Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6EbYjcOq8iGGWChUbApp_4OGI_M.roa
File: 6EbYjcOq8iGGWChUbApp_4OGI_M.roa (raw, json)
Hash identifier: Ii6psYi7O2EXz+ncdFUSgWbMyHGyN/ldolb/skDLBic=
Subject key identifier: E8:46:D8:8D:C3:AA:F2:21:86:58:28:54:6C:0A:69:FF:83:86:23:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5162
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6EbYjcOq8iGGWChUbApp_4OGI_M.roa
Signing time: Tue 07 May 2024 02:23:54 +0000
ROA not before: Tue 07 May 2024 02:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20834 (0x5162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 02:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E846D88DC3AAF221865828546C0A69FF838623F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:20:16:e6:da:55:33:84:60:1c:38:73:66:
a4:aa:ce:1b:ff:be:e8:ab:21:5b:b4:10:27:68:02:
03:35:c6:e3:08:3b:7f:21:a0:15:b3:86:1f:32:76:
cb:c4:47:db:94:10:6b:d0:9b:5b:8b:e0:3c:05:da:
02:e3:33:e8:e6:28:7d:61:c6:60:02:45:17:4e:e4:
50:3c:c1:e5:42:0a:81:3e:cb:17:4d:81:73:b1:7d:
50:81:59:93:6d:1f:7c:1a:da:af:8d:f0:c5:c3:87:
eb:89:79:f9:71:b4:36:ae:57:db:2d:19:c4:1d:18:
ab:3b:1f:38:53:ee:6f:8e:48:ec:71:f7:6c:a5:b0:
ca:85:4d:ce:76:1f:f3:d6:ec:44:cd:fb:86:b3:4a:
f7:30:26:24:29:d8:ad:eb:fb:24:5d:0e:3a:5c:67:
7f:c1:db:96:f2:8f:96:3c:66:27:c3:a9:e3:69:c1:
d8:25:00:59:17:0d:a8:16:ee:a3:31:61:f2:80:95:
c2:0b:6f:3f:4d:70:ca:a5:bf:38:17:1f:e7:54:41:
94:76:2d:af:ab:e6:6b:28:b5:dd:0e:2b:24:74:50:
9f:b4:a2:4f:8a:72:e9:7d:12:75:72:ad:6a:46:b5:
b1:4c:d8:92:a5:6a:73:87:b0:3d:72:75:61:34:3c:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:D8:8D:C3:AA:F2:21:86:58:28:54:6C:0A:69:FF:83:86:23:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6EbYjcOq8iGGWChUbApp_4OGI_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:9a:51:cb:db:a7:52:75:1f:b0:21:d9:ef:e2:68:f8:d5:06:
b9:49:98:af:52:8e:32:ff:3b:48:d2:ee:54:5b:a9:05:70:d3:
7c:dc:0a:dd:ad:02:c6:f9:5f:3c:35:a6:bf:db:57:70:c0:01:
af:c0:4a:42:5a:79:d9:f7:1a:07:3e:59:5a:6f:b7:cf:ce:f2:
11:4e:b9:61:59:2d:b4:f8:8a:1c:1e:2a:f3:6a:f5:42:4f:b0:
a7:37:11:9f:8f:bc:b7:53:07:70:21:3a:c1:09:24:d3:f4:9e:
cc:b6:0e:8e:60:90:92:00:f2:33:0f:ea:fb:d9:13:c2:f3:29:
e7:ba:a5:5f:6e:40:05:a7:ab:c9:50:33:f5:e9:6c:07:44:59:
7a:56:fc:25:e7:b4:ff:11:b7:56:77:1f:4d:75:a7:b3:7a:e0:
ab:97:fa:9d:16:6a:8f:d9:38:e4:d0:d3:c1:cc:d9:ac:02:a1:
17:bb:2a:e9:d2:41:60:67:d5:8e:1d:25:2e:9c:9d:17:96:ea:
70:c4:e4:29:67:b1:06:df:83:9a:79:2b:0a:d9:35:1c:8f:c1:
99:87:a7:84:5a:6a:53:29:f0:53:d4:75:4b:57:2c:c4:8a:7b:
ca:e8:b5:9a:57:81:e5:0b:ef:23:52:2c:4c:f7:d4:86:2d:2d:
14:86:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org