Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GA8Z6C7OBYExMrtgXoiBphoqUqU.roa
File: GA8Z6C7OBYExMrtgXoiBphoqUqU.roa (raw, json)
Hash identifier: OIK0XvXeNJJxmW4iFSLttJ2VRaCMBD0EYshdlz7aUcs=
Subject key identifier: 18:0F:19:E8:2E:CE:05:81:31:32:BB:60:5E:88:81:A6:1A:2A:52:A5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 430E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GA8Z6C7OBYExMrtgXoiBphoqUqU.roa
Signing time: Wed 17 Apr 2024 23:52:58 +0000
ROA not before: Wed 17 Apr 2024 23:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17166 (0x430e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 23:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=180F19E82ECE05813132BB605E8881A61A2A52A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:3b:0b:ec:29:68:81:6a:bf:e7:11:6f:df:
7e:5b:d9:98:43:29:76:89:29:78:99:fa:7e:fa:3a:
56:7f:c1:22:76:26:0c:dd:7e:66:e4:65:5e:e9:4e:
e3:82:62:f5:b6:eb:df:69:30:69:9e:28:4e:96:a3:
3a:c9:bc:c6:4f:c6:d0:a3:c0:b7:9f:2d:d7:8b:d0:
7f:6c:a3:d5:cb:af:4c:a1:51:0d:90:6c:0a:2d:e3:
3f:86:c0:29:8b:d5:16:ce:50:2e:dd:6e:0d:b5:4a:
62:2d:70:7c:18:e1:b8:a5:10:f4:d5:88:e6:4e:7c:
74:4c:81:09:c0:94:c1:be:08:38:97:e7:c8:5f:9b:
f9:8a:fb:8a:5c:1b:95:fc:74:56:0f:6d:1c:3d:f7:
5b:d0:79:3a:dc:d6:5e:cc:36:16:90:b5:b8:d9:4f:
be:8a:39:77:d7:e5:e3:55:fb:a7:9e:a0:9c:34:29:
18:5a:f6:ba:16:92:4a:32:d4:c3:52:ae:09:ba:a7:
37:8a:5b:e4:b2:a9:86:46:0e:e1:36:a5:a0:e2:23:
20:ed:a1:bb:82:c4:19:ab:af:c9:82:75:4b:d2:dd:
0e:2f:40:58:7b:f4:13:9f:6e:05:06:b2:14:23:10:
76:f4:00:c8:56:89:ca:d1:5a:aa:ab:de:4f:02:a0:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:19:E8:2E:CE:05:81:31:32:BB:60:5E:88:81:A6:1A:2A:52:A5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GA8Z6C7OBYExMrtgXoiBphoqUqU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:2c:a8:d2:3f:6c:60:47:70:12:1c:57:ef:44:00:db:56:7a:
27:07:53:ea:f4:f1:96:44:86:07:93:74:2a:09:1f:0d:0d:af:
77:36:b9:e3:17:8b:ed:41:f9:f1:94:dd:66:b9:38:95:53:70:
1d:67:1b:67:30:0c:8d:46:6b:5b:76:1e:67:47:be:57:23:0d:
b9:f7:70:28:a1:bb:34:0d:57:f6:8d:c9:e1:39:5b:45:b5:28:
24:0e:c7:4a:4f:93:a2:72:76:fa:82:cf:a2:2e:5c:02:23:d8:
69:f4:8f:8e:e3:8c:29:6d:98:28:66:c3:25:89:e4:99:16:fc:
31:d9:4c:49:10:f6:f9:6f:c9:a8:85:91:21:06:92:e9:61:34:
b7:ab:90:d8:ac:b4:bd:b1:51:2c:08:7d:25:02:69:a8:26:67:
16:08:94:d8:21:36:f6:d3:af:4f:a2:d7:fa:31:7e:ea:07:ac:
58:4f:94:f6:c1:b2:33:79:1f:90:3c:75:28:35:ff:b9:57:63:
ee:0e:56:26:55:5b:41:03:63:fc:69:29:bc:bc:d6:aa:3a:62:
7b:b2:15:cc:5d:9e:ab:b1:1e:8e:7a:31:81:22:da:ab:cb:64:
eb:da:d8:61:e1:11:2e:fe:ff:e4:33:cf:e2:d8:13:dd:31:b3:
b1:07:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org