Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7tV-IxkfMmfv2J-uAGYhPGP3rmI.roa
File: 7tV-IxkfMmfv2J-uAGYhPGP3rmI.roa (raw, json)
Hash identifier: cm/nenOmDjLLFCPw8u2mqz2kUIBRoBlXbnuBb/v06Ng=
Subject key identifier: EE:D5:7E:23:19:1F:32:67:EF:D8:9F:AE:00:66:21:3C:63:F7:AE:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 419A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7tV-IxkfMmfv2J-uAGYhPGP3rmI.roa
Signing time: Tue 16 Apr 2024 01:22:57 +0000
ROA not before: Tue 16 Apr 2024 01:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16794 (0x419a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 01:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EED57E23191F3267EFD89FAE0066213C63F7AE62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:6d:f4:98:1a:61:ea:cf:4a:62:94:07:d8:
28:67:18:7b:69:8f:35:1c:22:b0:56:21:8f:7c:68:
ab:1a:76:ca:20:45:c8:44:c3:a3:8a:65:4f:a7:58:
69:3b:bd:8c:3b:99:93:5a:10:17:f5:b4:9b:01:0c:
05:dd:71:03:ca:34:86:06:b1:26:2b:fc:da:68:ad:
e3:c8:85:75:d7:ce:72:e4:1d:7c:86:3b:09:c2:c4:
74:fb:e7:5f:ea:f4:b3:db:2b:a9:bc:92:c0:83:15:
4a:4a:41:5a:61:00:8c:d8:91:7b:d1:a7:e9:92:27:
8a:19:31:55:03:83:63:e3:15:a1:23:76:a6:1d:3c:
7e:86:1e:2e:47:c1:3d:53:5a:8d:43:b8:8e:9d:8b:
44:36:98:19:58:d5:f4:e1:69:c1:13:eb:16:a4:37:
6c:f0:5d:20:ee:5d:eb:70:c4:19:bf:6a:4a:73:aa:
2a:ca:eb:28:02:21:e0:5c:3e:e3:a2:5d:8a:43:77:
01:73:64:09:b2:cc:42:61:ab:5d:17:2f:d9:a0:18:
9f:d9:1a:40:86:55:65:e2:69:df:1b:e7:52:c5:31:
bf:a2:66:12:88:ff:6e:68:ae:39:16:16:ba:fd:28:
10:ff:4b:51:5a:28:ca:df:d4:21:fb:97:45:49:0b:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:7E:23:19:1F:32:67:EF:D8:9F:AE:00:66:21:3C:63:F7:AE:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7tV-IxkfMmfv2J-uAGYhPGP3rmI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:1f:c6:67:fc:39:9b:a7:88:d6:1b:0d:1f:59:e5:e2:a8:87:
45:dc:08:7f:ea:2e:d8:1a:fe:9e:2a:3d:14:21:bd:7e:27:0b:
ee:05:74:c1:c6:aa:1b:ed:11:e2:9b:48:67:d2:08:72:76:ab:
4a:01:06:01:ab:ff:a7:89:6f:e0:ab:d6:73:f7:3b:a1:75:26:
ea:52:10:84:9c:1e:b7:c1:2f:e8:d0:0a:75:72:3f:64:59:19:
43:8c:80:29:6a:18:95:91:f1:2d:ea:1f:a6:19:53:df:8c:78:
8b:7f:78:25:3a:9e:71:72:42:dd:ca:1f:fa:b7:d8:96:14:2a:
93:93:84:25:84:32:25:d2:d4:4c:4f:37:7f:39:dd:e8:6b:02:
bc:be:23:26:8f:e3:ac:15:79:98:d5:90:de:ca:c6:84:3c:e9:
0c:91:8d:03:72:15:fe:f1:f6:3a:27:89:b8:e7:6d:47:cb:22:
67:2c:35:06:3b:cf:b7:fa:39:3e:69:5e:db:69:f6:0c:4d:ed:
3e:18:b9:58:77:bb:a5:67:99:e9:23:b4:a2:06:24:5e:9e:61:
e5:a1:83:db:16:d9:49:98:06:91:e0:c6:d5:b7:94:ea:c0:8c:
2b:b3:4c:d3:37:5c:07:b3:7c:76:ec:f1:c7:ae:2d:e9:7e:2d:
e1:d9:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org