Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Dek0LdcXn8n3Qk7VydHRPhVIJ6U.roa
File: Dek0LdcXn8n3Qk7VydHRPhVIJ6U.roa (raw, json)
Hash identifier: 9suS6bPDuObNj7WQizHXH00JxcsEENkPA7dw2chdyCI=
Subject key identifier: 0D:E9:34:2D:D7:17:9F:C9:F7:42:4E:D5:C9:D1:D1:3E:15:48:27:A5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dek0LdcXn8n3Qk7VydHRPhVIJ6U.roa
Signing time: Thu 02 May 2024 03:23:41 +0000
ROA not before: Thu 02 May 2024 03:23:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19882 (0x4daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 03:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DE9342DD7179FC9F7424ED5C9D1D13E154827A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:74:53:73:68:a8:e6:46:6d:91:4f:91:46:
21:fe:e0:9f:ce:9d:ee:03:40:57:4f:1e:73:dc:1f:
c9:95:01:c7:72:c1:e1:50:6c:ca:2c:36:22:87:2a:
ae:53:2c:4f:18:73:73:b4:64:86:1c:cc:d6:1f:bc:
6a:c6:77:b7:f0:06:21:57:d7:05:87:76:53:a3:c1:
7d:c4:63:2b:dc:20:a8:86:47:ba:55:22:0c:da:a5:
c3:eb:38:bc:a1:f4:4c:af:bf:cf:ee:eb:54:b7:98:
db:87:13:12:cf:08:18:91:95:a9:49:b0:3a:59:18:
c5:29:85:39:d4:c4:e5:ed:9c:24:c8:09:79:8d:fb:
02:82:de:cc:12:8f:c8:e8:30:7c:a9:0a:e4:2a:4d:
16:ef:02:98:e7:44:80:ab:4f:08:f9:fd:e8:02:14:
b4:7c:ad:36:d7:b4:75:84:59:ff:c2:b8:cf:e4:b1:
ad:6b:05:87:b7:b5:d3:59:b4:2a:81:62:41:2f:58:
df:4a:d2:75:52:c2:dc:ad:9c:c6:ba:47:64:0c:0c:
5e:c6:e3:9c:7f:a9:3f:54:a8:67:15:5d:f6:d2:2c:
b8:7f:20:b6:2e:00:7e:92:ba:aa:92:0d:92:40:5f:
82:a0:6d:f3:63:a7:98:29:d8:7e:ec:8d:ce:d1:81:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:34:2D:D7:17:9F:C9:F7:42:4E:D5:C9:D1:D1:3E:15:48:27:A5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dek0LdcXn8n3Qk7VydHRPhVIJ6U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:d5:55:62:b3:1b:09:d2:da:85:00:a4:49:20:14:79:f4:96:
93:a4:c6:b1:19:21:e4:95:a8:c9:02:15:02:f7:bc:36:96:8d:
cd:53:a3:7c:97:ac:2c:ed:cd:46:ea:06:03:67:29:58:6d:77:
76:e3:e0:2e:ec:19:37:d6:f0:8c:9b:de:a2:9b:64:5c:ee:09:
c5:84:b9:c3:d0:a7:a7:d2:55:bf:9e:d4:52:81:e1:c6:5f:bf:
b9:30:d3:c7:a5:b9:b1:12:82:92:d6:06:fe:a2:47:4d:e5:22:
fd:84:6d:64:f4:ad:3b:43:f3:ed:ff:c9:6b:c3:f1:89:c5:14:
e4:a2:07:bd:cc:b5:21:72:f5:c8:13:51:0f:24:d5:73:f4:74:
d9:ea:73:e4:5f:fc:2b:8b:b3:a9:a6:07:a4:3e:78:fa:36:f0:
51:2e:e0:a9:b2:17:7c:d3:f5:9a:f7:dd:4f:e0:e6:ec:14:af:
77:ad:92:f6:59:45:77:70:3a:2a:99:b1:ae:72:65:f9:c8:ee:
e9:89:33:ec:d1:a9:e3:6b:d8:6b:03:6e:7d:ce:51:a3:62:39:
37:ff:6b:0f:b5:65:06:70:9c:73:34:b0:3a:f3:4b:70:2d:28:
a4:66:58:04:a2:70:07:0d:29:c8:ac:07:b6:3a:8d:30:0a:00:
81:a9:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org