Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-C0B4JnxNeik1pGqUNwWm9BN3Rw.roa
File: -C0B4JnxNeik1pGqUNwWm9BN3Rw.roa (raw, json)
Hash identifier: JCFp/3X2Al1heOoSVSfUzO/LMYrkC4MZMVyXXywCP88=
Subject key identifier: F8:2D:01:E0:99:F1:35:E8:A4:D6:91:AA:50:DC:16:9B:D0:4D:DD:1C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CD2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-C0B4JnxNeik1pGqUNwWm9BN3Rw.roa
Signing time: Wed 01 May 2024 00:23:38 +0000
ROA not before: Wed 01 May 2024 00:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19666 (0x4cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 00:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F82D01E099F135E8A4D691AA50DC169BD04DDD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:ee:35:34:44:af:ef:c4:aa:65:0a:b3:79:
3b:22:0c:cc:c3:0b:ec:57:25:7a:00:29:f2:de:26:
76:b2:d9:c0:c3:05:d8:ea:e5:8b:f7:6a:8a:de:16:
28:7a:50:5b:40:65:46:81:f2:d9:ee:51:64:29:fa:
db:20:61:87:d3:fa:8d:4b:63:4c:36:34:43:02:da:
86:20:20:f8:16:8c:88:4e:7d:fc:b4:7d:b7:2e:b0:
11:6a:e8:84:45:cb:61:4a:b2:03:e3:50:f6:6d:50:
35:2a:4d:c9:7b:08:37:20:64:ec:47:62:87:34:ee:
45:3b:42:14:1d:a6:a2:62:ef:e7:84:0c:3a:f1:22:
43:47:85:d2:13:bf:5b:bd:98:57:80:7c:c0:f5:97:
2d:6f:8a:b5:c3:f5:d3:cb:9b:47:54:7a:f8:44:30:
c0:9f:70:53:6a:e7:e5:f3:68:39:09:72:bc:f8:3d:
0a:9a:4c:84:e7:6c:32:16:31:50:7e:6a:7b:d7:ea:
c8:b1:de:a2:a8:ea:cb:ef:74:cc:41:27:b0:b2:5b:
f6:5e:b5:02:5b:66:dd:d8:85:ba:75:22:16:6c:d3:
88:ff:d3:c8:f3:fc:20:45:7d:16:68:0a:2a:80:64:
7b:d3:c1:2f:ba:2a:83:07:94:c7:e4:63:b3:ea:13:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:01:E0:99:F1:35:E8:A4:D6:91:AA:50:DC:16:9B:D0:4D:DD:1C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-C0B4JnxNeik1pGqUNwWm9BN3Rw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:a1:dc:04:61:48:50:4e:a0:63:78:0d:39:7b:e2:d6:f2:cf:
41:06:b8:8e:a8:01:e6:9a:db:63:51:38:d8:9f:a0:dd:68:16:
00:61:76:3b:b0:0c:af:06:7e:6c:23:65:ad:7e:4c:7e:bc:74:
6b:67:9f:8f:06:66:02:cb:a7:0f:ed:b9:09:37:41:93:2a:50:
b2:33:d7:42:37:fb:48:34:b7:84:77:de:b0:02:92:77:ca:a4:
66:99:f0:94:9e:d0:a5:d7:7e:1d:4f:ac:32:2e:52:d6:1d:4b:
fe:39:32:05:06:42:47:ed:fd:26:c3:20:de:1e:a9:34:54:3d:
ec:07:b9:51:29:4f:9f:36:eb:f5:ed:7a:f9:1a:23:3f:ad:86:
66:63:2f:f2:e5:dc:3c:b7:86:48:ba:87:0b:73:ca:55:0e:45:
fe:e9:f9:31:5a:18:17:5c:c5:5b:23:ab:32:ba:c6:43:60:c3:
52:73:70:e4:3f:f4:29:40:86:62:cf:bb:b3:1a:b6:a6:1c:ea:
60:28:21:6e:89:41:62:70:7f:21:97:4c:1c:e8:6f:06:28:92:
50:58:e3:c2:00:9d:a0:36:b8:26:9a:16:71:08:89:fc:06:c4:
eb:80:e8:90:54:32:43:08:4b:58:f8:73:bc:49:f8:18:2e:ca:
40:6d:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org