Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CKfCfmbe_PlXT_zPyrXfL8ktjGA.roa
File: CKfCfmbe_PlXT_zPyrXfL8ktjGA.roa (raw, json)
Hash identifier: OGhCOIR2sP4C2pJAiSnBpFuU5cYVXv4Hf1SFULuRoOY=
Subject key identifier: 08:A7:C2:7E:66:DE:FC:F9:57:4F:FC:CF:CA:B5:DF:2F:C9:2D:8C:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CKfCfmbe_PlXT_zPyrXfL8ktjGA.roa
Signing time: Thu 04 Apr 2024 06:52:21 +0000
ROA not before: Thu 04 Apr 2024 06:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14534 (0x38c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 06:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08A7C27E66DEFCF9574FFCCFCAB5DF2FC92D8C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:fe:f3:60:67:3f:48:34:9e:ec:50:3f:9a:
33:57:b6:ba:a6:7a:a5:03:cb:e2:b7:32:d0:98:54:
03:1e:94:44:23:3b:3b:fe:1e:f0:ff:94:9d:e9:ce:
0c:1c:f7:ee:fb:c2:c0:ef:b3:a7:0c:43:fb:f0:73:
5c:e1:78:ab:c4:8d:7d:1b:e5:db:91:41:69:d1:1f:
0b:81:45:06:2a:d7:9d:4b:b8:1e:e3:2e:dc:c7:d2:
f6:19:4c:8e:d8:28:3c:c8:bf:37:2e:6c:51:75:a6:
0c:15:82:58:69:70:16:e9:10:96:c1:7a:92:8a:55:
c1:69:ef:70:e1:34:2f:c7:26:03:f0:12:8c:c6:50:
28:d3:fb:fb:4c:a7:c2:fe:27:d2:e1:3d:59:08:4d:
35:f0:aa:54:d9:48:eb:54:32:d7:bb:31:a8:25:70:
fe:0f:37:23:cc:33:0a:16:90:da:74:e0:53:fa:2b:
f1:34:bc:7e:28:fa:2a:11:ef:cd:18:6c:ea:1a:65:
7e:8c:6c:c3:bc:fd:26:3f:b2:62:4a:df:fa:aa:07:
c0:c6:f5:2c:1c:1e:db:c5:1f:66:a6:84:e0:52:dd:
17:75:71:be:e9:e8:2c:1f:6a:12:9d:f2:c3:f8:53:
21:35:4b:b8:59:58:eb:0e:31:7e:b7:71:3f:56:86:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:C2:7E:66:DE:FC:F9:57:4F:FC:CF:CA:B5:DF:2F:C9:2D:8C:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CKfCfmbe_PlXT_zPyrXfL8ktjGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:bf:a1:b8:67:65:0d:83:b6:5f:3d:91:7b:f1:16:76:2a:a9:
eb:77:62:4d:af:ee:02:da:72:93:66:d5:60:e9:10:69:72:9f:
12:81:5a:4e:14:98:35:fa:03:88:95:d7:63:08:94:44:7d:f8:
d2:12:50:48:f7:44:40:bd:e2:44:83:c5:74:8e:05:5d:07:d8:
10:e7:85:df:3d:7b:6d:c1:a9:72:bb:6c:b1:57:98:d2:ff:40:
60:2f:44:fd:4f:8c:aa:c5:44:49:b5:05:5b:6c:40:24:40:d2:
e1:ee:a2:fa:61:8d:32:46:f3:b6:dc:99:84:00:8a:5a:54:0f:
60:be:a7:31:ba:36:27:e9:aa:d4:b3:b2:a2:10:65:66:c7:43:
b1:89:72:76:27:3f:72:cd:2a:51:a1:c5:d4:a1:40:7f:f5:b2:
c1:80:e5:a9:74:3a:e7:bf:4e:eb:79:d5:4c:de:f7:83:7d:2b:
92:dc:ce:65:c6:0a:70:87:d8:af:71:83:2c:3e:bc:47:34:3a:
37:a6:32:45:48:7e:ed:de:68:34:0f:48:8a:cf:09:a6:5e:c9:
05:5d:66:2e:42:4f:e0:6c:4c:06:dd:56:39:cb:5b:bb:53:36:
82:ad:c3:92:14:80:67:66:9e:db:87:10:b6:68:98:1a:a1:2e:
9b:40:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org