Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FD3kQF18Xgr8K37kkFIktu2EGsA.roa
File: FD3kQF18Xgr8K37kkFIktu2EGsA.roa (raw, json)
Hash identifier: Vf6oHe7xAXl6xCBefLBMxXK9qUupcThzS78gsjJdzgk=
Subject key identifier: 14:3D:E4:40:5D:7C:5E:0A:FC:2B:7E:E4:90:52:24:B6:ED:84:1A:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FD3kQF18Xgr8K37kkFIktu2EGsA.roa
Signing time: Fri 03 May 2024 11:23:44 +0000
ROA not before: Fri 03 May 2024 11:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20138 (0x4eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 11:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=143DE4405D7C5E0AFC2B7EE4905224B6ED841AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:ad:37:9a:08:84:56:e3:2b:51:62:ab:76:
aa:63:a7:20:4f:67:d5:1d:a2:26:79:75:bf:33:38:
5f:5c:35:1d:ae:3d:d6:47:2e:c0:fe:41:88:8c:1f:
26:49:f8:d2:db:0d:4b:80:d7:92:ec:50:93:5a:e1:
85:02:29:2f:4f:62:a6:c1:14:07:61:97:e6:19:d2:
7c:f3:7e:62:c7:70:3c:7a:e0:23:82:5b:75:5f:52:
ea:36:bd:b2:d2:33:01:5c:30:50:96:6e:16:a9:b4:
bf:96:6f:2d:30:15:d4:a1:4d:fe:84:fb:91:1d:6e:
d2:3f:de:41:2a:b4:11:b1:f2:24:a3:4d:09:15:76:
79:33:f1:e5:77:92:4c:fc:30:63:f4:6e:f4:da:62:
a2:fb:74:08:d1:ae:c4:7c:16:e1:4d:54:7b:e8:e0:
60:3f:20:41:33:27:e1:5d:00:93:bd:ea:22:6e:79:
97:44:44:8f:a9:b4:3e:81:19:45:ef:6a:18:8e:67:
22:f5:ef:4d:b6:72:a8:a7:3b:ab:05:38:12:a0:dc:
97:d5:4e:f2:7f:3c:63:12:09:1d:c0:46:3c:db:f5:
96:16:08:99:95:ff:bd:3b:af:61:cd:64:f5:2a:54:
2f:2a:80:41:ac:09:36:d0:48:dd:26:b0:dd:59:7b:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:E4:40:5D:7C:5E:0A:FC:2B:7E:E4:90:52:24:B6:ED:84:1A:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FD3kQF18Xgr8K37kkFIktu2EGsA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:a5:ed:24:d1:da:9d:e0:d9:f0:3f:77:e5:1c:8c:90:62:20:
9a:28:69:e5:30:ab:b1:00:a7:15:b4:ec:b1:16:84:0d:5e:97:
80:95:da:d4:29:a0:65:4b:50:46:ee:6b:ab:fe:44:4e:30:c8:
50:cb:46:87:00:d8:88:6d:bd:95:e5:0e:07:36:e3:ea:63:a2:
a2:59:ac:f1:5a:53:01:d2:4b:69:35:db:dc:e9:92:e4:07:20:
c0:57:f6:4b:75:ea:0e:23:e0:2e:fb:e2:3f:c7:83:27:d6:f5:
e4:26:bd:36:d0:25:08:49:69:fc:46:a8:2d:9e:30:d3:a9:f6:
4e:9b:b3:11:fb:7c:33:90:88:61:84:1d:ec:93:df:b5:38:a9:
55:7b:0b:70:08:cd:62:52:25:37:c8:d4:6b:82:71:b3:d2:bf:
5d:a4:75:11:d7:8f:62:d6:25:85:2f:c9:f0:59:a4:28:dd:ab:
14:78:4b:59:87:86:af:43:e8:d8:ca:72:d0:f5:35:47:5d:c4:
10:83:c1:97:2a:01:fd:10:58:78:8f:b2:d0:a1:51:7d:0e:42:
56:f5:44:1b:a7:f3:09:ea:47:a1:e2:6e:13:ba:84:71:69:6d:
68:33:41:d6:e8:df:80:d7:26:c8:01:df:86:e5:bb:07:af:00:
78:e1:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org