Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AHFuN8cS5qmIC1G1VZVspQwozU8.roa
File: AHFuN8cS5qmIC1G1VZVspQwozU8.roa (raw, json)
Hash identifier: DCt3w6oVrg+FJi6b+kpk2Vqlsn521RHLJRD/9SavqQY=
Subject key identifier: 00:71:6E:37:C7:12:E6:A9:88:0B:51:B5:55:95:6C:A5:0C:28:CD:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B46
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AHFuN8cS5qmIC1G1VZVspQwozU8.roa
Signing time: Sun 07 Apr 2024 14:52:32 +0000
ROA not before: Sun 07 Apr 2024 14:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15174 (0x3b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 14:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=00716E37C712E6A9880B51B555956CA50C28CD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:aa:7a:0f:f6:7f:8e:b0:6d:dd:a5:17:38:d0:
02:6f:46:67:83:55:38:a6:98:6b:3d:86:f9:50:89:
28:4e:a6:55:1a:1a:14:6f:91:6a:8b:3a:90:22:0d:
77:80:ea:97:d4:8e:27:82:3e:20:7f:a4:c1:b6:22:
e1:40:4e:18:3b:a2:a1:5f:fd:cd:e1:01:76:79:7d:
ae:83:ee:23:9b:39:22:b6:c0:d0:b4:8a:01:2c:bf:
9f:6f:6f:f4:07:66:a5:af:0e:73:65:7e:89:bf:2c:
f6:e5:97:f8:fb:2b:f1:d8:a1:a3:e1:5e:95:5f:fd:
0e:b8:ec:fa:3e:75:86:0b:14:fc:32:1f:7b:f7:6d:
45:b3:c2:d5:d3:ea:bb:71:f5:9e:9a:7e:7a:cf:64:
ac:2d:6e:ad:16:64:9f:71:52:7a:c4:8c:45:39:ff:
fb:ac:30:6b:17:58:45:a0:23:8f:4b:da:54:c5:d1:
76:2e:aa:eb:61:39:64:f5:d9:75:b8:39:63:19:78:
7d:48:ba:29:9d:d2:7e:f5:31:92:eb:ee:1d:e4:0d:
83:6e:de:d5:2f:e0:c8:1e:2e:88:92:91:8c:f6:b1:
8e:26:a4:5f:f8:fa:be:16:2a:17:d4:34:1b:ef:eb:
33:80:d3:81:e9:67:1f:b6:74:31:a9:62:ac:51:5e:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:6E:37:C7:12:E6:A9:88:0B:51:B5:55:95:6C:A5:0C:28:CD:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AHFuN8cS5qmIC1G1VZVspQwozU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:7d:8d:4a:7c:d9:26:af:46:d1:cf:f8:9c:56:df:c9:8c:05:
38:e0:18:74:aa:51:bf:71:9d:28:26:4f:7f:f4:90:de:70:9a:
02:1e:c3:19:4d:cd:73:6e:7e:b6:6a:8f:e1:f9:77:92:fb:3a:
98:fd:bf:78:32:bb:b5:5d:b8:9b:2e:b0:c4:82:f4:eb:9c:4b:
89:e9:ea:c9:3e:a9:69:78:c1:8f:40:c0:65:99:80:32:45:e3:
de:65:ff:4b:3d:0e:68:58:a2:a7:a6:c0:ed:5a:2a:fa:75:9a:
ef:91:41:0c:7b:c6:22:67:cc:1f:e2:12:9f:bb:e8:79:c8:d2:
a2:08:2c:99:d3:b1:2a:52:44:43:e4:6b:55:55:d4:46:b4:a1:
43:5c:8a:b2:cd:04:5f:65:15:d3:46:b7:85:13:4a:f5:b8:e0:
38:42:7b:02:a5:af:b6:29:d3:88:df:a1:98:e0:c0:88:f8:c5:
e8:41:88:e5:d4:a2:6b:ee:f4:84:7f:1b:03:77:c9:dd:68:b9:
b1:33:69:9c:c3:7b:6c:88:76:a1:b7:4c:8b:a1:19:b2:69:83:
c1:14:a6:6b:f6:55:e0:7d:0e:4e:38:e5:67:4c:3d:36:f6:ca:
98:0c:1e:16:b2:7b:95:b4:e7:cc:58:c0:4c:b8:1d:e0:2c:8c:
61:85:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org