Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/86EqUSAa_LYoZHCFFcJ7Ou3WwM8.roa
File: 86EqUSAa_LYoZHCFFcJ7Ou3WwM8.roa (raw, json)
Hash identifier: gfjEO0VgFvg6VeysF7+RFhLIXt5T+Yd74nZ2eygTvSg=
Subject key identifier: F3:A1:2A:51:20:1A:FC:B6:28:64:70:85:15:C2:7B:3A:ED:D6:C0:CF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5736
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/86EqUSAa_LYoZHCFFcJ7Ou3WwM8.roa
Signing time: Tue 14 May 2024 20:54:11 +0000
ROA not before: Tue 14 May 2024 20:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22326 (0x5736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 20:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3A12A51201AFCB62864708515C27B3AEDD6C0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:e3:14:6b:0e:97:18:ac:af:4f:d5:0c:73:
db:a5:11:c5:8a:6c:35:1e:01:5e:07:46:55:ee:c6:
80:69:d4:94:80:d8:fb:a3:fe:3f:cc:4a:72:27:16:
1c:44:6b:a4:46:e4:c9:8d:64:3f:2b:1b:0d:56:87:
7c:b0:c7:f7:6b:cd:6f:7f:62:c7:68:6f:71:99:eb:
00:4a:65:c6:d4:74:16:1f:a7:50:4e:c1:83:df:70:
64:70:69:d5:d7:e9:21:ae:f0:c3:dc:bc:58:ea:57:
68:d8:1f:87:b8:62:92:64:15:52:61:31:63:32:78:
05:84:91:6a:57:d1:fd:8b:a4:47:cf:06:91:d5:84:
8a:4f:27:35:ca:ff:88:46:56:84:eb:69:f7:35:77:
71:6e:6e:af:89:c6:fc:79:10:1c:2c:8d:8d:c7:42:
97:5b:84:9b:2c:6a:81:ec:47:11:72:c4:ff:c1:73:
de:7d:c2:26:9e:04:3a:39:dc:c4:23:6a:2f:aa:4d:
00:d0:ab:d2:31:26:0b:5b:ed:52:19:c3:68:99:1a:
97:d0:92:ac:98:fb:74:61:42:0e:98:7e:55:ab:a7:
97:d3:e5:dc:7d:e6:31:1b:9d:78:44:c3:82:44:f0:
e0:0c:3b:75:e3:21:e3:3c:56:34:85:d4:31:1a:f7:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:2A:51:20:1A:FC:B6:28:64:70:85:15:C2:7B:3A:ED:D6:C0:CF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/86EqUSAa_LYoZHCFFcJ7Ou3WwM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:43:54:eb:b4:fb:39:3d:36:21:8e:a9:63:9c:72:eb:95:2f:
33:cb:b5:ae:c1:92:ef:46:52:2d:df:fb:1a:a7:1d:0a:42:24:
41:54:f1:14:fd:e2:1e:70:72:32:59:04:84:02:20:9b:a3:b5:
a2:f7:95:90:2a:c7:b8:92:9c:60:84:1b:cc:b7:44:d5:33:72:
d0:89:bc:c2:6e:c0:4f:5c:27:e6:34:71:c8:b8:9f:b0:e9:ab:
cb:b7:3c:24:dc:f8:19:cc:ea:53:7d:46:28:f7:29:5e:82:e8:
1d:2a:d0:d9:a7:6b:84:61:6c:ff:19:61:05:8c:bc:97:e4:65:
cf:e3:cb:ad:ef:cb:84:5d:7b:d8:59:cd:4f:64:44:40:8d:30:
5d:c6:a8:ed:66:62:cb:0c:e7:34:9c:6c:15:1b:97:6e:a4:d6:
64:c7:6d:fa:7e:84:1b:87:b4:fb:d2:ec:54:81:9f:c0:87:af:
32:b3:57:d2:18:55:49:5e:6a:35:8b:64:35:ba:d6:82:5d:e7:
f6:31:68:a7:b4:a5:70:19:4e:d6:77:21:8f:52:bf:52:11:63:
61:4a:99:ae:1d:eb:8e:66:05:b2:61:f7:95:a1:be:a8:98:e9:
c1:97:f3:a3:6c:fc:f6:4c:e6:53:ad:96:a9:e7:e9:94:ac:bc:
b5:2e:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org