Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EefafQpcvBW8H-r3D8vH_4O-4lU.roa
File: EefafQpcvBW8H-r3D8vH_4O-4lU.roa (raw, json)
Hash identifier: f7PkcrDDAiC7lQ/HQzMjxbtaoDxWF4EV8FqTfFseIYA=
Subject key identifier: 11:E7:DA:7D:0A:5C:BC:15:BC:1F:EA:F7:0F:CB:C7:FF:83:BE:E2:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5372
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EefafQpcvBW8H-r3D8vH_4O-4lU.roa
Signing time: Thu 09 May 2024 20:24:09 +0000
ROA not before: Thu 09 May 2024 20:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21362 (0x5372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 20:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=11E7DA7D0A5CBC15BC1FEAF70FCBC7FF83BEE255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:96:54:f0:9b:6b:ba:d0:ec:4d:5a:ad:d9:
8b:fa:3c:90:e4:8f:08:d6:f0:f8:36:84:55:2e:d9:
95:b2:8c:9d:4f:7d:23:77:80:7c:a0:ac:63:59:4a:
f9:32:8e:bf:19:65:b1:bf:85:00:33:e2:b1:8a:28:
00:d0:5d:57:1d:9c:fc:ed:9e:32:1f:51:b7:45:fc:
87:66:b7:c8:0b:4a:31:9a:85:cc:45:c9:93:1d:91:
b8:f7:8c:3d:6c:be:c0:a1:0f:53:08:21:a8:94:00:
8d:5c:4a:fd:55:e2:1c:31:46:e8:cc:e9:05:58:b4:
77:74:4c:b6:51:21:34:20:b2:b0:f7:d5:ee:67:b7:
33:38:9c:2a:05:6a:98:a6:a3:52:d4:e2:31:25:73:
6d:36:99:20:a5:11:07:b8:72:9e:2b:dc:f5:7c:51:
63:25:02:d3:af:f3:66:44:4a:09:e8:c2:7a:78:0f:
01:43:e3:22:3b:66:2b:0c:a2:97:bd:9d:17:88:47:
3d:8d:ba:e6:9d:d9:83:0d:99:72:ef:68:0a:6a:50:
57:0d:58:83:61:70:61:47:eb:7f:f7:a2:f9:f6:62:
f4:67:f2:3c:a1:9f:5e:f9:13:d9:58:77:5f:a0:35:
4d:49:9c:e0:cf:4c:d2:72:a7:74:6c:cf:e0:63:2b:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:DA:7D:0A:5C:BC:15:BC:1F:EA:F7:0F:CB:C7:FF:83:BE:E2:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EefafQpcvBW8H-r3D8vH_4O-4lU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:ed:3e:44:b5:c7:70:76:87:ee:3b:5d:29:40:91:d6:49:53:
7c:62:ac:16:7e:03:59:d6:f4:9b:7f:cf:17:0e:11:65:a0:1c:
41:51:28:79:75:88:f7:c1:b3:52:8c:b3:da:80:fe:f3:68:e0:
01:73:2c:3a:4d:52:20:ae:c7:a0:d1:a1:f3:af:c3:aa:e4:0f:
7e:34:db:3c:60:53:de:a3:a9:a3:f7:34:05:2f:25:4c:42:6c:
92:37:b0:ce:60:13:5b:b4:74:56:2c:4e:32:fb:75:9b:1c:9a:
d5:c5:3c:44:49:e9:c9:17:96:20:83:18:d5:4c:a5:31:6f:1e:
19:e6:49:b7:62:e0:df:f5:eb:04:c4:c0:19:99:ec:8c:79:3a:
3c:2d:a2:d6:5d:f6:14:88:08:2f:3a:8c:cd:79:1a:4b:76:44:
69:1b:1e:bf:9d:4b:08:87:9d:48:cf:7d:a2:08:eb:65:ed:d0:
7c:a1:ba:6a:1c:b7:e4:31:45:a4:e4:4e:fa:50:bc:31:68:f5:
a1:83:5f:78:62:32:72:84:e3:4d:f6:f7:47:0c:da:fa:dd:1e:
26:9d:60:4a:77:69:1a:af:e6:13:ab:17:48:27:49:65:08:da:
c3:81:dd:33:44:c4:c9:49:5f:ea:d1:45:59:47:90:66:ff:95:
23:12:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org