Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Bz-RzVji1gCIdcH2LSvAiOViW4I.roa
File: Bz-RzVji1gCIdcH2LSvAiOViW4I.roa (raw, json)
Hash identifier: iJ2C8nb8Lpxv5uiI1XVWKMbDkiazATSSXYX+JdyXdF4=
Subject key identifier: 07:3F:91:CD:58:E2:D6:00:88:75:C1:F6:2D:2B:C0:88:E5:62:5B:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4452
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bz-RzVji1gCIdcH2LSvAiOViW4I.roa
Signing time: Fri 19 Apr 2024 16:23:01 +0000
ROA not before: Fri 19 Apr 2024 16:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17490 (0x4452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 16:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=073F91CD58E2D6008875C1F62D2BC088E5625B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:1b:62:4e:4c:04:03:de:e0:1e:06:82:be:
ac:42:79:bc:3b:00:2a:66:bc:73:bc:6e:7f:87:6f:
76:c1:34:c2:1d:0d:a4:bf:21:63:62:95:3b:e8:dd:
21:31:55:be:7c:2d:f4:e0:a1:24:76:66:95:4f:9c:
9a:0e:46:fa:70:fb:ba:c0:28:d0:d6:c1:d1:28:8e:
21:92:59:27:36:ca:2a:a7:b3:03:30:fa:ef:6e:32:
69:7b:d5:b1:07:53:5c:1a:21:07:fd:db:42:fc:6c:
94:58:12:01:bc:61:d2:98:78:dd:2a:46:db:1d:c4:
89:da:73:75:45:fb:45:19:0a:25:68:68:42:92:1d:
36:9e:09:5f:cc:5e:f2:a1:da:0f:74:5f:8f:87:d9:
0e:89:f7:cc:46:dc:9e:f9:ba:88:0c:e2:84:ff:3b:
14:c2:e3:91:0b:27:72:fb:79:42:d5:32:a8:4a:e0:
3b:de:18:e7:06:6e:bc:f2:fc:c4:39:aa:b7:b4:2e:
6d:e6:0e:96:ae:29:35:9a:82:b1:8c:b6:3c:32:1b:
f9:fe:b8:76:b6:66:0e:b0:c1:61:02:85:3b:4f:b2:
27:1d:e3:7b:aa:94:e9:bc:db:e6:4b:62:eb:5b:d1:
71:71:8e:a7:32:61:01:29:f5:d1:a3:36:73:78:a4:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:91:CD:58:E2:D6:00:88:75:C1:F6:2D:2B:C0:88:E5:62:5B:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bz-RzVji1gCIdcH2LSvAiOViW4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:34:a3:cb:a5:a2:8a:b8:96:d8:06:9d:d7:91:75:90:6c:f8:
af:2f:7c:be:d3:a8:3c:f3:61:6c:96:fb:af:00:57:27:3d:88:
df:55:12:86:72:f0:20:52:5c:ac:8f:b9:6c:9e:75:08:04:27:
2f:b9:19:85:2f:ff:c5:3e:b1:57:4b:4c:af:a3:ed:4a:98:0d:
d1:7b:56:20:9f:d0:d6:47:d3:a8:c2:ec:3f:b2:1d:8d:b2:19:
e4:d1:1b:f2:2f:e7:23:ea:f2:2c:3c:29:22:1a:dc:c9:5a:1e:
9e:6f:e8:0f:17:27:b9:16:0a:62:26:55:78:90:56:76:63:df:
40:2d:31:93:1d:37:e2:69:b3:c5:c7:43:51:52:ae:c4:5f:0a:
45:25:fb:61:6e:2c:cc:12:55:ef:4f:93:a1:ac:e7:dc:6a:3d:
35:df:fd:3a:8e:7b:18:31:b5:91:82:82:65:2b:4f:e8:5d:b2:
7a:0c:1d:af:06:42:60:d5:6b:55:37:1d:db:bf:77:36:c8:47:
d1:f9:16:a0:cb:b9:26:f2:3d:8e:8a:2c:06:f6:66:19:98:e6:
17:b9:88:b3:a3:27:df:fe:53:2b:22:22:b6:c5:50:85:37:45:
44:96:0e:3d:a5:67:62:ad:2c:bd:44:86:28:89:5a:36:fc:f1:
b4:40:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org