Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MBIoD-xjpg6NR7AlCZtVTaTM3Gk.roa
File: MBIoD-xjpg6NR7AlCZtVTaTM3Gk.roa (raw, json)
Hash identifier: V+toDno42SDFGqFfE963HMaFKdIkscO9X+e7Xt733uc=
Subject key identifier: 30:12:28:0F:EC:63:A6:0E:8D:47:B0:25:09:9B:55:4D:A4:CC:DC:69
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C5A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MBIoD-xjpg6NR7AlCZtVTaTM3Gk.roa
Signing time: Tue 09 Apr 2024 01:22:35 +0000
ROA not before: Tue 09 Apr 2024 01:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15450 (0x3c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 01:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3012280FEC63A60E8D47B025099B554DA4CCDC69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:e5:44:42:f9:ee:bb:b1:a2:ac:5d:f7:12:
63:69:b8:5a:8c:8e:da:25:e7:88:12:a4:e2:06:5d:
52:e0:75:fd:13:d5:a2:e9:9d:02:e3:14:83:d4:ad:
4d:ec:b0:86:d5:86:4c:2f:9e:56:86:a2:27:62:57:
51:8b:47:e7:f3:8f:34:67:88:c5:09:f4:de:b4:1a:
a7:af:6c:02:f3:6d:19:cb:21:be:7c:40:4c:c3:82:
e8:7c:69:72:5a:ec:5a:c6:1c:84:e9:84:2f:e2:33:
3b:17:0b:87:ae:f6:7b:31:48:5a:8b:c5:4f:ca:06:
14:72:6a:2a:51:74:d5:fa:0d:6b:ba:ab:43:c9:c7:
b1:e7:ba:45:9f:f0:b7:f3:ba:76:5e:74:fc:fe:35:
b0:8d:06:6c:7c:9e:45:db:95:87:f3:b1:ff:94:94:
75:21:5b:d3:9b:d7:ea:67:8b:bb:1c:47:98:5f:cd:
c5:5b:50:00:a1:3a:25:1a:2a:7e:15:aa:eb:5e:48:
dc:b7:c4:e4:b4:a9:71:a8:bc:e5:4c:c3:fb:63:de:
e7:5d:8b:9d:4a:7a:88:62:c4:10:52:73:59:9c:7d:
65:d3:5e:de:f4:7f:36:e4:36:60:b0:41:0f:35:b2:
06:13:09:c4:62:bf:fb:93:a3:b8:5b:2c:31:04:f9:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:28:0F:EC:63:A6:0E:8D:47:B0:25:09:9B:55:4D:A4:CC:DC:69
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MBIoD-xjpg6NR7AlCZtVTaTM3Gk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:2a:60:4a:77:27:f7:f8:bd:a7:92:2a:3a:9e:8c:e5:d7:42:
b9:3d:5b:5e:c1:21:c2:af:ed:68:79:a9:11:70:98:d1:d2:89:
36:d5:66:9d:6f:03:ad:b8:76:c6:6d:5f:e8:45:1b:2c:22:54:
2a:38:ab:ee:15:f4:23:15:8d:62:a9:24:e9:5c:a8:5a:b4:6e:
5d:c2:81:8a:25:4e:ee:49:00:8d:4e:c3:d1:ec:c0:14:d9:db:
43:a9:56:ca:48:0e:f8:2d:36:8b:5c:d7:aa:ea:ce:26:71:86:
72:5c:da:1a:e4:73:3b:fa:30:97:94:9f:33:05:1a:a3:49:27:
89:2d:be:8e:18:20:d5:0e:7f:fc:7c:fd:f6:2f:3a:2e:0e:33:
56:ed:7b:9c:5d:63:a7:8a:70:ac:ab:1c:5e:b2:af:bf:4f:4c:
4e:03:86:34:a7:64:41:10:c9:f8:03:ea:8d:f1:43:7a:6d:a9:
eb:1f:9d:61:98:58:46:9b:ca:b7:9a:af:a8:c5:b4:dc:1c:9c:
06:7d:2d:76:cb:d8:16:58:2d:0c:75:fc:5a:ec:1f:a6:00:4c:
cd:38:06:ad:0a:4d:cc:e3:53:e9:42:b9:d4:78:94:d7:ef:13:
d2:9e:9f:d1:0f:d0:54:1f:3e:1b:45:58:c4:7d:b6:29:9e:98:
f0:e4:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org