Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IwJXAGGakpkoRARoBW_YqluuNAU.roa
File: IwJXAGGakpkoRARoBW_YqluuNAU.roa (raw, json)
Hash identifier: +uWMuPWjdrV5qnhO4CSCnCWrwJ8DMJeZ7y8JADM9ltw=
Subject key identifier: 23:02:57:00:61:9A:92:99:28:44:04:68:05:6F:D8:AA:5B:AE:34:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 525A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IwJXAGGakpkoRARoBW_YqluuNAU.roa
Signing time: Wed 08 May 2024 09:23:56 +0000
ROA not before: Wed 08 May 2024 09:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21082 (0x525a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 09:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=23025700619A929928440468056FD8AA5BAE3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:06:15:6d:ec:27:55:ee:69:06:92:61:c5:
4d:94:ca:b3:1d:29:28:5c:a8:53:82:c8:71:a3:e1:
cd:c4:7b:45:fd:59:cb:11:f3:f9:3c:71:b4:68:ba:
6d:48:2a:ef:cf:24:eb:49:9c:5d:9b:4f:f6:d6:45:
1b:ba:da:55:d2:c7:5d:89:ae:9b:f6:c7:80:f9:3d:
35:cc:9d:e9:26:94:ea:9a:a9:6d:77:2c:4c:13:31:
5d:d9:4b:67:c4:c2:ca:f7:50:3e:6b:df:b6:d8:24:
d4:49:b8:ea:dc:6c:e3:27:23:92:3a:90:a1:23:61:
57:89:75:2f:66:9b:44:b6:b8:4f:fc:c1:95:4b:cb:
31:40:ee:7b:b2:a7:ad:ac:60:fd:6e:af:b0:bd:32:
ad:9f:6d:da:fd:43:ca:75:8c:16:25:a7:bb:cb:23:
fc:0f:61:ab:6f:ae:4d:72:fd:ca:ae:39:29:1b:25:
d2:e1:81:e1:25:96:58:37:78:45:8f:16:32:ab:55:
a8:01:0e:fd:c9:06:c1:8d:a8:c7:c2:b2:07:ba:24:
eb:fd:27:77:bd:c1:f3:4a:ab:25:af:f6:13:2f:56:
cb:d4:23:3a:de:1b:51:c8:ab:7a:c5:5a:25:7c:c4:
13:cf:30:aa:b7:48:d0:13:2d:0b:8a:99:41:ee:54:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:57:00:61:9A:92:99:28:44:04:68:05:6F:D8:AA:5B:AE:34:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IwJXAGGakpkoRARoBW_YqluuNAU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:ad:b6:0c:3d:e8:f7:f4:eb:2f:70:96:b1:5e:d9:04:46:9e:
75:f6:1b:f9:e1:45:38:29:45:01:9f:13:73:91:62:f4:bd:39:
98:5d:b9:be:15:93:26:da:8d:9c:03:fb:e7:d7:be:f1:9f:eb:
41:a8:55:07:9b:7e:ee:85:80:a5:37:c8:40:24:6e:d5:b2:81:
8f:ef:eb:24:f1:d8:5b:96:20:7a:2f:73:69:40:b2:35:29:e4:
9f:ea:9d:d3:f7:01:07:46:a6:bc:1f:75:75:ef:99:10:cb:0b:
cc:ae:8b:73:23:87:05:4c:55:93:e9:52:97:e7:68:2f:b3:5b:
5d:2f:24:2a:4c:8c:a3:c2:81:fd:f7:29:89:86:a1:00:4b:46:
4a:41:70:13:84:ef:be:a3:e7:99:b1:c2:c0:69:2c:2e:3d:4f:
d8:c8:87:1f:7c:e1:fc:73:bd:e4:03:78:91:84:b4:97:96:5f:
53:a5:16:5b:e8:df:06:da:3c:b9:76:a7:13:be:b1:1c:4e:b0:
03:ab:f5:40:14:24:d1:40:53:87:03:cb:77:5c:13:a3:b5:5e:
8f:df:b7:30:9a:1f:18:de:06:50:23:26:85:a0:61:a5:42:c1:
69:63:b6:cf:58:30:29:f8:c6:3c:9d:5c:77:e1:e1:2e:43:8b:
c5:c8:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org