Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JOAsvrhuVeNwjpkM5BZ24T318Wg.roa
File: JOAsvrhuVeNwjpkM5BZ24T318Wg.roa (raw, json)
Hash identifier: NZbFjlzVG6q0SymjkQysjX+KyQCVXUemAqlYab/nWAo=
Subject key identifier: 24:E0:2C:BE:B8:6E:55:E3:70:8E:99:0C:E4:16:76:E1:3D:F5:F1:68
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JOAsvrhuVeNwjpkM5BZ24T318Wg.roa
Signing time: Thu 25 Apr 2024 17:53:19 +0000
ROA not before: Thu 25 Apr 2024 17:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18654 (0x48de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 17:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24E02CBEB86E55E3708E990CE41676E13DF5F168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:45:a1:af:49:aa:16:fa:7d:02:af:28:28:
b6:96:b9:09:a7:8d:2d:aa:7f:cd:1c:19:65:7b:ec:
ed:b1:07:7d:3b:5b:ed:7f:f7:88:67:9c:f4:c8:af:
11:9d:01:a2:33:ed:82:d1:1b:52:05:c1:68:9b:85:
ca:c4:92:88:3b:14:7f:78:83:e3:06:54:de:d1:e9:
15:8b:31:1f:bf:7b:00:9b:1f:28:4b:3c:35:5d:af:
83:40:fa:e6:2f:bc:a9:ec:83:f0:6f:db:40:ad:f2:
ec:e4:c4:7f:eb:73:69:48:f7:7b:78:28:08:95:fc:
a4:46:dc:32:23:4b:b5:54:9b:f8:7a:c5:f3:c1:cf:
d5:8a:fe:81:a7:65:9b:68:7a:d2:46:27:9a:a2:28:
7b:16:63:d3:20:14:2b:5c:44:1d:94:82:9d:1b:3c:
f5:bd:9e:41:39:84:b3:bc:a1:2c:10:f6:4d:48:2e:
5c:b3:b1:31:89:51:25:c0:88:39:cc:e3:d2:9b:e8:
1e:ab:c1:ef:be:a7:fb:f5:2a:18:59:e3:05:f8:fd:
f2:91:38:cd:dc:7e:84:82:7f:01:84:b2:7a:93:97:
56:f2:38:fc:9e:80:02:f4:31:8b:af:bb:98:f8:bd:
5a:5d:7a:1d:d3:15:46:33:f2:d0:89:74:bc:b0:21:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:2C:BE:B8:6E:55:E3:70:8E:99:0C:E4:16:76:E1:3D:F5:F1:68
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JOAsvrhuVeNwjpkM5BZ24T318Wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:f7:17:a4:63:96:f7:b0:d4:a5:e6:8e:b5:15:bd:df:20:a1:
dc:61:c5:ba:8f:06:fa:04:91:6c:6f:8c:63:a5:aa:1c:86:d2:
a9:a7:8b:8e:e7:28:01:1c:7a:45:8d:a0:56:99:5b:d8:16:0c:
11:bd:cd:c1:61:82:82:ad:a2:c5:f1:43:f1:8a:a6:e8:f7:cb:
95:8d:ad:b4:f8:7a:db:d1:e6:b0:8b:da:f8:30:03:07:d2:02:
d9:73:ff:ad:b7:0f:19:8f:fd:ec:67:3b:46:d3:14:f6:34:01:
a6:68:99:05:27:77:56:4f:fa:ed:5b:fb:9f:34:aa:88:de:2c:
a9:1b:bb:83:1f:11:7c:63:ad:7e:f6:af:1b:bb:2b:69:0f:60:
b1:42:86:f6:26:64:d3:4e:35:d4:db:1d:f9:3d:71:7d:b3:60:
a1:5b:78:de:8d:b6:a3:93:b4:d0:1c:17:80:c2:78:45:99:80:
67:d7:ff:f2:99:85:ec:20:2b:84:b0:87:9a:3b:ec:9b:5c:14:
60:32:b1:31:de:ed:d2:fb:e9:a1:ab:06:9c:6a:d4:a4:b7:de:
ee:53:27:5a:4a:20:5d:55:37:bf:ab:cb:87:97:57:7f:b3:1b:
99:0f:34:9f:9f:93:1c:79:1c:a2:be:82:eb:76:c3:69:b6:31:
52:fe:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org