Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1TW3yVBg77iUTiV2eFzc_4SJTMY.roa
File: 1TW3yVBg77iUTiV2eFzc_4SJTMY.roa (raw, json)
Hash identifier: bMpD7OjrRAyTQH9RtlmnEPl1jg4oQEAKCWqaqAPkT8g=
Subject key identifier: D5:35:B7:C9:50:60:EF:B8:94:4E:25:76:78:5C:DC:FF:84:89:4C:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 365A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1TW3yVBg77iUTiV2eFzc_4SJTMY.roa
Signing time: Mon 01 Apr 2024 01:22:15 +0000
ROA not before: Mon 01 Apr 2024 01:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13914 (0x365a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 01:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D535B7C95060EFB8944E2576785CDCFF84894CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:aa:46:96:2c:1a:31:c3:1b:91:28:be:da:
06:88:ce:d3:c3:1b:99:80:4c:ae:e4:c6:ac:df:21:
b4:1d:5d:6b:8d:d9:d2:cc:1b:38:95:69:6c:60:00:
15:e4:f5:9b:34:cf:27:b8:15:46:0b:cb:60:9b:c7:
bd:83:69:44:99:1d:58:0d:84:a0:3a:59:16:9a:0e:
9e:6c:7f:07:f7:04:20:90:6e:46:44:e8:e5:3f:cc:
cd:89:45:e4:5e:13:7f:2e:93:75:29:79:2d:60:46:
45:29:ce:90:8d:26:51:db:18:5c:57:93:dd:e1:d3:
2b:3c:09:5d:5f:6b:3f:65:c4:f1:2f:e8:95:1d:3f:
97:9c:b1:6e:d1:33:f9:9e:49:25:e0:ed:6c:e7:6c:
d5:3e:b9:ae:8c:2f:49:95:44:4c:e5:86:61:25:99:
c6:b3:37:08:10:86:a7:b4:83:16:0e:a4:c6:73:78:
04:a6:20:25:e8:f5:d1:99:9b:8d:99:f9:54:cf:94:
7f:2b:de:0a:94:26:18:bc:35:40:85:74:3f:1d:49:
3a:8b:e9:cd:24:ab:c3:29:15:c6:ab:1d:74:59:32:
8f:6b:4e:ee:70:83:05:1d:1c:0b:23:db:7b:f6:4d:
90:21:64:58:80:1d:7d:60:19:66:16:ee:5d:a1:e8:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:B7:C9:50:60:EF:B8:94:4E:25:76:78:5C:DC:FF:84:89:4C:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1TW3yVBg77iUTiV2eFzc_4SJTMY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:6a:90:51:c8:5e:e5:5a:88:6e:f1:73:fc:f3:1b:75:bf:5c:
7d:14:9e:21:5f:27:d6:fa:3a:1a:fb:c8:fe:c2:b4:ff:97:d6:
54:0c:7d:ee:2d:42:71:3d:40:0c:c1:cb:20:73:c1:17:c7:ce:
9c:9b:56:36:e8:58:d5:5e:82:90:fe:a3:5e:5d:20:84:36:2c:
d3:6a:dc:9e:81:f9:50:83:46:cf:f0:4a:d6:97:6c:c7:e6:8c:
79:74:bd:23:ad:c9:21:66:9d:69:1d:37:87:52:c7:2c:7a:83:
22:c7:84:58:87:37:c1:88:6c:7d:b4:ae:56:63:00:89:24:ab:
dd:76:64:1e:81:5f:fe:c4:c4:67:8e:fe:eb:b5:80:88:d8:ef:
a6:c8:7e:a0:20:74:4c:9c:7f:80:3b:20:db:27:42:60:b1:a5:
1e:27:03:53:e3:8e:00:71:9a:1e:b3:97:03:66:cc:78:4a:3d:
f5:67:e5:86:51:d3:71:0d:d8:de:4c:49:aa:7e:b3:cb:fe:b5:
f3:79:f2:1b:7d:8c:c3:e7:72:0f:bb:14:50:b5:a7:d3:bf:a0:
65:2b:45:d6:62:51:ee:c7:35:68:d7:3b:c2:0d:23:73:e7:43:
1d:25:7f:1d:2e:e2:15:20:58:88:39:f8:85:db:b6:a7:db:73:
a6:32:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org