Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BnPiSWKt5QzjM0W0CqbrbwhBVYQ.roa
File: BnPiSWKt5QzjM0W0CqbrbwhBVYQ.roa (raw, json)
Hash identifier: wszPlqYbuQeAXPXytZlYLiX9vptS9Yu3CVVVIGSQrvY=
Subject key identifier: 06:73:E2:49:62:AD:E5:0C:E3:33:45:B4:0A:A6:EB:6F:08:41:55:84
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4342
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BnPiSWKt5QzjM0W0CqbrbwhBVYQ.roa
Signing time: Thu 18 Apr 2024 06:23:04 +0000
ROA not before: Thu 18 Apr 2024 06:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17218 (0x4342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 06:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0673E24962ADE50CE33345B40AA6EB6F08415584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:f7:35:be:c2:0c:c9:e1:6c:31:8e:63:55:
bd:5b:6e:d7:75:87:67:28:8d:48:41:5a:bb:dd:19:
3b:4c:40:df:98:c6:55:70:cc:90:b3:3a:2f:18:6e:
3e:f5:d2:c6:89:c0:4c:a3:b0:40:56:23:25:ae:e2:
1a:67:c5:e5:90:c5:e6:0b:12:da:f3:69:eb:28:73:
a5:eb:94:b9:88:7f:85:f3:32:49:40:bf:04:fe:2b:
15:9d:d1:c2:c8:80:70:69:1a:9e:43:cb:87:85:ee:
ad:85:b9:e5:91:38:3d:6b:dd:41:ea:04:1a:19:e7:
a6:60:b5:51:e0:8c:52:e0:7a:74:76:e5:4d:fb:76:
19:e4:37:83:85:86:c5:ac:5c:96:77:65:27:76:37:
ef:e8:9a:df:81:b1:00:22:37:ec:fe:55:6c:36:c1:
e3:dd:c6:4f:b5:d9:8d:a5:99:5c:91:ce:31:4d:83:
51:55:70:a6:86:63:ba:70:ae:4b:77:7c:f5:0f:ec:
fc:05:d6:00:07:ad:04:d2:90:ca:57:64:50:62:e8:
c8:d0:35:2e:24:e5:10:57:3c:26:10:28:1e:e3:3a:
e6:e8:4c:26:0b:33:14:49:d8:8b:26:19:20:8b:df:
bc:48:28:49:fd:44:cd:a9:6e:9d:c3:8c:82:f3:fc:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:E2:49:62:AD:E5:0C:E3:33:45:B4:0A:A6:EB:6F:08:41:55:84
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BnPiSWKt5QzjM0W0CqbrbwhBVYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:a0:33:22:c2:01:1c:09:68:7b:f0:59:a3:11:f2:4a:e0:94:
b2:68:bf:df:53:b3:56:06:71:83:5e:68:4d:79:51:e1:34:da:
1c:b3:19:fe:13:0f:82:e4:b1:11:c1:e1:d0:9c:11:42:47:42:
48:51:4c:9d:61:1c:5c:63:04:6a:95:11:c2:c9:0c:c4:75:65:
a3:b8:83:4d:e4:7f:08:d2:55:a9:0a:4e:ec:fb:fd:4f:8a:ba:
1d:16:1a:ed:30:f2:93:2b:6c:44:b5:71:8e:4d:5c:6d:c6:eb:
2f:23:c2:6f:04:00:00:39:bf:c4:7e:5b:cd:16:da:0d:19:47:
aa:53:cb:1d:91:05:51:03:06:ed:e7:b7:30:b7:16:7a:0e:bd:
ce:38:ef:21:e7:e7:23:1a:cb:5e:ed:fa:7a:0c:af:0c:ee:71:
dd:22:e5:d4:48:50:5f:20:d1:f5:f0:78:20:25:cd:2c:59:33:
e9:37:10:a5:f5:31:87:3c:5c:a6:f1:89:00:94:fe:1c:76:fd:
6d:09:de:d3:d8:8c:1a:d3:57:d7:4c:34:46:49:84:0f:12:be:
79:b2:90:ca:ba:5f:5c:f5:94:6b:45:0f:28:6a:fe:70:d5:b1:
57:13:71:99:2a:80:fb:d9:49:db:d9:87:eb:ef:5c:9b:37:13:
91:4b:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org