Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LLzPF4ihhZBlv9CPHuC89Slsv74.roa
File: LLzPF4ihhZBlv9CPHuC89Slsv74.roa (raw, json)
Hash identifier: 1aMkrEqo9b+DEectTXC+wSb7aYqUhQoCKWkKpxLTFBU=
Subject key identifier: 2C:BC:CF:17:88:A1:85:90:65:BF:D0:8F:1E:E0:BC:F5:29:6C:BF:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 500E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LLzPF4ihhZBlv9CPHuC89Slsv74.roa
Signing time: Sun 05 May 2024 07:53:54 +0000
ROA not before: Sun 05 May 2024 07:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20494 (0x500e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 07:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CBCCF1788A1859065BFD08F1EE0BCF5296CBFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:8e:9e:65:aa:bd:6e:b9:bb:1a:10:ee:c9:
54:5c:8b:8d:f9:cf:85:c6:c6:de:3f:60:48:89:dd:
90:cf:fc:51:38:10:71:c8:24:07:d8:fc:da:50:3d:
ff:2d:34:69:e5:d4:ff:7b:8e:e3:72:9a:c9:cd:2a:
00:c1:d6:ca:e3:23:cf:d0:f8:0b:3d:23:f7:48:4f:
15:a5:08:50:02:aa:e3:aa:d8:5e:1c:62:7f:8f:4b:
d8:43:6d:1a:66:b3:7b:20:e5:01:28:26:ca:75:42:
4d:65:02:56:68:7d:48:0f:94:fb:0d:19:5f:cc:a4:
af:63:c1:2c:52:1c:a7:47:c3:cd:35:81:8b:9f:f4:
7b:7b:ad:d5:e8:98:87:1d:4a:2b:43:c6:0d:d2:77:
26:cb:9d:75:65:0a:1d:cb:83:68:0e:35:fb:f2:12:
84:c1:64:56:b0:fc:e3:0c:fc:3d:a6:7f:38:13:73:
37:60:80:cc:e5:c3:07:07:da:3e:5c:21:2e:dc:80:
5d:76:0f:10:6d:53:2e:6a:57:dc:ce:3b:14:73:9e:
7c:d8:7b:fb:44:fc:5f:5c:09:4c:86:42:0b:36:1d:
71:e8:66:0d:12:8a:54:e2:ae:bc:a9:22:4d:69:a5:
39:fb:55:a3:46:d2:ba:22:8f:72:23:ba:90:88:ea:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:CF:17:88:A1:85:90:65:BF:D0:8F:1E:E0:BC:F5:29:6C:BF:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LLzPF4ihhZBlv9CPHuC89Slsv74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:30:8d:38:25:3d:1e:35:92:fc:92:c9:32:51:3c:cc:a0:d7:
98:15:2b:1b:f0:e8:83:18:4a:08:28:75:ba:6f:8c:24:6c:f2:
26:cc:ca:7c:e1:fb:2f:df:c0:bc:55:d6:a3:33:81:e3:54:63:
a7:a1:31:75:16:15:4f:e9:b1:08:00:0e:a0:79:6f:52:1a:fb:
5e:a8:04:de:8b:68:0a:65:be:61:10:6a:d9:13:57:26:89:a9:
67:49:fd:fc:39:fc:33:63:51:63:8e:46:22:c3:87:ed:df:26:
7a:65:d7:31:ea:46:36:6e:3e:70:a4:f6:cb:06:4c:a8:5f:74:
4f:bf:c7:e2:9c:ee:0d:4e:97:d3:0c:25:66:c4:24:cd:4d:66:
17:26:0f:06:de:04:1a:5d:1e:40:c3:b1:b1:0e:2e:85:55:51:
8a:9a:dc:05:58:30:bb:db:06:a7:28:89:0a:89:ba:b2:cd:83:
8a:bd:96:66:06:1f:fb:af:19:6e:0a:ae:f9:d0:f7:2a:89:0f:
0f:0c:1d:a5:9c:c9:cf:99:1f:e0:86:bd:a4:c5:6e:99:d5:dd:
fd:11:72:da:e1:06:5f:8c:79:83:9e:1f:7f:77:6c:c7:93:33:
28:eb:4d:0b:dd:32:d9:d3:59:f9:32:73:a6:5f:6b:64:31:e8:
45:82:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org