Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7jhJUb8atC4ZkKNt74ryRfpaSxQ.roa
File: 7jhJUb8atC4ZkKNt74ryRfpaSxQ.roa (raw, json)
Hash identifier: yuPRDwiOBagbWR/uB4hizPhKkCAvpJ+jHPNeOUYlXkE=
Subject key identifier: EE:38:49:51:BF:1A:B4:2E:19:90:A3:6D:EF:8A:F2:45:FA:5A:4B:14
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3146
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7jhJUb8atC4ZkKNt74ryRfpaSxQ.roa
Signing time: Sat 03 Feb 2024 02:49:43 +0000
ROA not before: Sat 03 Feb 2024 02:49:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12614 (0x3146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Feb 3 02:49:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EE384951BF1AB42E1990A36DEF8AF245FA5A4B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:4b:8d:5c:bd:c7:28:d4:4f:d8:6d:cb:a0:
70:3d:18:87:a7:72:01:53:b2:75:f1:d4:19:d5:c8:
df:ca:70:68:5c:b1:2b:40:e4:3a:52:76:ce:ea:2f:
d0:9e:2d:13:78:1f:2d:ec:d3:b1:fb:80:0a:e1:69:
e8:ae:42:f5:6c:3e:17:99:e9:50:f3:94:a8:d6:8f:
a0:93:22:b1:c6:f4:58:ea:24:7e:13:70:d8:dd:d6:
fb:45:df:72:a5:a7:ad:0c:f1:6c:50:0a:12:47:48:
7b:72:98:de:8f:2a:5b:44:88:40:a1:2a:97:8e:24:
93:53:e3:55:79:e2:ba:1c:b0:1d:db:4e:2f:59:33:
95:aa:10:b7:7e:0a:13:74:b6:21:27:7e:55:82:86:
7b:7e:af:11:fd:df:f4:66:f8:39:22:66:68:fd:88:
25:cc:e1:0d:11:20:36:2e:75:40:6b:8c:34:ec:d8:
ef:e4:61:ab:a4:0c:dd:3a:8c:61:df:01:09:8a:e9:
ea:5b:5b:8b:0f:0f:34:83:3a:c4:cb:9e:f9:6a:be:
3b:16:a2:78:fe:84:cd:f0:0e:ed:5d:b2:e9:a2:32:
c1:57:c3:3f:f3:1f:31:d4:90:15:44:1e:7a:4a:3a:
9e:14:86:b6:83:2e:fe:e6:94:d9:fd:6f:2d:16:32:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:49:51:BF:1A:B4:2E:19:90:A3:6D:EF:8A:F2:45:FA:5A:4B:14
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7jhJUb8atC4ZkKNt74ryRfpaSxQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:97:d6:cc:ec:d8:22:7a:12:12:1e:44:57:8c:e5:fd:da:70:
59:c8:b5:f5:fe:50:69:50:80:c1:b5:50:20:1b:ed:4d:18:9b:
f9:88:f3:d7:1a:4e:53:66:8f:04:61:c4:50:bb:fa:54:e0:86:
64:1b:18:00:0e:4b:04:11:8c:a1:50:1d:d3:34:b0:e6:f0:77:
35:2f:b7:be:fb:f1:3f:12:d1:a8:55:38:f2:bd:18:6f:3b:41:
37:60:b1:73:58:9b:19:65:ca:9e:8a:91:9f:52:c3:35:1c:d8:
ef:bb:a6:2c:91:27:8a:cd:34:fd:2d:9b:3d:6c:e3:a7:7b:a5:
3b:7a:7d:2d:4a:b8:38:65:44:0c:52:72:47:54:61:30:c2:e9:
21:8f:33:bd:26:e6:b9:10:32:c5:20:15:de:78:39:90:da:99:
86:c4:59:5f:7e:0e:d3:64:14:63:c1:fa:f4:9b:f8:6d:50:2d:
80:a1:9a:88:e2:6e:04:c1:13:ab:a0:1d:56:72:7e:90:2f:d9:
6e:e9:d8:5c:4d:3f:eb:f9:f2:3f:61:2c:f2:41:37:28:95:59:
89:70:cb:c8:5a:a9:cf:72:a9:d8:af:20:df:8a:e6:99:91:78:
45:74:ba:6f:47:e0:8d:6c:2d:dd:2e:24:7f:90:28:0d:ce:e8:
6b:58:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org