Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/In_FaNHfpeBukqYUbGKHCPA6t54.roa
File: In_FaNHfpeBukqYUbGKHCPA6t54.roa (raw, json)
Hash identifier: SB0wCrMXdWtsek7detKH/cGw9BsUG+rljxcnEckYzO0=
Subject key identifier: 22:7F:C5:68:D1:DF:A5:E0:6E:92:A6:14:6C:62:87:08:F0:3A:B7:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F86
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/In_FaNHfpeBukqYUbGKHCPA6t54.roa
Signing time: Sat 13 Apr 2024 06:52:49 +0000
ROA not before: Sat 13 Apr 2024 06:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16262 (0x3f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 06:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=227FC568D1DFA5E06E92A6146C628708F03AB79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:98:f7:b7:f2:bd:03:52:1b:e0:f3:a6:a7:
cd:25:23:52:97:7d:20:91:89:d0:97:84:3c:74:40:
66:90:c9:53:e3:57:bd:4a:14:57:29:a5:14:fe:37:
fc:1c:3c:42:2f:d1:19:f2:4d:d6:95:50:9e:db:32:
da:86:01:54:47:aa:3b:ab:68:28:94:a0:0e:54:6c:
f5:ce:0c:c8:23:57:31:e6:a2:03:0c:59:8b:44:9e:
43:55:92:81:1b:51:ec:d5:81:b1:c0:4a:a0:44:9f:
27:88:d2:7a:4e:9c:a4:54:58:31:b4:b8:fd:b5:f8:
91:4a:1b:c5:97:78:8d:9f:4c:15:34:97:41:b4:92:
dd:9c:fd:5a:d0:7d:9a:ea:cb:ac:49:fb:e4:d9:be:
b8:38:40:db:dc:48:ae:95:0a:5e:ae:38:76:b6:50:
33:db:b8:67:1e:88:28:9f:03:5e:04:8e:28:63:28:
a1:a3:3e:f0:1e:01:93:8d:1c:cb:c3:3d:d2:5c:66:
47:05:5a:77:7c:15:d6:94:33:58:77:d3:37:60:0f:
f3:92:03:26:b1:10:89:07:31:b7:8a:ef:52:f1:04:
4b:b1:89:54:98:61:7b:5a:74:04:31:88:84:34:ba:
0e:ba:a4:06:b7:7d:a9:c3:3b:2a:4d:4e:fe:d4:14:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:C5:68:D1:DF:A5:E0:6E:92:A6:14:6C:62:87:08:F0:3A:B7:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/In_FaNHfpeBukqYUbGKHCPA6t54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:0b:fe:a0:04:f2:d8:36:fb:86:e0:a8:04:b9:26:7c:d2:ac:
8f:e5:76:33:9b:43:8b:7b:fd:c2:02:48:10:90:71:a8:06:af:
26:9d:ce:9d:9c:a2:c0:e3:4b:43:0b:32:dc:2d:9c:60:0c:57:
43:9b:53:75:9d:3f:56:4a:f4:49:41:77:a7:4a:60:48:06:42:
48:49:99:9e:b1:cd:6e:41:a3:39:49:35:f3:bb:ab:0d:8a:2e:
ec:96:b6:fe:9c:82:59:32:4e:d6:65:da:7f:56:32:69:5f:af:
cc:b8:9b:53:59:49:89:59:1b:5c:3f:16:e0:0b:90:e5:e0:0d:
7c:ba:44:63:a6:c8:7e:ff:a6:e8:c5:3e:0e:d1:28:6e:c6:df:
5f:03:82:75:29:22:bb:dc:a2:f1:e5:7c:34:dc:d2:4d:f6:e7:
e2:2a:31:df:5c:6b:be:96:70:ed:a3:40:68:5e:93:9e:63:12:
38:10:64:81:e1:d4:55:23:1a:03:a0:9e:53:a2:b0:85:33:c1:
c4:ec:ba:60:90:97:e0:65:cf:0b:4c:f0:74:84:b1:04:16:6a:
b5:86:b9:bd:92:0f:af:33:fb:ff:20:33:1e:37:49:88:ab:15:
00:bc:68:ce:fb:a2:35:4f:24:51:5d:58:11:28:a8:bc:a9:2d:
77:b0:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org