Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zE4g_lJSOp8_mhSLDL_OOWhY0Eg.roa
File: zE4g_lJSOp8_mhSLDL_OOWhY0Eg.roa (raw, json)
Hash identifier: BopbQGBj2Zmylbzam+v9DwjhW943Vvv9fqIlpLDf91w=
Subject key identifier: CC:4E:20:FE:52:52:3A:9F:3F:9A:14:8B:0C:BF:CE:39:68:58:D0:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50A2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zE4g_lJSOp8_mhSLDL_OOWhY0Eg.roa
Signing time: Mon 06 May 2024 02:23:59 +0000
ROA not before: Mon 06 May 2024 02:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20642 (0x50a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 02:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CC4E20FE52523A9F3F9A148B0CBFCE396858D048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:56:45:41:e6:6c:f6:2f:dd:d3:62:bd:63:
6f:4f:15:2f:57:fa:6a:50:18:e8:ac:5f:f8:a5:1f:
30:9f:03:fb:ad:cd:77:3f:79:6c:c1:00:93:23:27:
c6:4d:d8:e0:de:bb:c5:87:61:47:b4:a8:ac:6a:dc:
e4:68:58:3f:c9:fb:5a:d4:01:0d:89:fe:a7:29:0b:
84:73:08:4e:e2:04:02:6f:ed:51:d8:b5:b2:70:b6:
52:8a:cc:7a:98:72:92:90:8b:a6:0d:f5:f1:19:ee:
be:f1:03:cc:3b:58:d6:9a:c0:73:d3:b1:58:ab:1a:
0b:cd:d7:d5:9b:34:45:18:eb:2e:a3:2d:b7:b1:dc:
98:fc:cb:40:35:df:05:7e:23:4f:a9:43:3c:e8:6c:
84:e2:2d:07:74:64:08:a7:e3:8f:f2:fe:b7:60:1e:
b1:6a:d6:40:1c:f2:a1:31:ca:18:68:ef:80:8e:e9:
17:70:14:d6:5d:f9:77:da:c1:57:b2:2c:ae:d9:45:
f9:55:6c:1e:53:1f:84:46:e1:d2:29:ea:88:63:10:
de:68:79:cc:13:57:a1:4e:e7:a5:74:91:0a:11:d2:
e8:bf:88:4d:cd:f7:73:26:17:e1:4e:fa:a5:cc:e6:
5e:a6:62:9d:99:44:d4:f2:7b:7a:e4:bd:a9:81:6b:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:20:FE:52:52:3A:9F:3F:9A:14:8B:0C:BF:CE:39:68:58:D0:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zE4g_lJSOp8_mhSLDL_OOWhY0Eg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:1e:b4:18:4a:7c:00:f5:fe:7d:fe:af:4e:98:ab:97:b1:76:
1e:0a:91:e0:10:5e:49:11:8e:d4:27:3a:2d:38:13:c6:be:f6:
1c:d3:7c:f8:12:d6:69:59:d6:a8:79:42:bc:dd:65:f9:73:61:
88:cc:7f:db:83:be:d6:df:58:36:54:0c:7e:ff:04:8f:3c:9c:
db:21:a9:1c:79:25:94:7c:6d:9a:33:47:a6:cd:b1:cd:cf:54:
13:f5:83:c5:f9:4d:89:62:ca:69:ff:85:0c:b9:47:4d:73:fb:
30:82:1b:19:6d:b7:5a:bd:b6:64:e4:c6:f9:ec:6a:49:da:16:
7e:d4:69:a1:d1:90:ad:a1:66:92:9a:bd:9a:b1:9f:66:72:b2:
9a:08:37:26:83:02:f7:3b:f2:00:51:61:fb:23:ae:80:05:9e:
8e:cf:9f:11:a8:7d:03:35:90:53:5d:b0:92:1c:21:b6:7a:d2:
22:e2:6c:fd:52:23:62:59:d6:9d:77:d2:13:b9:49:7a:bc:9f:
55:83:d7:43:43:fb:8e:d1:2c:66:93:b8:31:83:97:bd:90:95:
35:35:10:be:06:55:99:11:11:31:de:29:6f:49:bc:83:6c:9f:
89:36:cc:07:20:10:4c:10:f2:18:80:8c:74:e0:67:a9:d0:60:
2c:fa:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:21 2024 by rpki-client on console-ams.rpki-client.org