Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9z9GyUxcWChSrlwGJ_m2Hryc1hw.roa
File: 9z9GyUxcWChSrlwGJ_m2Hryc1hw.roa (raw, json)
Hash identifier: zkkaRE4lJkect42i4lFjstlfQGht6q4qwtcvuhVkk94=
Subject key identifier: F7:3F:46:C9:4C:5C:58:28:52:AE:5C:06:27:F9:B6:1E:BC:9C:D6:1C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D2E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9z9GyUxcWChSrlwGJ_m2Hryc1hw.roa
Signing time: Wed 10 Apr 2024 03:52:38 +0000
ROA not before: Wed 10 Apr 2024 03:52:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15662 (0x3d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 03:52:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F73F46C94C5C582852AE5C0627F9B61EBC9CD61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:96:da:6c:20:cb:19:81:91:9c:6e:b0:51:
0d:3a:89:f9:bc:be:2a:fd:50:3f:19:1a:e4:4f:bb:
f9:25:09:ea:61:d2:dd:28:4b:54:f2:dc:ad:9f:99:
12:9e:ea:12:cb:05:e1:1f:70:5c:d6:a2:32:5e:f8:
a3:a3:8b:5c:b1:09:34:d5:00:a6:76:b7:c3:77:98:
c1:a5:1b:9e:77:c4:da:a4:12:f8:e6:75:78:93:b6:
ce:4d:39:21:53:e5:8a:73:50:e6:1a:64:f6:b0:71:
1c:5a:19:aa:c5:ed:7f:1f:5a:8d:36:47:a3:9e:bb:
6c:aa:1b:13:7b:2b:f2:93:79:b5:28:af:0d:9d:b4:
25:65:50:36:5b:97:fd:a6:93:f7:7d:bf:c1:45:5a:
15:bf:a2:32:89:63:a7:96:52:39:c6:dc:4d:67:8b:
99:6a:bf:80:7a:13:14:98:9b:fe:9e:6d:b4:77:24:
05:91:ba:a8:bb:39:51:1d:55:67:38:3d:82:63:5a:
eb:20:d7:8e:32:02:41:32:e8:15:ac:51:08:77:69:
28:91:df:d0:8a:95:66:3f:3f:4d:46:14:50:3b:99:
a4:c6:1a:56:e3:21:81:e6:d0:f3:2b:3c:96:3c:18:
b6:aa:95:7e:82:df:34:3c:d2:aa:b8:a6:df:f9:11:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:46:C9:4C:5C:58:28:52:AE:5C:06:27:F9:B6:1E:BC:9C:D6:1C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9z9GyUxcWChSrlwGJ_m2Hryc1hw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:ee:e5:d6:bf:98:c3:91:17:b0:b8:10:d6:43:e5:0d:fc:6f:
d5:64:f4:0d:c5:fe:0e:2b:d8:24:21:0d:f3:cb:0f:cc:b1:2a:
63:bc:78:00:1a:33:5c:20:ba:6d:6b:9f:32:e4:ac:5d:d5:15:
1a:c6:2d:7b:b1:90:55:cd:7d:90:16:13:7f:7e:09:e8:2d:5e:
a6:a6:9b:c8:62:d7:05:aa:8b:b2:7d:c8:0b:12:b4:8a:55:fb:
6a:37:b8:f4:fe:a6:39:f1:4d:2d:11:59:d2:6a:c9:31:01:1f:
6d:f4:d3:1a:2f:30:77:dc:19:45:18:b2:01:21:e9:8c:cf:af:
c5:ea:24:cb:ac:6a:fe:91:9d:0b:a7:de:75:e4:39:3f:92:39:
13:26:d9:99:fb:2a:44:ff:7a:0e:d3:98:01:ff:1e:8e:45:dc:
32:8e:2d:59:71:3b:15:9d:90:70:e1:82:37:3c:20:71:c3:b5:
10:95:08:cd:ba:97:70:da:8a:51:29:42:3e:90:24:67:f2:97:
47:03:66:fd:dc:f9:58:38:2d:e5:fd:24:5f:ca:58:07:82:ac:
b4:25:3b:9e:b3:5a:40:44:68:67:c4:6a:34:b7:ec:c6:d5:c8:
98:3a:22:f3:fc:bd:5d:3c:57:6d:52:9c:4d:ad:bc:49:2d:4e:
a7:a8:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org