Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FZLb9PfOPLFxwfHYrfqc9LwEFO8.roa
File: FZLb9PfOPLFxwfHYrfqc9LwEFO8.roa (raw, json)
Hash identifier: Iz56NoGGzP4mBwPRc5+n+y42G+7PFN6C3U7bp5TAKpo=
Subject key identifier: 15:92:DB:F4:F7:CE:3C:B1:71:C1:F1:D8:AD:FA:9C:F4:BC:04:14:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 448A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FZLb9PfOPLFxwfHYrfqc9LwEFO8.roa
Signing time: Fri 19 Apr 2024 23:23:02 +0000
ROA not before: Fri 19 Apr 2024 23:23:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17546 (0x448a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 23:23:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1592DBF4F7CE3CB171C1F1D8ADFA9CF4BC0414EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:2b:d9:c2:66:cd:a2:71:1d:2b:99:d3:aa:
43:c9:d3:04:af:fd:4e:ab:94:8e:2e:e4:8b:75:c5:
9e:60:30:2f:11:d2:26:a8:46:ff:97:fb:cd:9b:ef:
55:00:97:d8:d8:1e:7a:0c:7e:d6:d3:97:45:0f:46:
a7:56:9b:c6:c6:05:14:64:e6:0c:f6:a1:20:73:81:
83:ed:56:32:d1:53:d1:25:70:58:d1:48:3c:2f:a4:
b2:ff:3a:03:e5:c3:00:8b:1d:81:7b:46:bc:af:69:
54:9d:67:99:f5:30:46:09:67:83:23:6c:0e:4f:09:
80:d9:7c:ea:54:2c:90:f4:e6:74:38:d0:65:9c:ac:
b0:22:ee:62:fd:87:f6:92:62:20:1e:30:76:73:42:
be:58:36:c4:97:e7:38:a2:4f:98:0f:14:6e:f9:00:
f8:6c:b1:3f:ba:db:22:4e:2b:43:b2:22:62:bd:bb:
ba:4c:f9:64:6b:f0:b3:aa:a4:de:f0:fc:cd:0d:f1:
9f:9d:62:d8:24:83:cf:da:95:9b:ac:c4:38:0e:7f:
40:1e:0a:3a:62:0c:ce:88:b1:3f:3c:98:7a:ce:e4:
59:e8:71:b6:f6:a1:b8:6d:ef:7b:1b:6b:c6:65:d5:
af:bb:ff:65:bc:8a:26:9b:01:9e:33:bd:d9:9f:bb:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:DB:F4:F7:CE:3C:B1:71:C1:F1:D8:AD:FA:9C:F4:BC:04:14:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FZLb9PfOPLFxwfHYrfqc9LwEFO8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:35:33:81:08:c0:cb:8f:c3:06:14:69:c3:8c:06:3d:26:99:
d2:b2:9c:b5:0a:e8:22:be:37:e7:a3:d5:d6:bb:88:0d:58:24:
d4:19:3c:6f:0b:26:83:a1:55:92:4c:c9:7f:4b:15:7c:8d:01:
a5:e0:c3:f0:4d:51:50:fb:2c:7b:9c:b6:f6:21:c3:66:36:f0:
ef:17:89:dc:b4:39:b6:67:b0:a1:f9:92:a2:32:e9:d6:cb:11:
12:bc:29:9c:0c:39:56:fd:50:3e:75:d3:86:00:dd:73:1d:e2:
f1:3b:71:5c:56:d9:c0:cc:0a:72:b7:17:51:18:af:31:11:3f:
b9:6b:8e:63:59:5a:44:e3:99:52:ad:4d:31:39:f8:5d:35:12:
f3:3c:8b:4e:a6:94:93:0b:09:d5:69:a7:e3:9b:9d:65:a4:8e:
48:36:0c:bb:c9:e2:e6:33:d3:4c:51:eb:fb:f7:43:e3:4f:9a:
3c:a8:8a:00:37:2a:0b:b1:16:2e:87:5f:f4:e5:2a:af:b0:ee:
d3:fa:c7:c6:db:3d:88:7e:34:d0:26:78:24:ec:bd:37:b3:4d:
ae:dd:32:c0:4f:ff:8f:0b:fb:6a:87:3f:43:b3:66:dd:7c:45:
60:b7:b0:82:d8:f4:bb:87:3e:47:34:3d:3f:93:e9:34:f6:28:
a8:77:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org