Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/50WNQKZ58-bvAwwZYLW0aXU2LTA.roa
File: 50WNQKZ58-bvAwwZYLW0aXU2LTA.roa (raw, json)
Hash identifier: 5nr9bVXgF8kHuV8wlABHr2Kml8rthadkYYRh4dmg+DY=
Subject key identifier: E7:45:8D:40:A6:79:F3:E6:EF:03:0C:19:60:B5:B4:69:75:36:2D:30
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/50WNQKZ58-bvAwwZYLW0aXU2LTA.roa
Signing time: Thu 28 Mar 2024 21:52:09 +0000
ROA not before: Thu 28 Mar 2024 21:52:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13310 (0x33fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 21:52:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E7458D40A679F3E6EF030C1960B5B46975362D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:65:38:37:69:35:88:f6:30:19:df:53:98:
97:a4:48:d3:b9:17:89:5e:b0:26:2c:33:2d:16:c9:
16:33:eb:03:b5:95:90:4f:3f:83:1c:75:77:67:34:
24:5d:56:5e:c4:b7:0d:2e:fd:6f:40:d5:23:de:5d:
32:a6:6f:4a:5b:de:73:ac:30:62:e6:f0:29:0e:21:
2e:73:21:c0:ac:1a:6e:dc:d2:49:12:ad:e3:40:7a:
22:3e:0e:6e:c7:54:de:65:cf:08:c9:04:13:91:db:
4a:32:2b:c4:f8:40:7d:f1:bb:dc:1b:f9:8c:a1:70:
34:c1:9c:2d:1c:a3:01:33:81:90:e5:f3:ee:dc:4d:
90:33:e5:c7:9e:0c:26:03:94:9b:d4:eb:b7:e2:b5:
d7:4e:18:73:64:07:2b:5d:64:0e:3c:e7:af:16:d8:
f0:ae:28:46:a2:05:ea:85:30:4e:62:fd:ae:48:5c:
9d:16:8d:0e:f9:94:89:0c:a4:35:ce:7e:ce:58:07:
37:53:be:a3:08:7d:4b:e9:46:30:ac:52:0f:8c:d6:
87:57:37:81:43:e0:06:26:50:cb:aa:12:44:e9:9b:
1a:44:3f:4c:06:21:d7:b7:b5:f0:a8:ca:73:31:83:
65:35:38:00:31:be:50:49:a0:2c:71:97:86:32:b1:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:8D:40:A6:79:F3:E6:EF:03:0C:19:60:B5:B4:69:75:36:2D:30
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/50WNQKZ58-bvAwwZYLW0aXU2LTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:a3:80:34:3e:70:1c:e7:ed:5e:58:f4:31:cf:2a:6c:df:9c:
a3:35:50:5a:a1:5d:57:80:3b:7e:70:18:19:14:c5:05:8b:1f:
7e:00:db:02:e5:33:40:55:1b:d2:79:6d:2b:6b:6f:67:1d:0c:
94:ce:65:73:3a:ad:04:f1:c3:d6:4d:18:4d:61:0d:d1:b5:7a:
88:ef:ac:f5:66:a6:58:f1:6b:ab:06:0c:da:37:98:cd:ba:08:
93:a7:8c:a5:8b:f2:84:54:36:8d:a5:be:85:12:29:0d:82:2f:
b2:66:d8:49:61:35:5e:06:cd:11:57:bc:2f:ee:32:c8:00:74:
f9:8b:04:cc:f5:34:dc:bf:14:ae:87:e5:74:3f:e1:87:d4:2c:
b4:f0:02:27:33:35:6d:3b:d3:a4:4f:66:6c:46:08:a3:d2:52:
a0:07:43:36:05:0e:53:68:c3:d8:79:e6:18:b9:5b:5d:e7:d3:
38:99:66:a3:b4:7f:73:47:78:b6:22:b9:86:f1:60:5e:70:5f:
3a:91:bd:23:d3:76:9b:2f:52:4b:f3:84:5d:ff:59:74:da:33:
80:df:c1:92:9e:65:c1:24:cc:41:e6:96:e7:46:68:49:9a:fd:
ea:4b:1f:aa:05:35:58:a5:ba:60:7f:d1:ba:af:0d:6e:e0:13:
e2:d3:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org