Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-6SLOfjuwju9WLEq5t_RJBUvnwI.roa
File: -6SLOfjuwju9WLEq5t_RJBUvnwI.roa (raw, json)
Hash identifier: NYjv2M1qfwNIiemQYHjvGMPQjbF+5PQF/phBjL+xsEI=
Subject key identifier: FB:A4:8B:39:F8:EE:C2:3B:BD:58:B1:2A:E6:DF:D1:24:15:2F:9F:02
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-6SLOfjuwju9WLEq5t_RJBUvnwI.roa
Signing time: Fri 19 Apr 2024 05:53:04 +0000
ROA not before: Fri 19 Apr 2024 05:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17406 (0x43fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 05:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FBA48B39F8EEC23BBD58B12AE6DFD124152F9F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:30:ad:2d:6d:cc:16:21:81:b6:29:5a:7f:
01:91:58:16:32:34:c3:c1:85:d6:e3:5a:7f:ae:cf:
cc:8d:0b:5e:75:ad:dd:20:a3:2a:a6:6a:aa:ea:a2:
54:55:72:60:a7:8a:d2:67:16:81:d3:05:fe:46:c7:
25:95:c9:5d:4e:f1:40:a8:9e:aa:32:e5:89:21:c7:
5d:81:42:30:22:39:a6:8a:52:a0:fb:b0:28:f9:7c:
ee:e9:21:96:ac:3b:78:56:07:46:31:51:cb:e4:20:
a5:02:63:68:34:a2:27:65:7c:d7:cf:de:26:be:b8:
0b:3d:34:b2:5f:ad:a6:a0:07:ed:13:0e:97:57:c0:
8a:a0:5c:7e:4b:5c:f5:71:7f:9b:5d:48:ce:95:c5:
bc:7a:b5:23:37:41:92:98:5f:a1:6d:58:6f:bf:34:
f2:5a:a3:2b:e5:d9:29:26:64:1c:ea:4f:17:b5:57:
10:a1:23:b9:3b:5e:18:bf:14:cb:57:91:b3:a3:f7:
58:fd:e9:98:1d:f0:dd:b8:48:83:8f:1a:30:16:25:
90:32:a1:5d:80:83:47:37:f0:74:8c:da:18:8a:72:
d2:80:d8:aa:93:f4:d9:f3:18:35:2c:1c:16:4d:f1:
fe:a4:79:28:24:bd:b8:97:30:1e:5a:96:e6:53:28:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:8B:39:F8:EE:C2:3B:BD:58:B1:2A:E6:DF:D1:24:15:2F:9F:02
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-6SLOfjuwju9WLEq5t_RJBUvnwI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:3b:e0:17:97:cf:f7:49:a7:c0:99:67:5d:bf:8f:13:9d:36:
a1:aa:ab:a5:a4:1a:cb:b5:6d:6f:06:e0:4e:7f:2a:82:5a:d8:
de:93:c2:05:2d:d7:b7:34:c8:aa:64:f9:d4:81:aa:18:34:9d:
eb:e0:88:e6:6c:65:57:62:71:84:a9:74:98:83:ae:a5:aa:f7:
6e:09:3c:87:f5:59:9e:24:f8:1c:26:7e:e2:de:71:3b:c8:ef:
89:b3:d3:66:a1:5d:d7:0c:16:6a:f6:33:9f:69:53:fc:75:e2:
42:e2:83:de:6f:bd:3a:47:d1:73:88:17:52:be:21:25:7c:87:
22:a0:35:7d:c9:92:db:da:44:e4:f0:7f:c5:25:d9:a6:9b:78:
39:74:58:44:31:56:4a:ce:cb:c4:a7:b7:c7:18:ef:7b:79:0d:
17:9f:f0:db:26:7f:78:75:c9:b0:16:8e:52:d7:b2:a0:70:0b:
48:e7:af:05:80:d5:ea:fd:ef:bd:62:2a:cc:57:65:2c:01:aa:
34:10:06:bf:0d:fa:9c:1a:f1:41:3b:56:d3:31:12:e1:eb:19:
d7:a7:80:61:04:ed:b2:cd:bf:ab:db:04:61:d0:cb:3d:e1:e4:
89:40:57:b9:0d:42:be:01:11:8a:0a:a7:e5:f1:ce:4b:29:b0:
91:6f:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:07 2024 by rpki-client on console-ams.rpki-client.org