Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2FyuafNL4ckK-WOc4FLP98D_JBw.roa
File: 2FyuafNL4ckK-WOc4FLP98D_JBw.roa (raw, json)
Hash identifier: UAjWsbZormc8V5JS7thz883nWjIq4dKsMT394hTYBkw=
Subject key identifier: D8:5C:AE:69:F3:4B:E1:C9:0A:F9:63:9C:E0:52:CF:F7:C0:FF:24:1C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E7E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2FyuafNL4ckK-WOc4FLP98D_JBw.roa
Signing time: Fri 03 May 2024 05:53:44 +0000
ROA not before: Fri 03 May 2024 05:53:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20094 (0x4e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 05:53:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D85CAE69F34BE1C90AF9639CE052CFF7C0FF241C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:d4:d1:dc:86:fe:1f:ea:2a:d9:be:ac:24:
c9:02:3d:67:06:49:e8:2a:3f:5b:aa:40:32:33:9b:
25:df:13:50:6e:a2:bf:72:c8:4f:7a:73:cb:2a:20:
81:d9:02:ad:5e:87:34:7b:cf:8b:c0:1e:8b:0d:f0:
4f:d9:54:e8:42:1b:75:ba:00:cf:92:06:c1:fc:d4:
bc:ad:c9:24:94:b3:97:69:d2:af:ca:4a:68:93:13:
5c:b2:d0:fc:30:53:49:eb:5b:14:12:d1:ec:ac:e0:
86:3b:74:98:12:eb:f1:d0:fe:42:66:eb:22:fe:11:
e7:5e:72:87:48:c3:6d:a1:75:dd:d6:15:59:2d:06:
7e:b3:a0:12:6d:0e:0f:89:10:12:2f:b3:1f:95:22:
ef:e0:36:8c:28:56:8d:0a:88:c7:2b:6e:7f:b4:1c:
c8:bf:07:07:16:19:54:de:2e:a8:19:a1:e1:c2:4b:
f7:22:89:eb:7b:73:b3:3e:ce:4a:7b:e1:80:9e:69:
02:21:39:0a:7e:eb:18:28:69:a7:7e:10:56:6d:3e:
4c:98:ff:3c:47:e5:d2:42:ff:ec:7b:f9:ea:2e:bb:
f3:16:5c:82:58:57:44:7c:ba:b1:f4:f9:bc:21:b7:
eb:c4:3b:8d:10:9a:47:a4:99:6b:02:cc:a1:42:9c:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:AE:69:F3:4B:E1:C9:0A:F9:63:9C:E0:52:CF:F7:C0:FF:24:1C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2FyuafNL4ckK-WOc4FLP98D_JBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:5d:f2:41:50:3e:0a:ed:b3:df:74:54:f8:e9:d7:00:c4:fb:
9e:c7:71:8c:4a:07:db:d9:d5:a2:2f:d6:31:67:55:34:f5:8f:
80:5d:8f:2b:a3:b4:52:4c:02:44:0b:94:a8:b6:5c:dd:29:a3:
d8:ac:d9:6f:86:81:6e:3b:5f:52:47:7d:25:1f:79:f7:b2:18:
67:98:b4:14:a9:f0:7b:77:6d:cb:61:48:a8:5d:f9:e7:a9:a8:
2e:5a:7f:63:f8:12:fe:f2:e3:8c:56:da:c4:47:a3:28:d9:28:
d1:22:e4:0c:4b:27:f5:cc:1f:f0:9b:69:a5:bc:90:98:02:6b:
8d:0d:cc:fb:b0:5f:b5:4e:27:90:f1:10:e2:36:68:85:32:f1:
e6:e2:7e:1b:e7:e4:72:55:26:91:2c:9e:7f:a5:4a:aa:8d:ef:
bb:25:fa:bc:79:55:7c:f4:3f:d6:8c:02:c0:2c:3f:1c:c6:1c:
47:52:e3:21:8a:2f:5d:bd:93:83:00:3d:c0:89:b8:fe:52:00:
2b:78:a0:d4:83:9d:61:c7:69:43:e4:7f:53:f1:a2:f5:8c:79:
2b:95:d3:ac:88:02:0c:a4:86:a9:ad:47:f4:de:d7:11:e4:54:
ad:4d:05:5d:59:29:9e:5b:aa:cb:08:35:b5:d4:f7:05:0a:c0:
0a:20:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:11 2024 by rpki-client on console-ams.rpki-client.org