d7:b6:0c:c1:64:fd:30:e6:e7:90:3e:5e:e4:8d:
20:90:2a:d8:9a:74:75:d2:f4:9b:71:37:2c:69:cc:7c:08:38:
5e:9d:fe:3c:77:1f:c5:46:7e:6e:67:d8:da:a3:93:c7:f6:33:
fe:0f:97:bf:4e:07:d2:45:14:1b:e7:d2:58:03:72:bb:4c:04:
ed:5b:12:36:10:d0:5e:23:92:7d:40:c9:cc:2a:77:05:79:8d:
ef:d7:b2:87:d2:72:48:bb:28:c7:37:35:52:93:fa:2a:c3:bb:
d7:6b:81:64:b8:b2:59:4f:bc:28:2f:49:0e:4e:fc:e8:6f:5d:
37:c9:e5:f3:09:69:c2:44:28:dc:5d:41:2b:47:67:ad:d1:a6:
df:49:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org