Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1qBbuO_TlJBlFxeQsZnftxKwoUY.roa
File: 1qBbuO_TlJBlFxeQsZnftxKwoUY.roa (raw, json)
Hash identifier: 0WDNAk3AcdG45NyXfMq+i0Sh56OWoPXpK26/RPBFiKg=
Subject key identifier: D6:A0:5B:B8:EF:D3:94:90:65:17:17:90:B1:99:DF:B7:12:B0:A1:46
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1qBbuO_TlJBlFxeQsZnftxKwoUY.roa
Signing time: Wed 17 Apr 2024 18:53:00 +0000
ROA not before: Wed 17 Apr 2024 18:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17126 (0x42e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 18:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6A05BB8EFD3949065171790B199DFB712B0A146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:bb:c5:a2:e9:49:f4:a9:10:7a:88:dd:de:
51:bf:c3:5e:6b:4c:5a:81:2a:4e:10:4e:e3:cc:a4:
d6:24:18:03:02:20:20:22:ad:25:fc:2c:3a:20:55:
42:eb:33:b7:61:ea:6f:4d:ee:8e:db:dd:00:fb:50:
44:64:62:67:0e:ab:5e:17:83:88:6e:67:41:97:94:
71:c2:42:19:f5:1f:87:24:57:b3:37:45:bb:0e:38:
7d:a4:b0:3f:55:e6:c4:cf:8f:23:43:96:db:7f:57:
1b:ab:cb:d3:3b:2d:cb:6f:5a:96:37:25:74:42:be:
4c:43:28:bd:40:d8:5d:97:fd:34:40:bc:d8:45:10:
72:6d:97:96:a8:5a:bd:60:2c:6f:ba:b4:b2:08:a0:
76:46:95:bb:08:53:81:c7:e9:dd:c1:ef:1a:52:df:
11:f4:e0:cf:e3:0a:27:fb:9a:77:bd:21:21:53:b8:
41:be:9c:f3:f6:c1:e4:36:b4:bc:11:54:a0:fc:81:
2d:1b:1e:31:78:35:33:5b:82:80:84:60:14:68:b8:
14:be:bf:6e:e1:27:fd:7e:dc:e0:67:2b:a7:76:35:
6e:f3:f2:12:6f:2c:3f:4f:38:72:32:12:20:08:73:
e6:ed:dc:a5:ff:99:9c:34:dc:3e:0d:7d:f1:eb:44:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:5B:B8:EF:D3:94:90:65:17:17:90:B1:99:DF:B7:12:B0:A1:46
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1qBbuO_TlJBlFxeQsZnftxKwoUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:1a:4f:45:e2:84:de:9d:ca:da:e5:7b:fe:02:b7:bc:ab:0d:
3a:67:b5:fc:e6:82:6b:ed:87:43:26:cf:3f:23:32:74:d4:81:
61:6d:30:34:8b:a0:ad:a8:70:d3:2a:59:b9:3e:ac:4b:47:c6:
87:e4:0a:80:26:a1:b7:ba:e5:7d:41:60:74:87:61:97:4f:07:
e3:08:31:7c:73:4e:bd:cc:4f:b9:c5:ae:75:45:6e:75:9a:02:
ea:a7:d7:54:1c:fe:12:6e:71:5d:91:e1:0f:20:f7:3e:0e:f2:
3b:6f:1c:bd:f9:05:03:d3:9e:27:3c:b4:ff:1a:d5:e0:ad:99:
77:aa:cb:d8:03:cd:92:f4:65:4c:d7:99:bf:cf:de:02:d5:d9:
c9:2e:94:c0:ae:09:65:0f:16:53:bb:fd:72:d6:89:43:42:33:
d9:09:4f:a0:3d:4b:8f:e7:a8:08:1f:c4:60:ba:f5:f1:66:87:
8a:25:1c:31:59:c7:b8:56:5f:7c:e6:90:eb:ad:01:d4:a5:64:
0b:02:6c:6e:77:72:d8:f1:c5:ad:d8:46:b5:1d:60:db:ea:42:
e9:f0:a2:9c:2b:c9:57:30:37:77:c1:76:57:ea:70:90:fd:fb:
4a:3f:c2:50:52:53:01:21:52:3d:62:bc:1d:98:50:01:39:5c:
3e:9c:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org