Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0xOr_s_8uPO84NemSt11r0aqwaM.roa
File: 0xOr_s_8uPO84NemSt11r0aqwaM.roa (raw, json)
Hash identifier: iFpxR6DS7c9Is8QC5CA8ldbYjmZgHrGFMEfnn/4mixQ=
Subject key identifier: D3:13:AB:FE:CF:FC:B8:F3:BC:E0:D7:A6:4A:DD:75:AF:46:AA:C1:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B62
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0xOr_s_8uPO84NemSt11r0aqwaM.roa
Signing time: Sun 07 Apr 2024 18:22:34 +0000
ROA not before: Sun 07 Apr 2024 18:22:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15202 (0x3b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 18:22:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D313ABFECFFCB8F3BCE0D7A64ADD75AF46AAC1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:ee:4a:3e:1e:76:50:41:6a:b3:16:ea:44:
68:e8:41:1a:e0:14:52:ea:f5:6c:9a:60:9c:db:aa:
7f:cf:c4:75:ed:15:11:16:96:41:de:20:1a:1d:d4:
08:2d:07:09:d4:3d:c4:70:4c:85:52:ac:9b:90:53:
a2:16:c3:fb:55:85:30:6d:6c:19:82:c5:72:36:5d:
67:61:0d:9e:71:9c:4a:99:47:3c:f2:83:59:b9:8a:
e1:75:f9:8a:5f:99:f6:de:8c:c0:c7:9b:d2:4f:a8:
cb:e9:06:db:c7:9c:0d:21:ea:88:12:46:e4:ee:ff:
44:b1:7d:fd:57:af:7d:fc:23:de:de:34:be:80:08:
cc:1c:3e:6a:a0:69:2a:b3:ca:61:67:fb:56:a9:63:
c9:22:14:b6:f9:0b:9c:5d:bb:65:e4:2b:b5:ad:77:
7d:48:c0:f6:5b:fe:29:38:a0:3a:95:0f:ee:e3:7a:
68:99:9f:14:d1:6a:a1:0a:d2:37:b0:ea:0c:2f:11:
26:d7:cb:dd:3b:c2:01:51:0a:80:55:bc:a6:4f:40:
79:06:4e:5a:8c:4b:66:aa:8a:90:d3:34:02:14:42:
9b:1d:92:8f:43:97:45:08:b9:d8:c6:d8:17:82:79:
29:8c:a4:90:ed:16:55:8c:1c:f1:6e:e3:0a:17:1e:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:AB:FE:CF:FC:B8:F3:BC:E0:D7:A6:4A:DD:75:AF:46:AA:C1:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0xOr_s_8uPO84NemSt11r0aqwaM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:9a:61:31:5c:6f:29:e9:37:ed:63:8a:71:f8:1b:2e:0e:ea:
71:43:eb:9f:20:b3:f2:73:eb:dc:7b:82:84:1f:aa:20:b6:92:
2f:e5:52:61:7f:a6:ca:db:ab:7d:9c:8f:82:41:6d:83:02:46:
fd:27:8e:42:30:f2:29:ad:36:ae:6a:59:21:ec:ae:d2:4b:72:
2d:17:be:8c:56:5e:e0:55:f1:c9:de:d7:4f:4f:9e:c0:e7:46:
61:a5:86:92:24:a6:1d:08:3d:cb:fe:9c:bc:2f:b1:28:da:f3:
86:e9:2c:81:b7:83:71:d3:22:5c:f1:4c:cb:39:a2:e7:77:b3:
0e:6d:73:29:70:64:d8:0e:eb:47:93:08:f1:b7:d3:f3:c2:27:
24:c5:94:8c:d2:d9:48:fb:40:05:3a:60:d9:21:cc:7e:ae:0a:
ff:a9:31:37:dc:35:f0:c4:0a:01:4e:56:0a:47:8b:17:28:bd:
cf:a6:a8:d9:31:71:d1:6c:2f:ef:43:f4:11:fb:01:a4:76:12:
34:e5:57:dd:e2:b6:54:ad:1d:65:49:e3:af:64:7b:ab:7a:34:
bb:c6:e2:3e:a3:9e:8c:f7:f1:67:d0:a6:b6:ad:09:c3:60:12:
ec:16:6a:04:c0:85:35:f8:ac:fe:24:6a:18:d2:02:b3:0b:e8:
8d:c1:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org