Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5dLILbkr19PjfREf_VWK_vyMYV0.roa
File: 5dLILbkr19PjfREf_VWK_vyMYV0.roa (raw, json)
Hash identifier: as/wVRjWTm1VmJ2msznz0cTEwzrdaKXjrP32pyFVRQk=
Subject key identifier: E5:D2:C8:2D:B9:2B:D7:D3:E3:7D:11:1F:FD:55:8A:FE:FC:8C:61:5D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4502
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5dLILbkr19PjfREf_VWK_vyMYV0.roa
Signing time: Sat 20 Apr 2024 14:23:26 +0000
ROA not before: Sat 20 Apr 2024 14:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17666 (0x4502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 14:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E5D2C82DB92BD7D3E37D111FFD558AFEFC8C615D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:76:de:59:fe:c5:70:f2:62:0e:83:5b:18:
52:03:90:da:35:00:19:29:3d:84:6c:39:7b:a0:89:
3e:bd:87:f7:2f:93:af:e9:af:55:9d:64:f9:5c:b4:
77:2c:22:c9:d2:92:4b:e0:61:75:82:62:6a:21:ca:
10:47:2a:2a:0b:c3:91:76:49:cf:0f:e8:67:e2:30:
0d:30:54:da:89:a3:62:89:84:e9:88:96:23:18:92:
6b:b3:c7:7a:db:e7:6c:fd:28:5e:6d:85:0d:3c:73:
be:08:c8:3e:db:f3:0d:23:4d:15:5c:f1:4a:cb:c5:
c8:ed:0a:c8:56:02:b8:17:56:25:f7:59:3d:3d:45:
03:a9:9e:d5:bf:4b:cd:2b:30:8a:3a:63:a0:a0:83:
08:91:6f:cd:68:91:80:41:8f:a2:3f:18:e6:b9:b0:
3d:fd:7a:93:e6:c9:74:f5:03:c9:58:7e:93:59:d8:
eb:a1:3b:7f:9c:0b:55:73:36:06:27:60:43:87:8b:
58:54:74:28:94:6e:a5:c1:2b:f1:1c:2a:5a:7c:55:
ed:6a:de:be:fe:15:29:46:64:a7:5a:90:48:62:8b:
95:fb:52:c4:61:47:d5:52:0f:1e:7c:1a:7b:28:08:
1b:fd:73:80:3c:06:59:21:69:d6:f5:f4:dd:bc:26:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:C8:2D:B9:2B:D7:D3:E3:7D:11:1F:FD:55:8A:FE:FC:8C:61:5D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5dLILbkr19PjfREf_VWK_vyMYV0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:39:fa:cb:7d:fb:2e:17:d3:bd:fa:ba:91:84:6b:d6:d2:86:
d1:e4:ed:91:be:8a:05:42:4d:ea:a7:3b:85:4d:7f:a1:c3:8a:
a9:3f:c9:a1:00:fa:2d:81:3d:59:4f:f9:5e:f0:63:17:60:23:
20:d5:61:da:7c:11:ca:1a:3d:55:77:e8:3a:4b:5a:81:8c:38:
f9:2d:16:19:ac:7e:84:da:d7:d5:c8:02:3e:e8:f0:41:aa:9f:
0e:26:92:ff:9d:69:40:33:16:2c:fb:e9:ca:47:5f:c7:f0:71:
79:db:5a:3c:78:54:ff:5e:49:9b:88:62:69:b4:7d:84:2b:b6:
ee:b1:f1:7c:2f:f5:17:82:16:96:3e:20:fd:d2:38:37:f2:1a:
29:db:1a:b1:fa:45:38:56:c6:99:4d:0d:cb:f9:e4:87:bb:42:
e6:14:6a:68:80:86:38:01:60:5f:53:ce:32:62:ab:16:14:d6:
27:c0:a9:91:93:e0:16:74:0a:a2:71:97:9b:9a:d0:e4:1a:0f:
e4:4e:92:77:ad:dc:dc:09:24:63:64:b8:f9:43:b7:1e:02:bc:
11:6b:bc:d8:df:d3:34:dc:75:ea:55:b2:ae:00:9a:51:69:37:
a4:62:7e:2a:a9:f6:7e:b6:6d:f4:a1:49:a2:73:06:26:ed:a8:
e7:de:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org