Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3i381mm239qM_F02stI9y9yIUZk.roa
File: 3i381mm239qM_F02stI9y9yIUZk.roa (raw, json)
Hash identifier: xJ94e7Pc/1Nmjf8fiREOLfF6I+9DS1X35LAR+cQKiKI=
Subject key identifier: DE:2D:FC:D6:69:B6:DF:DA:8C:FC:5D:36:B2:D2:3D:CB:DC:88:51:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C8A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3i381mm239qM_F02stI9y9yIUZk.roa
Signing time: Tue 30 Apr 2024 15:23:34 +0000
ROA not before: Tue 30 Apr 2024 15:23:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19594 (0x4c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 15:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DE2DFCD669B6DFDA8CFC5D36B2D23DCBDC885199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:60:c6:7d:45:60:2b:5e:5f:2b:0d:17:91:
c8:a4:8f:29:04:c0:7c:25:72:9c:86:24:ca:fe:cb:
f4:3e:7b:c0:f1:88:45:29:c4:72:5f:12:bc:1f:64:
d9:c1:ef:33:84:c8:c7:f3:29:2e:a5:de:8e:82:85:
0a:60:2b:7f:6c:11:d0:4a:37:2b:fb:cb:08:37:eb:
7c:c8:57:2d:64:5e:70:b6:72:d2:82:25:ba:52:45:
e5:77:c9:44:a4:f3:99:be:77:9b:ab:64:2c:6f:85:
b9:30:8c:e2:ae:87:0c:e9:43:f7:f6:41:c5:a7:17:
b4:27:41:63:7e:cb:cd:fc:83:e0:eb:62:e0:74:92:
9e:5c:10:cf:98:4d:9d:27:d8:78:ab:cc:61:5c:3e:
d9:c6:96:9c:c7:83:a4:ad:20:91:7e:5a:fb:7a:d7:
a6:16:ed:f3:58:8a:ea:cf:04:ad:09:da:9f:30:b1:
f2:fc:c8:37:10:3d:16:ff:df:6d:1d:7b:94:0b:0c:
2b:2c:c4:78:aa:d6:7d:57:e5:85:d6:7c:4f:4c:e6:
6a:1c:2d:10:b4:5e:a6:d8:2b:1a:ca:64:35:09:d5:
6f:5f:22:60:03:b0:88:19:51:25:00:21:bf:08:29:
7d:bf:c9:bc:a3:21:77:9c:72:e3:92:24:97:47:f0:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:FC:D6:69:B6:DF:DA:8C:FC:5D:36:B2:D2:3D:CB:DC:88:51:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3i381mm239qM_F02stI9y9yIUZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:b8:a7:d4:36:24:9b:0b:6e:b5:eb:95:96:59:e4:64:aa:cc:
75:11:8a:38:35:0f:35:0c:a3:c2:dd:cd:cf:d6:b3:a5:a0:83:
27:56:3d:c3:57:de:1b:20:64:4d:d0:e8:64:46:1a:89:c3:be:
d3:1f:b9:c9:10:4d:91:f5:cf:3f:1e:f8:8b:09:a4:62:bf:df:
71:09:05:9d:85:89:e1:6e:0d:06:c2:0b:30:91:cc:64:d6:50:
a6:29:bc:0e:fc:ae:7c:c5:be:07:df:99:ca:a7:44:d8:d1:fe:
1c:8f:e0:99:1c:52:07:8d:f4:de:e8:6f:bc:85:99:3b:22:63:
86:35:ad:24:c4:47:c6:3b:c4:f5:9f:ac:1b:3e:51:0a:6d:9e:
98:07:50:35:05:c8:41:4d:97:80:56:d6:bf:cb:59:93:5c:f7:
7f:4f:8c:a4:89:1d:b7:07:f3:67:80:53:43:40:2c:64:f2:90:
4b:4f:f3:1b:7b:05:42:28:ad:eb:c1:9b:62:0f:60:2f:1d:d1:
dc:98:1f:87:80:e3:d8:e2:b1:9b:0a:7d:4c:d7:51:8b:a7:06:
22:e9:bc:fb:c7:f1:df:53:12:29:30:66:e8:3a:b3:b2:b0:39:
d1:3e:83:72:2a:c7:4a:ff:01:7d:db:4f:7d:4d:f0:05:58:24:
21:ea:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org