Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CLT62tPX1k0sVIsT8D0FnzDbu2g.roa
File: CLT62tPX1k0sVIsT8D0FnzDbu2g.roa (raw, json)
Hash identifier: A/AAp/Vsvh7dj1zHZPjAvPaHAhBxdaucIRsRxFh1Z6I=
Subject key identifier: 08:B4:FA:DA:D3:D7:D6:4D:2C:54:8B:13:F0:3D:05:9F:30:DB:BB:68
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F3A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CLT62tPX1k0sVIsT8D0FnzDbu2g.roa
Signing time: Fri 12 Apr 2024 21:22:49 +0000
ROA not before: Fri 12 Apr 2024 21:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16186 (0x3f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 21:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08B4FADAD3D7D64D2C548B13F03D059F30DBBB68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:a5:bc:18:82:cc:5f:93:7e:7e:3d:b6:3b:
8e:70:36:4b:67:6b:16:00:5c:fc:5a:f5:90:a4:4d:
8d:2d:16:7e:4e:9f:3c:fc:f6:ae:31:e3:6d:d0:8e:
f1:76:be:95:e1:32:c4:c9:8b:aa:a2:4d:d9:33:28:
a3:71:c8:5f:2b:e5:46:8e:2b:aa:da:ae:8e:0c:43:
2b:5f:a8:a2:e6:54:3a:7c:a6:82:33:49:de:47:40:
d3:9a:e1:d4:ad:64:f3:c3:cc:c4:0c:81:0d:ff:ae:
b9:9c:5c:a0:79:1c:2c:07:3b:26:06:75:a4:80:0d:
52:9c:16:e0:d5:8b:64:3d:17:76:e2:d1:60:04:d7:
a9:84:7f:4c:70:ab:fa:2a:15:b7:49:be:f7:7f:b4:
e3:26:7f:5b:67:5a:40:1f:25:2b:7d:2e:98:58:4e:
d4:f1:a9:18:46:c6:03:6b:a3:57:8f:b1:24:e4:b5:
02:1c:a4:34:eb:19:fe:e7:97:5a:61:fa:4d:17:c8:
9e:a8:eb:01:3b:02:8a:7d:25:3a:80:76:2e:7f:6e:
56:5c:e3:89:3c:8c:9d:cd:44:39:80:dc:51:09:9c:
2e:29:45:d2:32:f4:20:b8:4d:bc:01:14:03:17:90:
aa:a6:1e:4b:a4:4e:71:98:7e:0b:4a:99:ad:cc:58:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:FA:DA:D3:D7:D6:4D:2C:54:8B:13:F0:3D:05:9F:30:DB:BB:68
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CLT62tPX1k0sVIsT8D0FnzDbu2g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:c0:1d:fe:46:1b:06:de:d3:18:95:46:14:27:c1:4c:75:55:
12:61:a0:d8:66:a5:b4:42:20:86:5a:35:cc:b5:68:71:33:81:
e7:c8:02:2a:b6:07:75:42:9c:6d:c7:62:21:e8:5b:8f:0d:1b:
2f:3f:09:dc:c6:b4:1e:be:1f:88:a2:0c:4f:91:59:48:43:97:
57:26:f9:c5:5d:67:5b:4f:a2:fd:d0:e0:91:32:74:1b:d8:3c:
8a:02:c8:51:01:aa:ed:e2:28:ea:bf:69:e5:1f:48:a9:1c:77:
0a:ff:cc:14:a8:33:7c:67:38:e4:cb:69:de:fe:a0:85:c0:7d:
ff:f9:f3:63:ae:e5:07:27:27:1c:cd:7e:11:29:5f:9d:d8:b1:
0b:63:16:19:76:77:58:29:07:df:a2:ce:17:7a:ae:10:d2:fa:
34:bb:33:7c:2a:bb:66:3b:d2:7b:4b:08:4f:b6:9f:29:e2:a7:
55:89:9c:06:07:31:cc:de:41:12:1b:94:5d:bc:63:24:b0:90:
ec:3f:de:28:1b:95:2e:f9:61:1c:1a:40:bb:86:c0:a3:83:4e:
2d:3b:fb:12:61:40:5a:41:df:60:8d:56:86:b9:63:6c:22:bd:
ab:06:cc:3d:52:ae:68:29:37:ec:cb:c3:69:dc:c5:d9:b7:30:
dd:87:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org