Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/z-7JRVSHbgAt6PSQqH_SdUM1Okg.roa
File: z-7JRVSHbgAt6PSQqH_SdUM1Okg.roa (raw, json)
Hash identifier: 6jjfY7aRHOwDDHXcGaZHTefqiihyunwI1VP0f+d22jw=
Subject key identifier: CF:EE:C9:45:54:87:6E:00:2D:E8:F4:90:A8:7F:D2:75:43:35:3A:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3692
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z-7JRVSHbgAt6PSQqH_SdUM1Okg.roa
Signing time: Mon 01 Apr 2024 08:22:12 +0000
ROA not before: Mon 01 Apr 2024 08:22:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13970 (0x3692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 08:22:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CFEEC94554876E002DE8F490A87FD27543353A48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:25:3e:55:5c:31:19:80:18:b5:54:8d:7d:
bc:c0:9a:36:a8:85:d3:68:72:ea:87:e4:53:ba:06:
2f:53:16:13:b2:0d:2b:e5:13:d8:a8:db:30:7c:45:
d3:26:83:18:cf:51:ef:9b:6a:7f:82:9b:d5:d9:7b:
d6:cc:9b:95:86:cd:ce:f1:7e:7f:84:1f:8f:0e:08:
57:73:02:3c:41:d8:e0:f2:0a:eb:72:6a:07:ae:c8:
7f:b4:9f:33:65:2c:a6:9e:79:63:c3:4b:f6:1f:d4:
21:54:06:6d:1c:33:ad:30:7d:43:89:d5:0a:1c:3f:
2d:96:d9:0c:3d:04:ff:02:97:c9:97:79:ec:f7:06:
61:0e:cf:2b:f3:3b:59:8c:00:ac:33:25:69:07:d8:
65:dc:8c:d0:e7:c4:74:5a:a0:91:4d:30:f8:10:22:
2d:85:77:f1:ef:2b:1c:db:4b:71:82:64:b5:c2:95:
fa:1c:a0:2b:a1:9e:fb:13:1b:86:52:ea:46:aa:a7:
5a:8e:f2:a8:eb:7a:2f:9a:ac:ba:82:e5:4e:b1:50:
b9:53:fd:c2:c0:09:ec:5c:97:fe:5b:d4:84:d5:ed:
c5:1b:4c:92:a5:ba:2e:7b:f1:9f:91:07:25:92:8e:
68:f8:d4:62:6c:9f:78:4c:05:31:e6:2b:31:59:8c:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:C9:45:54:87:6E:00:2D:E8:F4:90:A8:7F:D2:75:43:35:3A:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z-7JRVSHbgAt6PSQqH_SdUM1Okg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:02:4e:1b:e4:25:dd:84:4a:9f:14:a1:be:71:92:d0:40:9a:
99:06:a1:9d:13:f1:3f:0f:57:0b:f0:1a:06:e0:53:75:49:89:
5d:ba:17:22:fa:2d:d6:3d:99:07:05:43:06:f6:6e:35:83:d4:
a8:39:16:37:3a:92:3a:f5:4d:a2:36:f8:f2:98:85:d3:9b:85:
c4:d7:90:c4:c9:47:c0:e1:98:7f:7a:16:a1:e5:d2:26:90:d6:
1a:0e:57:b1:2a:12:f5:9b:47:cf:fe:43:09:c6:c6:70:2e:e8:
b3:a4:11:7a:38:df:c2:63:76:50:29:48:e8:60:d0:7c:4e:ce:
df:3d:de:7d:51:2f:79:85:99:65:be:41:8a:77:85:f8:38:53:
76:24:10:77:a3:3a:29:6c:84:c5:09:d0:ab:1e:97:af:6f:af:
9b:53:6d:b8:06:bc:34:57:f6:2f:89:23:77:8d:8c:a9:ba:10:
25:e4:61:57:05:97:7f:94:b8:f9:ea:e2:05:c4:f1:b8:74:b3:
68:45:38:af:a9:a5:51:6f:1e:33:eb:de:5c:aa:c5:8e:ee:da:
76:04:8d:1d:a4:e5:7e:4c:13:13:21:fc:20:9e:d0:01:78:39:
b2:4c:25:2e:0d:d0:fb:87:27:13:4c:56:e9:3a:1a:42:1c:80:
97:73:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:21 2024 by rpki-client on console-ams.rpki-client.org