Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3iWDtA6Gl56zo8t9ypSltJ3XMpM.roa
File: 3iWDtA6Gl56zo8t9ypSltJ3XMpM.roa (raw, json)
Hash identifier: WPgL2tGF3u6sXCZlk06Dh5smRfMaSPJFLd5bwdHAHy8=
Subject key identifier: DE:25:83:B4:0E:86:97:9E:B3:A3:CB:7D:CA:94:A5:B4:9D:D7:32:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4036
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3iWDtA6Gl56zo8t9ypSltJ3XMpM.roa
Signing time: Sun 14 Apr 2024 04:52:56 +0000
ROA not before: Sun 14 Apr 2024 04:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16438 (0x4036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 04:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DE2583B40E86979EB3A3CB7DCA94A5B49DD73293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:27:cc:7b:49:e0:18:10:e0:49:23:d9:47:
d0:bf:bb:07:7c:48:3b:9a:d5:1b:c8:74:a5:45:e9:
1e:f3:96:db:d2:50:ab:c8:70:26:44:db:f6:67:e9:
34:26:a4:33:a6:77:d5:d9:94:e7:15:48:6a:03:9b:
14:d1:53:a6:35:d4:ef:32:d0:e8:94:77:90:09:4c:
08:26:6e:74:47:13:73:90:d2:3f:db:8e:12:ce:de:
c0:d5:2e:b5:79:16:98:15:09:55:b9:c8:ab:25:7d:
ac:b1:5a:eb:e7:61:0e:2a:6d:6e:84:8b:6e:35:63:
a0:89:d9:b0:98:c2:38:54:1f:48:68:61:02:0f:11:
4c:ea:25:0f:79:b2:3b:92:55:30:6e:40:a8:36:00:
ac:c4:f5:c8:1b:4f:82:52:22:69:36:cc:24:d4:02:
07:4c:60:10:89:6c:80:25:84:b7:58:b8:66:73:e4:
2e:eb:48:9c:c1:54:5a:34:bd:ec:4e:6c:48:1a:48:
f2:b2:a1:67:d9:86:98:89:4f:c8:47:53:d3:56:74:
e9:ab:17:91:85:b0:3f:fa:58:45:81:7d:fe:58:57:
11:e9:e4:92:21:93:33:81:82:36:52:b7:97:2a:3e:
a2:9b:ed:cb:62:83:a5:82:58:e6:21:70:2e:19:e3:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:83:B4:0E:86:97:9E:B3:A3:CB:7D:CA:94:A5:B4:9D:D7:32:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3iWDtA6Gl56zo8t9ypSltJ3XMpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:ac:34:c7:bd:5b:df:3e:64:18:4a:a6:19:29:ea:f6:1b:db:
d4:52:bb:e7:8a:d7:73:1b:2b:af:fe:2c:ab:41:dd:8b:3a:c5:
e9:43:97:f8:bc:9b:38:82:6f:4f:52:89:e9:fe:64:f1:af:f7:
76:e4:d5:97:b9:34:9c:a4:57:10:5a:62:69:45:86:79:ab:88:
ec:5e:24:37:6b:f7:13:e4:be:74:44:5e:0b:42:df:c4:35:b9:
6b:f0:aa:a9:8d:df:24:b3:87:24:89:d5:64:37:d8:bb:e9:3a:
73:36:5c:56:bc:55:09:23:6e:66:d2:15:01:71:44:2c:f9:ff:
54:de:e8:bb:d6:9e:95:e9:98:91:a4:46:1e:7a:a5:c7:4a:19:
76:91:df:07:72:fe:85:57:41:3b:85:f2:af:b8:9e:0c:c6:bc:
76:f5:66:12:2c:bf:3d:f2:26:4b:eb:dd:1c:be:15:de:17:84:
78:a3:d7:33:b4:fe:d2:ce:60:02:99:ac:38:a4:1e:75:9c:ad:
c8:59:0a:b6:6c:0a:13:48:99:20:14:15:73:dc:de:3c:b9:20:
f3:5a:c9:47:d7:76:43:72:db:91:13:2b:57:b3:42:a5:7d:dd:
c7:db:69:23:b3:07:f8:d4:ab:5a:ca:ad:c4:58:25:7b:2d:83:
ee:4b:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org