Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5hh5P55aE-meE73_OCp4gDu-oPc.roa
File: 5hh5P55aE-meE73_OCp4gDu-oPc.roa (raw, json)
Hash identifier: 3i1mZiDaVk7ZiEduCMdtVMU+lNmEXSD3jgytES2doaQ=
Subject key identifier: E6:18:79:3F:9E:5A:13:E9:9E:13:BD:FF:38:2A:78:80:3B:BE:A0:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FCA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5hh5P55aE-meE73_OCp4gDu-oPc.roa
Signing time: Sat 04 May 2024 23:23:50 +0000
ROA not before: Sat 04 May 2024 23:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20426 (0x4fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 23:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E618793F9E5A13E99E13BDFF382A78803BBEA0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:5a:32:66:64:44:ed:bf:df:7d:f9:aa:ea:
be:24:a8:42:36:3f:76:07:2d:6c:1c:a6:3e:df:8f:
60:4a:88:f5:7c:ed:8e:0d:39:e5:e9:a1:9f:d6:6b:
5f:6f:9a:09:89:26:28:19:40:70:d2:89:7a:5b:dc:
c2:b0:2f:6d:09:79:0b:a6:89:17:1c:93:69:30:66:
04:41:1c:fa:a8:4b:ea:9b:b2:54:8e:1a:18:7f:5e:
d0:62:de:fa:23:83:83:57:35:86:93:d2:fc:8c:95:
56:6c:af:15:6d:1e:a6:3d:1f:25:d5:71:ec:cf:8c:
a8:55:9a:df:ed:31:b8:dd:50:f5:44:25:07:d9:59:
d4:ec:4f:be:f3:85:a3:fc:95:7a:5b:9e:02:c9:38:
a3:c5:66:9f:e5:d8:33:2f:28:eb:ea:d1:b3:5a:4f:
04:64:10:14:d8:3a:0c:78:a0:90:38:e8:4b:e1:06:
80:df:9b:de:95:f3:7e:ca:3d:8c:b9:a0:54:28:77:
07:67:bc:6c:4f:8e:24:f4:91:3b:67:f1:59:de:b2:
5e:7a:30:70:55:1b:94:67:48:86:99:31:d9:b0:d0:
67:fa:41:cd:17:93:d5:5f:54:d6:eb:c3:85:b5:28:
7e:89:d1:97:e9:08:3a:bc:47:24:b1:ab:8b:e3:6e:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:79:3F:9E:5A:13:E9:9E:13:BD:FF:38:2A:78:80:3B:BE:A0:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5hh5P55aE-meE73_OCp4gDu-oPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:5e:36:cd:de:ed:c5:f6:91:3d:e0:88:cd:ac:4c:39:af:62:
a1:46:1d:6a:bb:35:c8:a8:a5:62:ee:e4:6d:4e:9b:cf:36:ca:
ca:fd:12:f7:13:ae:3f:46:d1:54:57:04:a2:04:b7:ad:4b:86:
2e:e4:28:4d:64:1d:1e:7c:70:29:fe:1c:d3:78:41:4b:c0:bf:
bc:0e:5f:c2:c0:79:cc:5b:a9:30:e5:fb:82:bc:51:fe:9a:f7:
5a:2a:f0:be:87:f5:bf:ea:cc:7d:26:3b:6f:62:0e:f1:84:9b:
a3:4e:f6:20:ba:14:30:5c:3f:26:60:78:53:ef:62:26:12:5c:
88:09:06:c7:1f:f6:61:12:46:4d:b4:f5:2d:66:5e:06:a0:f0:
b2:81:ec:c2:92:d1:5d:71:5a:74:1b:83:eb:ec:98:57:0f:8a:
ad:e8:72:7e:2a:8a:00:46:7a:54:ad:e9:46:9a:3b:1a:03:c7:
13:34:34:af:ad:3a:59:38:2f:a4:c8:01:d6:3f:72:af:68:5d:
5d:29:b2:6a:78:40:03:7b:0a:0f:5a:e8:e9:84:94:0f:e7:a4:
9b:e2:9e:af:b2:90:86:b8:16:1b:c1:67:cf:67:fc:74:ce:c2:
d6:52:10:73:3f:cd:d9:90:b3:0d:9d:9c:d6:8e:cb:29:ba:06:
aa:11:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:15 2024 by rpki-client on console-ams.rpki-client.org