Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Cpe6h5MV-9G1yd_X_FC7t6ZcruI.roa
File: Cpe6h5MV-9G1yd_X_FC7t6ZcruI.roa (raw, json)
Hash identifier: zCbdL3jaHRd2AhP/R6zwI4bX+9mHVG5Ym37+YVhfIVQ=
Subject key identifier: 0A:97:BA:87:93:15:FB:D1:B5:C9:DF:D7:FC:50:BB:B7:A6:5C:AE:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F2A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Cpe6h5MV-9G1yd_X_FC7t6ZcruI.roa
Signing time: Sat 04 May 2024 03:23:59 +0000
ROA not before: Sat 04 May 2024 03:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20266 (0x4f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 03:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A97BA879315FBD1B5C9DFD7FC50BBB7A65CAEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:66:67:a6:de:76:7d:33:7b:29:26:07:7f:
20:81:7b:07:59:43:de:50:fc:67:e1:4a:77:b6:fc:
a4:ea:cc:12:f2:75:42:be:e1:56:e7:4a:a4:58:0b:
9b:aa:2b:5b:00:18:ef:4a:a1:6a:e7:7d:b2:33:f0:
a2:fb:70:dc:c8:f0:64:33:f6:3a:3f:32:fb:ee:88:
e9:2c:c8:b8:16:5c:ca:01:eb:3f:3b:39:d9:fd:3a:
2e:fd:a7:1e:eb:eb:07:19:42:f3:27:21:f8:4e:b8:
94:21:73:c3:aa:63:ba:35:d0:ea:fb:bf:a8:a8:8c:
13:10:cd:7a:cd:c6:5c:66:69:72:a5:82:ac:45:55:
b8:bf:77:61:e8:55:e3:a5:f1:58:6f:67:8f:c8:f5:
c6:26:0f:29:29:52:b7:2e:1f:da:1b:16:e9:db:58:
35:69:b3:f4:93:2c:c2:ed:31:e1:ef:f0:e7:f4:ba:
69:ed:06:95:f2:a0:3a:7a:da:26:80:b8:89:75:94:
4e:fe:d4:aa:50:5e:76:31:d5:71:2e:9a:57:ea:b1:
4d:f8:9b:6e:7d:86:49:b3:8d:48:52:9b:eb:c4:2a:
62:69:97:fe:19:5e:9c:10:ad:70:30:1a:90:da:0b:
81:dd:aa:25:f1:71:73:8e:05:8a:67:ff:31:8e:54:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:BA:87:93:15:FB:D1:B5:C9:DF:D7:FC:50:BB:B7:A6:5C:AE:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Cpe6h5MV-9G1yd_X_FC7t6ZcruI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:89:82:9a:6d:d3:75:f1:dc:d4:74:e9:8b:dc:95:fb:31:5d:
b9:03:d4:bf:85:7b:eb:15:a6:4d:2c:98:ff:20:10:1f:75:b9:
91:1f:c9:38:0c:74:99:44:00:9e:80:b4:c0:bd:ae:4c:ac:14:
a3:c1:ab:3e:43:b3:6c:fa:7f:df:80:e2:81:2c:a3:46:8d:6d:
2d:19:3d:2a:83:f2:b4:0a:37:52:ff:67:64:52:ac:c4:9a:13:
13:ee:48:97:c8:82:d4:8c:18:eb:f9:c4:51:4a:17:04:f7:56:
df:8f:3f:d8:06:f6:95:40:b0:40:d1:f3:ce:84:92:fd:1a:34:
3b:48:80:ac:f2:77:3b:bb:8a:f9:e6:58:fc:ef:a1:6e:78:14:
3c:a3:9f:d2:f6:8e:c6:4b:df:2d:90:4a:a0:dd:e2:2b:ba:77:
e3:c2:3a:77:cb:98:aa:54:65:78:02:0f:28:9c:bc:ce:4b:12:
b9:86:6f:11:1d:89:28:4c:29:c8:e4:bc:a5:ba:28:38:07:27:
93:61:5c:41:82:d7:30:25:0d:71:6e:e1:f6:01:5a:94:ce:9d:
98:12:8c:78:ae:2c:97:83:60:8e:23:3e:c1:4c:4e:a5:f1:42:
2d:96:fa:80:00:91:29:df:0b:2c:f6:5b:83:c4:e9:5c:e7:89:
0d:59:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org