Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0NmIVoIIYUHipdWH4mPf5-OJAco.roa
File: 0NmIVoIIYUHipdWH4mPf5-OJAco.roa (raw, json)
Hash identifier: d87Tw5lBbM6G4BPEuXIOc8f9J9bfF4w6GTRJoEJ/z/o=
Subject key identifier: D0:D9:88:56:82:08:61:41:E2:A5:D5:87:E2:63:DF:E7:E3:89:01:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EF6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0NmIVoIIYUHipdWH4mPf5-OJAco.roa
Signing time: Fri 12 Apr 2024 12:52:50 +0000
ROA not before: Fri 12 Apr 2024 12:52:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16118 (0x3ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 12:52:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D0D9885682086141E2A5D587E263DFE7E38901CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:4e:62:51:e8:0f:92:b4:25:8d:47:7d:5f:
0f:4f:14:87:9c:a0:d9:4d:5c:f3:9f:0f:56:39:b9:
ce:af:f4:b4:11:91:61:93:fa:48:a5:48:55:05:b9:
22:2c:3b:69:95:2d:98:85:cf:81:d6:7a:ab:68:71:
f7:d4:bc:10:a3:0e:39:d9:77:dd:88:ad:d4:0d:63:
59:28:e2:c4:e0:9f:b3:5f:1b:27:d1:7c:ac:4a:da:
a3:b6:57:64:c2:f0:18:e1:2b:d2:d2:a5:d2:96:7f:
6b:23:83:ac:d6:8a:bf:45:d2:44:11:01:03:bf:d6:
26:4d:f1:0c:97:33:d4:58:d0:ca:9f:d8:1a:f1:6a:
27:8a:0a:89:e2:20:83:8d:72:a2:49:b6:01:91:bf:
e7:ce:ec:91:72:6b:08:1f:f8:60:2b:5d:92:a0:ce:
59:70:9b:66:f9:11:d7:36:5e:ef:12:3b:08:88:8f:
04:ce:3a:28:d2:e2:f7:36:35:40:5d:37:6d:4b:43:
24:51:12:4c:c7:8b:c0:d2:cd:85:20:20:92:55:82:
f6:ab:ed:7d:77:c2:56:e2:8f:2a:11:50:be:69:90:
b9:d1:38:cf:14:0e:7e:cb:a3:93:0e:0d:06:e5:70:
38:04:e0:af:d2:a3:05:5c:e2:62:a4:ce:ad:00:b8:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:88:56:82:08:61:41:E2:A5:D5:87:E2:63:DF:E7:E3:89:01:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0NmIVoIIYUHipdWH4mPf5-OJAco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:86:a5:a0:3d:98:da:59:20:4c:ba:fe:02:47:f5:0a:81:df:
9e:2c:a5:b1:d6:31:9c:d4:25:95:a9:b7:16:dc:20:9e:3d:57:
07:d9:d0:47:65:ad:1f:e9:f8:ef:0f:02:0e:b6:44:a2:62:da:
70:0f:29:05:ef:83:4c:7e:d9:96:c9:fa:8d:1b:c1:64:d8:65:
08:72:e2:bc:ee:6e:c5:b7:e4:f7:22:15:67:3e:f9:78:57:14:
7d:fb:88:6d:b2:13:71:9e:d0:82:68:2c:56:9b:9d:68:eb:67:
c4:bb:75:c8:a3:10:c2:45:bd:65:7f:7e:56:78:90:6b:ce:60:
cd:b2:0e:79:bb:22:aa:bb:8d:36:b8:f7:c9:70:c2:2e:78:cc:
7f:80:9b:d4:18:c3:09:34:05:1b:75:6f:1f:dd:5b:91:c9:62:
63:b0:1b:97:cd:8e:0c:5d:ef:96:c5:68:2c:ff:4d:5b:38:52:
2c:81:7e:91:e2:65:fc:78:bf:9c:d4:2a:dc:aa:7a:85:bb:f4:
69:06:06:1f:b8:9f:70:9d:81:e4:7e:4d:f1:10:26:19:98:62:
af:f2:67:ee:12:8f:78:74:17:3b:55:7d:db:9f:d6:9a:60:b6:
75:47:8e:62:01:50:51:bf:64:3e:e6:01:bf:59:85:6c:b5:31:
25:57:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org