Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6q3fdtcLVl-7jrGzmTQpmzaAayI.roa
File: 6q3fdtcLVl-7jrGzmTQpmzaAayI.roa (raw, json)
Hash identifier: ezRi3nrCgWb5bFxqaCu3Yh9vE0/OAZsrcDeBqMqYrB4=
Subject key identifier: EA:AD:DF:76:D7:0B:56:5F:BB:8E:B1:B3:99:34:29:9B:36:80:6B:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 351A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6q3fdtcLVl-7jrGzmTQpmzaAayI.roa
Signing time: Sat 30 Mar 2024 09:22:08 +0000
ROA not before: Sat 30 Mar 2024 09:22:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 09:22:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EAADDF76D70B565FBB8EB1B39934299B36806B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:e1:cb:6e:ef:99:0b:4b:a0:0d:db:23:7b:
47:21:20:11:85:ae:aa:44:15:52:ca:6a:18:f7:79:
7d:5d:b8:1f:56:4c:1e:ff:3c:79:5f:fa:1f:82:31:
81:ff:de:9b:ba:f9:91:b5:a2:26:b5:49:ce:97:c3:
b0:33:d5:e3:d9:57:6c:dd:03:7c:e0:23:5e:71:2d:
aa:76:83:18:aa:e4:4e:e5:18:3f:46:fc:d7:47:f5:
4f:36:22:b7:39:ef:4c:46:b6:7a:98:11:d8:5d:c9:
92:d0:7c:27:0b:b8:c1:da:91:61:77:c7:bf:78:32:
01:1d:45:49:68:cc:ad:34:2a:f8:7c:7c:89:83:ed:
cb:27:19:85:99:14:13:0a:c9:5b:2a:92:49:9d:63:
38:1f:c1:e0:c4:8b:41:7c:57:9e:7c:ec:80:d6:4e:
ce:59:1c:8b:64:60:72:07:19:34:11:a1:5a:36:00:
e0:31:a9:96:32:c8:16:55:d5:4f:b5:f6:bf:f9:7c:
ca:ab:2a:f1:aa:f2:1e:5d:4a:40:5e:30:95:0b:f4:
24:6c:0e:0a:2e:82:54:ce:41:16:dc:32:66:72:4a:
a3:be:9c:82:e5:f5:c2:cd:ed:cd:58:19:43:d9:f4:
82:7b:0f:3a:95:54:f6:f2:db:1d:92:1e:45:c3:e1:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:DF:76:D7:0B:56:5F:BB:8E:B1:B3:99:34:29:9B:36:80:6B:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6q3fdtcLVl-7jrGzmTQpmzaAayI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:ad:32:38:6e:a9:9b:b3:d2:d9:98:38:8e:9e:eb:1c:72:4d:
9d:fc:00:6c:2e:6c:4e:8e:54:c2:20:49:9b:01:69:14:da:c9:
57:05:41:d9:4c:6f:05:56:0e:c8:bf:98:25:0b:bd:6a:cf:b9:
21:c7:31:17:a1:50:7d:36:31:43:58:93:5c:37:74:10:08:da:
40:5d:9e:e2:ac:ef:ad:54:6b:01:b6:49:c8:bf:0e:4c:cd:37:
4c:16:b5:05:dd:11:fd:e6:32:bf:39:92:54:f0:f7:c7:46:3e:
3f:cd:7e:8d:df:4d:1f:17:7d:61:cb:63:87:d2:81:6c:05:6f:
86:5a:62:45:e9:c8:fe:38:9d:44:cc:1f:a4:4f:40:ad:4d:02:
f3:43:5e:75:26:0d:b0:f0:34:38:e0:eb:6a:9e:7a:e8:cf:f0:
2b:8f:70:20:37:5a:cb:f3:c7:3f:a5:79:54:43:f4:b7:25:80:
85:d4:26:9e:0d:43:f8:2b:18:a2:51:b8:fd:a3:3a:cf:0f:55:
b2:60:4a:c6:1a:f3:23:7e:a1:3c:5e:ee:23:3b:0d:4d:6e:69:
5a:cb:af:df:e8:08:bb:58:75:ad:03:23:81:c5:e2:e9:9d:d6:
7d:fd:11:0a:c7:1d:0f:2a:d2:e2:e1:f5:7b:90:84:c4:ad:af:
8f:a4:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 14:41:12 2024 by rpki-client on console.sobornost.net