Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EDgCIrzIUW6q_GwhHK7UVpJcAPo.roa
File: EDgCIrzIUW6q_GwhHK7UVpJcAPo.roa (raw, json)
Hash identifier: JAepaejd3m2Z3JnhLFJ2JDvhx+vQBDyyh3sYAx/ToHU=
Subject key identifier: 10:38:02:22:BC:C8:51:6E:AA:FC:6C:21:1C:AE:D4:56:92:5C:00:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 336E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDgCIrzIUW6q_GwhHK7UVpJcAPo.roa
Signing time: Thu 28 Mar 2024 03:52:00 +0000
ROA not before: Thu 28 Mar 2024 03:52:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13166 (0x336e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 03:52:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=10380222BCC8516EAAFC6C211CAED456925C00FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:9c:f3:28:44:a0:6c:99:c4:5a:9b:1e:95:
05:b8:29:db:f2:54:07:3b:89:f8:0b:fa:38:6b:7f:
4f:94:c1:d7:ab:11:30:2b:21:14:a3:a2:0f:95:68:
ea:6a:0b:3f:44:48:49:10:9f:83:f9:69:ff:00:6a:
95:55:ca:06:68:3a:10:90:bc:59:c8:72:e2:49:77:
79:13:ec:31:61:19:24:06:46:15:6f:6a:4a:36:03:
19:89:85:17:7c:64:59:d7:37:47:c8:21:49:24:ea:
47:a2:1f:e5:05:6e:6a:d3:df:41:8c:77:d4:90:be:
5c:b7:a5:b0:22:1c:37:aa:12:5b:eb:5c:c5:ce:83:
23:55:9f:13:25:3c:6f:d6:7b:19:21:ec:a8:4e:5e:
59:e2:05:88:46:c9:5c:dd:fc:ae:02:51:04:90:39:
0a:ca:19:ca:79:46:f4:53:fb:25:3a:99:f3:ec:00:
2f:68:23:38:8d:20:f9:22:96:14:72:b4:d6:81:64:
1f:e5:6e:6b:f0:f5:7d:88:ba:91:53:aa:ed:a3:93:
9e:7e:66:07:c5:11:ea:c3:49:b7:67:bd:ea:0a:bc:
db:55:34:61:de:f1:ad:fb:3d:25:8c:46:65:fe:9d:
1e:9d:72:85:fc:94:d5:27:82:7a:2b:6c:f4:be:7d:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:02:22:BC:C8:51:6E:AA:FC:6C:21:1C:AE:D4:56:92:5C:00:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EDgCIrzIUW6q_GwhHK7UVpJcAPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:c2:e2:d2:2d:4d:25:07:94:43:b7:6f:d2:f6:20:72:a0:fe:
11:6b:fe:4f:22:b6:7a:00:d6:d4:f6:cc:0c:30:d4:d5:32:d5:
87:29:36:91:9c:fb:77:f7:de:6f:3b:9f:c2:e6:a0:91:ab:34:
ea:30:da:8c:a7:80:87:db:fc:0f:4b:39:7e:a8:66:d9:2d:52:
9a:76:0c:a0:5d:35:cf:77:01:59:f9:4c:45:da:d8:ea:f0:f0:
59:f3:3b:24:5b:74:c9:04:6a:5e:15:93:d6:46:9f:a1:a0:85:
90:ed:05:be:e9:41:86:5a:79:fa:61:d5:cf:63:6a:d6:75:a7:
ac:8a:f5:f1:e2:10:36:28:58:45:58:ae:17:8f:ba:52:10:38:
47:5e:8e:e6:87:24:0b:1f:d7:bf:7c:a5:f9:d2:4f:e4:07:ae:
8c:9c:74:7c:16:11:2c:15:d9:54:90:aa:2b:4a:9e:fa:ca:3e:
62:48:4c:b2:fa:fe:21:e9:89:e5:91:9f:d7:3c:77:a0:32:7f:
59:c7:87:6e:72:a3:03:4b:07:85:ff:96:88:88:6c:4b:6b:a1:
ad:59:b4:fc:be:69:e2:ca:0e:16:13:00:68:92:8d:b9:84:89:
a2:ca:45:4b:19:91:13:7c:33:88:8e:ff:00:8c:1f:83:73:d9:
4c:10:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org