Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8XJMomB_jvEnLlh_EmJXaw73m98.roa
File: 8XJMomB_jvEnLlh_EmJXaw73m98.roa (raw, json)
Hash identifier: Erl8bfjaJwTNMC86FuKBuUP/hMxt4YHB5og7VYQbKyw=
Subject key identifier: F1:72:4C:A2:60:7F:8E:F1:27:2E:58:7F:12:62:57:6B:0E:F7:9B:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D0A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8XJMomB_jvEnLlh_EmJXaw73m98.roa
Signing time: Wed 01 May 2024 07:23:50 +0000
ROA not before: Wed 01 May 2024 07:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19722 (0x4d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 07:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F1724CA2607F8EF1272E587F1262576B0EF79BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:27:3e:da:e8:fa:62:c8:b5:91:d0:0a:32:
bf:53:9b:86:1d:85:52:e2:41:0e:96:b9:2e:65:03:
1e:2a:a5:40:d8:e2:d5:3a:3d:a4:87:12:c4:7d:f6:
bc:d4:96:c5:4b:03:6f:d1:c2:a6:f8:46:42:ea:22:
c8:0c:40:a9:70:52:a3:0f:61:d2:83:73:5c:78:89:
8e:a4:96:65:62:a3:25:26:fd:33:6d:e8:19:22:e5:
e9:3c:09:cb:db:b8:6d:e9:3e:fe:93:f9:25:d6:00:
f3:8e:d3:70:c3:0e:ee:df:83:3c:b7:80:db:8a:e8:
95:c4:80:7f:bb:d4:0f:e8:e2:64:8b:81:88:34:93:
40:8a:b0:5e:ad:3a:41:c4:ef:21:5e:1d:c7:ac:2d:
01:75:60:44:be:1b:de:1a:e8:77:c4:03:4e:47:b4:
35:de:bd:6e:b8:65:a2:51:12:bf:dd:e4:6d:94:40:
cb:f7:8b:d5:ba:8d:12:e4:08:39:90:9a:91:6b:5b:
a7:7b:4c:8b:64:2e:b2:7f:0c:fb:57:3a:19:6c:a0:
67:49:52:f2:86:6a:29:b4:c2:6e:96:35:e4:df:79:
f4:ab:0c:56:65:9a:61:65:6c:d4:17:66:30:a1:22:
12:b4:c6:3f:f4:87:53:28:ae:ea:ce:ef:a6:49:fd:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:4C:A2:60:7F:8E:F1:27:2E:58:7F:12:62:57:6B:0E:F7:9B:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8XJMomB_jvEnLlh_EmJXaw73m98.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:d0:e4:13:f4:bc:98:28:9f:3f:ee:aa:09:d7:67:68:31:7b:
09:7c:62:c8:07:3e:3c:5e:32:89:05:5a:b3:db:f3:cc:53:e7:
da:b5:ac:ba:33:b5:e0:f7:14:5e:e8:13:81:0e:01:41:0c:2b:
60:ff:99:0a:e7:63:21:6b:d6:32:a2:9a:d3:19:ae:22:74:bc:
02:27:af:50:bb:da:58:6a:e2:ad:f8:b7:41:68:1e:31:0e:55:
7f:c3:29:09:80:9d:3b:62:99:dc:50:25:1a:9c:cb:0c:1a:04:
7b:7a:4c:3c:a7:9c:22:08:a2:90:5b:a1:93:95:23:d6:0b:46:
33:a1:9c:af:e0:5c:d6:5e:46:8d:aa:1e:e9:2f:8e:32:76:ad:
e5:86:46:99:56:31:22:80:a8:34:e9:29:ae:d1:08:0b:b2:2e:
51:03:77:6a:bc:d9:e1:96:c3:ee:79:4e:a2:0d:b6:7e:f4:fe:
fc:4b:f9:91:82:c8:b3:75:91:7f:a5:18:30:7d:aa:0b:17:0a:
66:b4:62:a8:61:90:ef:96:ac:4c:d6:81:88:0d:a4:3d:e3:e3:
34:22:7d:63:67:ed:06:0b:93:de:50:2c:87:19:f9:f2:93:cb:
39:32:06:5d:56:4a:12:d6:28:b5:1e:c9:11:24:92:a9:89:fc:
f8:4b:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org