Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KGAsgXWtcX6SGEM2Lmwwf9aazxU.roa
File: KGAsgXWtcX6SGEM2Lmwwf9aazxU.roa (raw, json)
Hash identifier: Uk/gZx/Wc/a+Wi3NIGraB04b3WLegBBHmCLw9sI9l/A=
Subject key identifier: 28:60:2C:81:75:AD:71:7E:92:18:43:36:2E:6C:30:7F:D6:9A:CF:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5802
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KGAsgXWtcX6SGEM2Lmwwf9aazxU.roa
Signing time: Wed 15 May 2024 22:24:14 +0000
ROA not before: Wed 15 May 2024 22:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22530 (0x5802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 22:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=28602C8175AD717E921843362E6C307FD69ACF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:49:f5:c8:c4:b9:bb:de:40:db:70:9e:da:
83:37:a3:02:75:3f:c5:8b:13:0a:9f:37:69:6f:2f:
10:a4:1e:d5:6d:dc:d9:20:15:f0:fc:73:e7:40:9c:
8c:97:7d:63:80:64:80:a3:ae:84:59:31:40:a6:f4:
19:7c:fd:2f:f5:49:f6:6e:07:f7:08:47:1a:08:38:
72:e1:32:57:a4:9b:9a:86:8f:4e:49:db:bb:62:a2:
dd:98:db:db:df:d0:bc:5d:7c:39:a1:c4:bb:4a:10:
7f:8f:fc:c7:87:c4:f4:a7:b8:a4:d9:5a:fc:c7:bf:
ca:6a:62:eb:48:be:c1:cf:e4:d0:31:6e:6a:70:f2:
e7:c1:71:7f:8b:41:02:90:c7:e8:7d:29:e6:d9:be:
f7:e6:62:8b:17:c2:8e:6a:fd:8c:45:f2:45:31:de:
2f:f9:d0:d6:6f:18:aa:8e:04:ab:70:33:47:8a:e1:
43:c8:f3:a9:d6:60:9c:30:70:0d:e1:ae:09:48:bc:
4f:25:9a:42:52:14:1f:d9:f9:65:80:45:67:d0:05:
29:9e:93:19:de:02:7e:84:db:02:af:cf:a8:4e:f6:
ef:40:3c:ab:04:c3:3e:c6:7a:ee:86:9f:0c:a6:0e:
3d:2c:6c:d8:29:5a:80:9d:49:cd:50:a4:05:17:1a:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:60:2C:81:75:AD:71:7E:92:18:43:36:2E:6C:30:7F:D6:9A:CF:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KGAsgXWtcX6SGEM2Lmwwf9aazxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:42:01:83:51:52:13:be:39:b6:f1:3d:08:49:6b:92:b5:15:
4e:2e:f3:d3:51:dc:97:08:fc:c7:e6:0d:0f:f6:d8:be:87:28:
f3:c3:57:ee:c8:99:2d:bd:3c:6e:19:4e:47:d0:0f:b1:9a:eb:
69:be:f2:a8:9e:7c:ab:7a:08:ac:84:ef:d3:0b:df:e3:5a:c4:
c4:ab:e0:30:52:23:0f:3a:b9:41:d5:6a:84:25:c9:ea:5a:aa:
90:0e:58:92:4d:a2:2b:c5:08:5c:3a:ee:d0:1a:fc:6a:dd:7d:
67:a4:87:3c:ee:1a:b2:46:3a:62:e9:54:3c:d8:94:a7:73:7a:
8b:6e:fd:0f:25:8a:9c:b9:db:ed:51:88:e5:e9:16:15:e8:b9:
4b:fe:4a:3c:10:16:7e:f3:d8:02:e4:2a:a0:e9:36:1b:03:f6:
c0:b4:a1:57:43:07:a9:6c:a7:4a:b2:f7:c2:e9:37:8f:ea:8e:
a7:d2:dc:63:d2:34:52:8d:73:1f:20:0f:da:49:da:6c:01:0f:
fa:88:99:63:a8:64:3e:a1:8f:af:73:1c:94:a1:79:0a:6b:c5:
9d:68:89:03:a5:10:15:7f:81:5f:d9:7c:e5:4f:43:ed:6f:e2:
28:2a:33:12:4d:25:14:fb:18:9d:2a:68:73:67:b6:78:85:7a:
98:bf:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org