Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BhDhEyZjKDGxWJ_5iRoK5Mp2Bpg.roa
File: BhDhEyZjKDGxWJ_5iRoK5Mp2Bpg.roa (raw, json)
Hash identifier: pgWAQyXWHp2JU3xDAqykoYOz2All0AeaXsI56Cuf9BE=
Subject key identifier: 06:10:E1:13:26:63:28:31:B1:58:9F:F9:89:1A:0A:E4:CA:76:06:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BhDhEyZjKDGxWJ_5iRoK5Mp2Bpg.roa
Signing time: Fri 19 Apr 2024 03:23:00 +0000
ROA not before: Fri 19 Apr 2024 03:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17386 (0x43ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 03:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0610E11326632831B1589FF9891A0AE4CA760698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:eb:9f:5f:20:68:83:9a:c6:db:30:90:cd:
85:0c:fc:d5:a4:91:16:a6:c6:d9:bf:b6:02:4f:6f:
8b:39:2a:21:d8:31:4c:cc:24:63:d8:26:cc:94:f2:
bf:3e:66:01:24:d1:4d:40:19:0e:75:8f:f1:1a:ce:
fb:d1:8a:ca:83:ff:3b:d4:84:9d:ff:c7:10:3b:ea:
fb:0d:1b:07:7f:d8:be:9a:90:24:98:2c:f0:ca:39:
4b:6c:51:78:aa:22:62:76:54:65:80:20:be:84:f9:
9f:b3:65:8f:7c:a6:06:99:5e:ae:76:79:2c:f0:c8:
ef:64:a8:1a:00:d0:fb:e3:57:88:c7:20:cd:fb:90:
45:6d:ba:55:ad:32:da:96:cc:05:6d:4e:20:9c:d0:
af:a0:36:74:0c:b9:07:db:2e:ad:00:ab:8e:8c:ff:
94:79:a6:55:23:c1:bd:c2:ec:d4:f3:2c:e4:da:a4:
9c:21:49:92:64:a5:83:0e:ce:85:3d:be:db:55:76:
2a:6d:11:cc:69:79:ca:5e:5d:bf:cd:5d:ab:4e:fd:
f1:db:a8:c4:f9:00:c3:91:d1:5b:a8:3b:90:09:66:
16:63:5c:bb:c9:2c:f0:fc:50:cc:49:cc:65:42:1f:
28:e2:87:47:21:35:fd:1f:6e:54:6e:a5:fb:2e:bc:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:E1:13:26:63:28:31:B1:58:9F:F9:89:1A:0A:E4:CA:76:06:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BhDhEyZjKDGxWJ_5iRoK5Mp2Bpg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:c4:27:7b:e0:73:78:e7:34:a2:6d:06:f9:7b:28:17:74:c9:
38:d6:8d:55:28:fd:db:0f:32:ad:57:e0:9c:5a:41:ff:5c:66:
10:1a:86:af:99:be:ce:59:bc:37:c2:2d:93:25:42:65:9d:7e:
e2:33:54:be:24:a4:6f:57:02:15:f7:b8:53:42:c7:00:be:25:
d0:a3:5f:36:73:1a:0d:ef:89:e9:2c:52:e8:ba:88:1b:3b:70:
b1:39:bf:ef:a9:eb:6b:03:93:ff:c8:3e:95:2f:13:93:c3:0e:
c5:48:fc:ea:34:78:08:41:8d:a2:4d:67:58:be:56:e9:6d:1b:
a9:8b:62:66:44:66:36:a9:4d:2d:bf:a0:73:ff:9b:db:6d:55:
0f:33:99:3e:a9:cd:eb:75:f1:3e:a1:25:db:2b:db:9b:37:cc:
7b:39:83:3c:04:cc:46:d6:5f:92:3d:63:a5:68:89:c5:41:47:
1a:b3:ea:e5:1e:12:82:da:d6:f5:1c:c4:61:b9:ae:c8:9f:37:
84:f8:bd:d3:e9:28:5c:60:8d:43:da:73:06:dd:05:0c:ab:25:
18:b4:57:35:70:48:71:08:5f:5c:e6:cd:88:2a:93:b7:34:a3:
45:d8:62:5b:09:06:9c:cd:c8:df:f7:80:22:6a:46:23:c0:1f:
c8:83:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org