Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Bc1EndmNkQvb0ODNslXDYA0AoBw.roa
File: Bc1EndmNkQvb0ODNslXDYA0AoBw.roa (raw, json)
Hash identifier: CaOjNUmwkmLvRiO86DwB7HaFiBQi0k4L3lioGivhmHk=
Subject key identifier: 05:CD:44:9D:D9:8D:91:0B:DB:D0:E0:CD:B2:55:C3:60:0D:00:A0:1C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 565E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bc1EndmNkQvb0ODNslXDYA0AoBw.roa
Signing time: Mon 13 May 2024 17:54:18 +0000
ROA not before: Mon 13 May 2024 17:54:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22110 (0x565e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 17:54:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=05CD449DD98D910BDBD0E0CDB255C3600D00A01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:b5:9c:4b:62:91:aa:ea:a4:47:0f:93:c4:
0c:72:70:7c:8c:1b:2f:ba:76:1e:fb:2d:f6:29:c7:
41:39:43:39:6e:e7:ac:d9:73:a7:da:26:d5:de:82:
17:b9:6b:57:7e:8f:e0:c0:aa:d2:7e:a8:3e:14:4d:
7f:7d:77:4f:df:31:e8:bc:84:2f:9a:20:4e:c1:a1:
ea:78:22:04:78:70:33:ad:96:e8:c5:0f:46:ab:cb:
18:5f:ce:df:68:3e:15:12:ef:09:c4:4f:47:68:1a:
5c:5d:98:2d:be:7e:01:96:bc:ed:fd:94:30:58:3c:
09:bd:1a:9a:b8:18:cd:bc:b0:9f:33:ce:a7:ab:22:
42:fc:ef:9b:1a:93:9a:6f:72:17:7a:e8:5a:5c:99:
45:39:ce:ec:35:c0:a8:12:25:d3:d2:1c:3c:5e:c6:
97:b8:00:3b:53:f2:5c:f6:99:0e:7a:37:f6:17:b6:
50:30:34:79:22:3d:f6:32:fe:86:2c:1b:1b:40:89:
b8:8d:7e:83:76:e9:d0:27:4a:7a:41:64:3b:1e:95:
dc:ff:13:70:2c:11:bf:64:98:12:0d:da:71:eb:84:
9c:b1:4e:3e:00:45:c6:dd:cc:cd:88:62:91:2b:5c:
fa:12:43:3e:f8:f2:67:f7:c6:98:ef:51:d6:41:cb:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:44:9D:D9:8D:91:0B:DB:D0:E0:CD:B2:55:C3:60:0D:00:A0:1C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bc1EndmNkQvb0ODNslXDYA0AoBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:91:bc:2e:5c:2e:93:bb:b2:cf:89:0b:de:a0:8e:73:86:80:
bd:6a:da:50:24:0a:d1:99:7a:d3:c2:86:4c:01:13:cd:ea:0a:
62:2e:3a:36:3a:b2:45:ca:9d:c5:3a:05:fa:94:24:37:19:a9:
68:b7:37:c1:1b:f4:59:aa:65:20:3c:c9:0f:90:81:28:58:74:
fe:e2:12:3d:45:a2:c1:13:df:e0:d1:14:87:6d:90:b0:6a:55:
f7:cb:94:39:43:b8:54:2d:2e:af:d3:db:69:26:cc:86:11:6b:
48:93:3f:a5:8c:88:43:1f:bc:59:53:91:20:1e:3e:79:8e:4a:
5a:93:27:db:c0:7f:aa:e1:9d:a9:38:68:30:c8:a9:6a:22:35:
e3:80:2e:a4:d3:e4:d9:77:c5:24:27:91:eb:c8:00:dc:31:f5:
91:2c:85:b7:13:48:bf:94:23:0a:7c:c2:af:d0:4e:71:81:aa:
87:ad:96:c9:0d:07:b2:af:ec:9e:e1:ee:a7:67:7f:c0:b8:30:
7f:22:9b:b5:b4:1a:ec:64:a9:9f:e7:5e:33:23:7a:8c:98:48:
a3:bf:2b:b7:cb:78:bf:4f:b7:01:c7:a6:bd:55:84:65:1b:95:
be:68:21:b8:43:5a:d9:0f:50:b4:dd:a5:6e:1d:f3:b0:af:8c:
1d:f4:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org