Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CindZ9ocboNbybOj0GL4WFakqDg.roa
File: CindZ9ocboNbybOj0GL4WFakqDg.roa (raw, json)
Hash identifier: uoxRvOFlUlT033tgbNpPI2pCEpQL14jPXzJkzszcW0c=
Subject key identifier: 0A:29:DD:67:DA:1C:6E:83:5B:C9:B3:A3:D0:62:F8:58:56:A4:A8:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CindZ9ocboNbybOj0GL4WFakqDg.roa
Signing time: Fri 05 Apr 2024 12:52:26 +0000
ROA not before: Fri 05 Apr 2024 12:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14774 (0x39b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 12:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A29DD67DA1C6E835BC9B3A3D062F85856A4A838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:bf:d3:82:97:ae:6d:63:d3:82:d6:ef:bc:
e9:93:6a:6c:03:e9:60:3f:af:bd:20:3a:72:d2:3b:
0c:13:e1:a1:0d:66:a8:54:b2:4c:d5:5b:90:db:3b:
a2:39:21:c3:5d:fa:b8:fb:56:47:de:1a:a6:d6:ee:
fe:7a:1b:c0:41:86:c9:d8:57:b7:46:0c:95:89:21:
a3:b7:bc:25:77:e0:97:14:8f:40:ce:77:9b:1c:83:
74:87:9c:d8:a5:11:61:04:5c:69:5a:58:63:83:c1:
2a:0e:4a:5f:8b:77:65:6e:51:07:ef:f0:be:45:e7:
86:cc:f1:2d:73:c4:33:17:a2:c8:75:d1:1b:9d:61:
fe:6e:2d:3f:47:f9:a7:5b:17:6e:c3:20:a2:35:c6:
2f:eb:e9:f0:8e:6e:95:33:29:6f:d1:73:21:32:a7:
1b:73:cf:7b:fe:0a:52:b3:5d:cb:21:05:4a:48:2a:
62:9a:ca:e0:e2:f5:d8:14:b3:54:09:d7:e8:f1:67:
fd:51:46:c5:9c:fc:66:21:47:75:ec:59:18:ea:54:
6e:f8:22:7d:01:af:eb:68:78:de:04:9e:d5:e6:20:
80:1a:d8:1c:51:4b:5e:1d:41:7a:95:72:7a:6b:fb:
13:73:e2:72:54:5f:f9:86:8e:98:4e:49:fb:3c:30:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:DD:67:DA:1C:6E:83:5B:C9:B3:A3:D0:62:F8:58:56:A4:A8:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CindZ9ocboNbybOj0GL4WFakqDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:a5:92:61:bb:70:7f:2a:df:c6:8a:5b:9e:5a:31:43:62:89:
ae:43:b1:d1:ed:87:cd:84:3c:c3:8f:cd:e3:6f:d5:79:ae:37:
9d:89:88:dc:43:c2:6f:da:da:99:50:79:b4:6e:8e:bc:48:83:
fe:0b:f1:ef:c7:16:ca:0d:63:37:89:88:d7:89:3f:21:16:b1:
89:f1:5c:3b:fb:5b:78:08:80:bd:42:78:9c:1c:e8:74:f9:0b:
0a:cd:ff:ab:23:33:7b:d5:14:3b:08:9b:65:24:6d:2e:6f:a1:
e4:d5:02:ae:fe:3b:5d:f8:26:64:c9:96:7e:95:59:f6:a9:72:
61:46:ba:7a:88:26:f6:a6:a5:1a:5e:c2:1f:ef:d3:84:47:7f:
04:2a:e1:ad:2d:3b:77:72:4b:ed:b5:a8:c4:73:7e:80:3b:78:
4d:b8:37:1e:c6:73:00:1a:b7:1e:6c:9f:16:38:8f:4e:c5:87:
88:bf:d0:d9:61:d5:08:80:2f:ae:d6:ed:13:2e:87:c8:5e:e5:
61:ed:40:b0:bd:48:af:40:67:b0:5b:9b:88:04:de:b1:50:46:
dc:f8:fe:0c:6f:c4:43:be:d7:4b:c9:fc:ad:68:a7:10:4e:c9:
2d:26:18:2c:94:f8:24:bb:20:17:1f:b7:b1:74:24:9a:8f:a2:
fc:b2:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:24 2024 by rpki-client on console-ams.rpki-client.org