Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7MzypaRdi8Zomct-iK4oTn4Nh48.roa
File: 7MzypaRdi8Zomct-iK4oTn4Nh48.roa (raw, json)
Hash identifier: nS2jGI/L+gOlzQhnFLMpOgAnI7ei6tG5wPwxG6VyX+Q=
Subject key identifier: EC:CC:F2:A5:A4:5D:8B:C6:68:99:CB:7E:88:AE:28:4E:7E:0D:87:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FF6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7MzypaRdi8Zomct-iK4oTn4Nh48.roa
Signing time: Sat 13 Apr 2024 20:52:51 +0000
ROA not before: Sat 13 Apr 2024 20:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16374 (0x3ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 20:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ECCCF2A5A45D8BC66899CB7E88AE284E7E0D878F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:f4:f8:46:66:76:fd:4e:cf:dd:75:39:2e:
23:9c:98:49:1f:65:6c:b6:5a:7b:8c:96:48:0d:f5:
72:3a:82:ce:ac:fa:b9:cb:e8:a9:4e:5e:2b:c7:c1:
19:52:d3:da:9b:74:0b:06:19:76:1b:42:67:5e:0c:
1e:84:d3:79:bc:b3:3f:46:94:7d:2f:cb:cf:f7:e3:
3c:dd:5a:a1:59:91:86:87:a3:bf:45:f7:2b:37:cd:
99:c3:97:47:b1:da:4d:7d:bf:29:f7:3d:80:a5:04:
ab:94:f6:57:86:d3:d7:1a:c3:03:2e:84:87:a0:24:
34:0a:4b:27:4c:be:57:ae:25:f4:7e:c4:fa:e1:3c:
95:a5:66:40:b0:ac:98:fa:78:9d:3e:24:75:53:76:
a8:a4:db:dc:25:35:f0:95:b5:8b:39:4c:d3:96:ce:
06:40:67:56:a6:e0:ae:da:e8:b2:42:59:8d:52:3c:
f3:11:0b:f1:b9:4f:31:3c:2e:0a:3a:9b:4b:16:94:
6a:cb:8b:f1:f9:b6:26:34:bc:dc:42:37:a0:0c:db:
55:f6:d6:56:14:c8:59:ae:66:93:4d:fb:c5:ff:49:
21:68:2a:d5:cf:f1:39:b0:90:c0:41:87:4f:d3:bb:
33:aa:90:aa:3c:66:b3:f7:6e:66:46:74:db:ce:1f:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:F2:A5:A4:5D:8B:C6:68:99:CB:7E:88:AE:28:4E:7E:0D:87:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7MzypaRdi8Zomct-iK4oTn4Nh48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:59:be:e9:1e:e6:e4:05:e0:eb:12:35:ac:42:28:e2:c5:94:
48:85:03:19:c7:13:57:18:1b:c4:2d:66:0f:6a:dc:fd:f2:b5:
01:ba:38:a6:b5:96:f6:40:e2:86:45:c7:b4:fb:f5:93:04:1f:
33:68:57:15:bc:60:ad:85:43:29:dc:e0:34:43:b8:8a:71:cb:
c4:b5:19:10:1a:c9:0b:f6:85:30:37:c4:5f:5b:19:70:9b:98:
43:db:a4:ca:a0:2a:f9:b3:c2:51:e5:6e:0f:87:0e:47:35:7b:
e5:43:c0:fb:b3:ae:bb:ef:2a:c5:1f:85:1f:9a:ff:7e:41:39:
fd:25:9d:fc:9e:73:ed:df:23:08:9c:52:c7:4b:60:63:13:ff:
32:b8:77:4a:98:3a:ea:12:a7:25:2e:49:eb:ec:d9:ee:a6:2c:
b7:30:6c:b5:bb:53:9d:ad:d3:51:77:e1:46:97:67:42:b4:58:
32:25:22:1e:a2:e6:cf:f7:96:50:0e:b2:59:3c:12:ca:98:3b:
37:41:ed:cd:20:17:5a:ad:c9:24:25:00:9d:96:e0:e3:3a:5b:
69:89:f9:57:f5:16:ec:34:7d:99:56:8d:68:e9:93:30:fe:a5:
90:3b:54:2e:98:90:8a:99:31:38:bc:34:b9:b6:12:17:3b:73:
6a:2c:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:17 2024 by rpki-client on console-ams.rpki-client.org