Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DbvbevAuaGoIOizi9g4mLZh28K4.roa
File: DbvbevAuaGoIOizi9g4mLZh28K4.roa (raw, json)
Hash identifier: wfFBRLHnBYHHqnCqFKmarxEdn4y7HpFpx0ZMh9jMUe8=
Subject key identifier: 0D:BB:DB:7A:F0:2E:68:6A:08:3A:2C:E2:F6:0E:26:2D:98:76:F0:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5436
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DbvbevAuaGoIOizi9g4mLZh28K4.roa
Signing time: Fri 10 May 2024 20:54:09 +0000
ROA not before: Fri 10 May 2024 20:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21558 (0x5436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 20:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DBBDB7AF02E686A083A2CE2F60E262D9876F0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:74:fa:81:af:f1:6d:31:bc:77:68:e7:e5:
bf:dd:23:61:5b:b2:0e:b4:a0:9d:fb:10:d6:1a:2b:
27:34:fa:97:07:b7:c6:e4:df:e0:6a:67:42:c3:b5:
3e:38:24:44:fa:0f:4f:6b:92:ed:d2:3d:4c:2f:02:
2f:26:b0:da:40:48:fe:c0:7d:87:0d:be:54:1a:3f:
6a:74:39:89:fb:fc:18:4a:0d:46:4a:e8:a9:db:a3:
13:c4:78:61:06:19:d7:40:b4:57:6f:3d:69:42:17:
ac:50:5d:dc:67:ef:a0:15:ae:09:4f:0b:18:2a:40:
99:70:74:6c:28:9b:74:35:b9:e1:cf:9d:44:1a:d8:
c3:4c:fc:5b:2b:ef:d5:98:f5:b9:ef:63:69:14:8e:
2f:38:47:d9:41:e6:05:c8:33:3c:61:c3:61:3f:11:
87:a5:54:7f:84:29:bb:07:e0:9e:99:e7:2f:b0:8e:
2c:07:3e:67:42:df:aa:c1:3d:d7:61:7c:7c:cb:dc:
9b:65:aa:a6:f4:5e:79:89:0c:24:11:dc:e3:27:fc:
a6:3a:a5:95:d9:7d:d1:50:77:58:34:db:ab:b7:df:
49:d2:ec:0d:0d:62:92:45:01:d9:cc:74:d0:f9:c5:
3a:85:d7:ad:3e:24:95:53:e3:2d:7c:85:bc:5d:5a:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:DB:7A:F0:2E:68:6A:08:3A:2C:E2:F6:0E:26:2D:98:76:F0:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DbvbevAuaGoIOizi9g4mLZh28K4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:b4:22:51:6c:96:51:96:97:b0:97:db:4e:a7:d3:db:ec:17:
4b:3b:a9:89:a5:48:ec:21:06:fe:f9:96:4a:60:98:ef:9f:12:
69:70:01:86:57:e4:45:11:81:3c:73:1e:1e:55:64:1a:ca:75:
7c:58:4c:22:98:3e:e7:5f:ab:52:b3:69:34:c9:8a:7d:43:42:
ce:89:c5:1d:fe:e2:b8:4c:71:91:d2:64:ef:a6:a8:b2:c4:78:
38:d7:2f:4e:69:13:d7:e4:75:fc:e9:de:7b:c3:3c:a2:a1:8b:
71:c9:c4:5e:bc:ad:70:6d:36:fa:93:91:5d:67:bd:ec:9e:89:
5d:3e:24:c2:af:c1:d8:19:52:07:04:eb:e8:d8:2b:5e:39:5e:
0b:ef:64:26:7b:a7:cc:e8:1f:df:e3:a0:67:a3:2a:88:ca:2d:
68:67:bd:ee:d3:0d:71:00:e9:51:40:e3:0f:a8:b8:8e:91:21:
7e:d1:15:7e:f2:44:d8:8a:4f:d4:4f:8a:2b:87:c9:35:4e:4e:
65:b1:a8:23:72:7f:80:65:7e:f1:16:b7:0c:ab:4e:cc:25:c6:
5e:6a:d1:05:9a:aa:13:b1:3c:cf:ae:6e:b3:6b:ee:18:e8:67:
88:2d:53:1f:c7:45:5b:fe:0d:84:86:5e:52:20:63:97:65:f8:
f2:4c:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org