Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7TJT4K7qD8X-yeiIacL4jW4YRZ4.roa
File: 7TJT4K7qD8X-yeiIacL4jW4YRZ4.roa (raw, json)
Hash identifier: 8dByN5eQOhZ5vnU1B62dy6m7k5avM+iKyMo1gJsAVoo=
Subject key identifier: ED:32:53:E0:AE:EA:0F:C5:FE:C9:E8:88:69:C2:F8:8D:6E:18:45:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 486A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7TJT4K7qD8X-yeiIacL4jW4YRZ4.roa
Signing time: Thu 25 Apr 2024 03:23:19 +0000
ROA not before: Thu 25 Apr 2024 03:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18538 (0x486a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 03:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ED3253E0AEEA0FC5FEC9E88869C2F88D6E18459E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:f9:66:ac:ff:79:45:7c:ff:03:50:46:5f:
47:3c:50:ba:61:1a:0b:66:d4:1e:17:a8:22:ec:3a:
78:7d:61:f9:78:36:26:84:fd:30:99:e3:e9:cb:65:
b1:77:a4:89:0d:a4:72:e4:f4:61:c6:96:5d:a6:c0:
7c:f1:cb:d2:d5:87:9b:66:d9:bf:a1:8a:9d:75:78:
86:77:12:44:4e:62:74:0c:31:47:e0:6a:13:27:af:
fe:81:4b:79:f3:8f:70:c2:71:e0:fc:39:85:aa:18:
e7:90:5c:30:bf:d4:64:b0:12:fa:4a:56:7c:c6:e6:
ec:48:02:01:b8:1f:2a:65:db:df:2b:80:d9:4c:44:
7d:44:b4:5a:4b:c2:92:a8:75:aa:1c:f2:40:bd:16:
a9:1b:59:d8:0d:11:27:a6:32:3d:ac:04:59:85:15:
04:e1:7c:73:ba:68:a9:d6:d4:cc:0f:34:61:3f:8b:
91:39:df:66:b0:54:26:cf:a3:16:be:ac:64:70:4b:
f2:36:4f:71:7c:01:37:25:e3:be:cb:96:53:c1:1d:
93:f0:29:0e:74:37:a1:cd:f5:85:38:d0:49:bd:f3:
b7:4b:c1:04:f7:11:c1:69:99:59:67:9d:93:2b:04:
86:6f:29:c0:e4:7b:12:8d:ff:bc:75:15:fb:91:18:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:53:E0:AE:EA:0F:C5:FE:C9:E8:88:69:C2:F8:8D:6E:18:45:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7TJT4K7qD8X-yeiIacL4jW4YRZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:c7:85:d6:c0:d7:a8:23:bf:6d:45:0c:ff:dc:9b:fa:f1:56:
ca:fb:75:c4:b0:53:cc:7b:97:df:4e:7f:8c:2d:06:20:5d:da:
20:7c:3a:a5:f3:93:52:1c:35:78:0a:44:dc:b0:61:91:5f:73:
45:a5:c2:7a:fa:44:02:e8:f2:96:b1:08:11:c9:3a:14:14:59:
6e:b5:2e:8c:f1:9d:66:ba:85:57:9c:a0:70:fa:f8:92:96:07:
dc:2d:76:e8:7a:8e:8e:89:62:ed:18:b2:86:41:54:1b:54:f0:
ee:1d:7c:a4:f2:a4:06:35:76:f1:f0:7e:36:4c:07:77:f7:cf:
e1:41:83:37:44:f4:54:8d:c5:4e:e3:ae:b4:76:0d:3e:bf:12:
d4:3d:e9:33:a1:b9:0c:97:01:d1:da:1b:57:76:68:23:0e:c4:
6e:2a:53:62:ef:14:98:53:ba:b6:ef:0a:38:a7:3c:34:b7:8b:
7a:25:30:1a:ca:cd:da:ac:bd:c5:c6:1f:e6:9e:91:4a:b0:ac:
2f:36:13:22:a1:b4:8a:7e:19:3a:6a:ca:4b:da:48:e9:cd:6c:
36:75:8a:26:fd:12:6c:1f:09:ad:03:6e:03:76:4b:cf:43:05:
f3:e9:ac:b3:13:74:e4:9c:62:79:41:af:6b:02:6f:6b:11:70:
0d:be:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org