Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/G5tzCdx_FpiZOzwOy-2l8ui-3VI.roa
File: G5tzCdx_FpiZOzwOy-2l8ui-3VI.roa (raw, json)
Hash identifier: JzRNMI9nejdcprCNNn5GczCin4qmKstEhL/3yDswj1g=
Subject key identifier: 1B:9B:73:09:DC:7F:16:98:99:3B:3C:0E:CB:ED:A5:F2:E8:BE:DD:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5506
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G5tzCdx_FpiZOzwOy-2l8ui-3VI.roa
Signing time: Sat 11 May 2024 22:54:24 +0000
ROA not before: Sat 11 May 2024 22:54:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21766 (0x5506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 22:54:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1B9B7309DC7F1698993B3C0ECBEDA5F2E8BEDD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:dc:07:18:01:4f:b8:85:6d:9d:45:c8:34:
52:19:0f:74:d5:03:7e:f5:41:4e:05:25:5a:77:33:
53:f2:bf:49:1d:ca:74:f9:cf:45:e4:8d:55:c9:8e:
d9:7a:22:fd:e8:b9:22:e8:3b:f8:5d:8f:90:9d:f2:
22:0f:c4:68:43:df:87:bb:b6:b0:03:61:93:b7:8e:
3f:59:61:c1:db:49:67:27:0a:c3:c2:8a:c6:6f:18:
57:da:fe:f1:78:dc:d4:9f:e6:d5:f8:05:ba:e8:a7:
ab:ff:11:76:45:06:66:ca:63:85:46:27:34:75:d9:
f1:69:4b:12:4f:33:ef:22:54:eb:3b:01:8d:bc:a4:
71:65:45:d8:7b:bb:a9:cb:01:93:b1:50:0c:66:64:
55:f3:2c:b1:6d:22:36:4b:40:b1:18:c9:0f:7c:7e:
41:23:e3:f1:75:3b:90:d4:80:4c:d3:40:c6:eb:11:
e6:2b:79:99:9d:14:ee:44:3f:d8:99:55:06:fa:0a:
48:cf:91:15:10:fe:00:ad:d1:f9:31:52:ab:2b:9a:
dc:72:64:16:d6:2c:61:4b:0a:c3:a5:a3:ce:64:b7:
31:aa:fd:e4:cd:fe:ff:1c:16:f7:d7:f6:46:eb:8e:
6b:1d:48:6f:27:f4:cb:aa:44:3c:17:d6:0a:34:db:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:73:09:DC:7F:16:98:99:3B:3C:0E:CB:ED:A5:F2:E8:BE:DD:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G5tzCdx_FpiZOzwOy-2l8ui-3VI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:aa:75:c7:d6:d2:2d:49:4c:c4:28:14:3a:5f:45:dd:87:27:
b9:1a:c3:c7:07:c9:b4:ed:75:e2:0c:e4:48:10:73:3b:1d:a2:
ef:53:3e:b5:0b:9e:c7:3f:fb:db:c0:ec:10:65:bd:1a:60:7a:
00:e9:a4:6c:a9:67:73:19:08:f0:48:35:b4:e0:56:88:ab:50:
02:ce:fe:d1:2a:ed:f3:36:3d:cb:80:a7:f4:7b:78:88:54:24:
c8:73:16:c0:73:a1:91:73:d2:a1:15:0e:ae:9d:32:c6:3c:90:
e4:4a:4f:ee:b1:e1:e0:fe:07:d9:df:6f:0e:5d:2d:e9:4b:de:
67:d0:c3:2c:99:d8:a2:ff:63:ee:96:f5:ea:53:ee:02:23:b9:
a1:3b:37:1d:d9:9e:d8:00:05:69:0b:f5:1e:77:f4:7d:74:b9:
d9:27:67:83:6a:2a:89:44:04:95:00:9c:8a:63:75:fe:99:71:
4f:f5:10:a6:70:d7:69:a5:e3:db:4a:7a:3a:53:da:45:75:2b:
5c:7b:88:24:79:8c:db:27:cb:19:7b:ab:f5:08:a0:3e:ac:11:
b1:3a:24:a6:a7:00:6d:b7:bf:ca:c0:29:72:fb:53:20:b2:b0:
76:0c:70:fc:b9:2a:b2:ad:6c:75:51:bd:23:bb:2b:f8:5c:fe:
62:91:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org