Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MIcMfYBZ-XyDUA16_XD6xRGzMBA.roa
File: MIcMfYBZ-XyDUA16_XD6xRGzMBA.roa (raw, json)
Hash identifier: p8Ee/aFt1oz9z8XaJga+0vG9J2FrpvSnzJBoiSjwlk8=
Subject key identifier: 30:87:0C:7D:80:59:F9:7C:83:50:0D:7A:FD:70:FA:C5:11:B3:30:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C1A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MIcMfYBZ-XyDUA16_XD6xRGzMBA.roa
Signing time: Tue 30 Apr 2024 01:23:32 +0000
ROA not before: Tue 30 Apr 2024 01:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19482 (0x4c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 01:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=30870C7D8059F97C83500D7AFD70FAC511B33010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:98:91:2b:fc:c0:c3:e1:51:2a:9f:1b:17:
0a:71:19:f5:65:68:a4:63:b9:39:19:2d:d9:d3:96:
d2:7a:fa:f8:8a:11:4f:24:aa:e4:ac:21:b5:fc:ea:
9c:1c:04:f3:ea:98:95:79:fd:6c:ad:64:8d:47:99:
55:81:e6:14:d5:f6:29:c8:97:35:2b:31:04:a0:a8:
df:42:b1:c9:62:c7:9f:c2:b7:98:dc:d6:c5:cd:f8:
c5:e5:4c:87:ab:83:d7:7f:30:3f:23:18:70:db:20:
dd:dc:89:86:e1:9c:b6:b9:8d:d1:a0:11:bb:64:78:
c9:ff:8b:d6:b3:ce:a0:55:f2:cb:b7:65:59:ca:ad:
18:78:b2:37:d6:a8:e7:43:bb:a1:df:03:83:49:3d:
b0:06:4a:04:c3:4c:d9:f6:73:af:ee:6b:aa:24:65:
55:88:d3:b3:47:1b:e1:8a:ce:0b:e1:51:b7:00:2a:
9f:be:5f:7a:69:26:d2:72:6f:1e:48:12:31:85:c1:
5b:3d:7d:c2:9c:9d:68:97:a4:5d:5c:c1:03:7a:15:
71:16:cb:7b:bb:7b:46:ae:a6:9b:60:bf:04:d0:25:
f9:48:b9:be:ec:a3:71:16:3b:b2:00:89:d1:23:ad:
63:8c:1e:45:6a:97:43:c1:e5:ff:4e:92:f1:d2:62:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:0C:7D:80:59:F9:7C:83:50:0D:7A:FD:70:FA:C5:11:B3:30:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MIcMfYBZ-XyDUA16_XD6xRGzMBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:6f:94:cf:b8:78:d2:97:85:18:55:43:f1:ff:54:09:b2:1b:
2c:e4:3a:77:27:ec:dd:fd:49:a1:7b:97:e1:30:64:77:8d:2f:
88:4c:31:44:bd:b0:b4:7a:9f:5c:c4:36:ad:0f:13:03:c0:f0:
66:9e:c8:ff:39:7e:56:d8:75:be:00:45:58:3c:1e:86:cd:ae:
3f:29:39:b8:e8:c2:48:98:a9:2f:62:7c:b9:d8:96:b6:10:fb:
7d:e1:fe:e6:df:47:a6:f1:93:00:d6:e6:94:10:1a:f2:9c:f9:
8f:eb:d9:fb:24:86:2f:01:dc:36:be:ea:7e:81:a1:6c:c2:94:
4e:ca:6e:b4:e5:7d:d5:81:e3:b8:2c:52:2b:93:e5:5a:9e:ee:
53:9f:c0:cb:1a:28:e4:14:f8:90:84:32:ad:99:03:84:90:15:
06:d2:6d:0b:2f:9c:59:ea:31:07:0d:d2:ca:cb:41:e6:bd:97:
39:8e:3b:40:f8:26:09:c3:f6:4b:d1:3a:1b:8f:e4:99:a1:76:
93:1c:fc:04:0c:55:69:8d:30:1a:25:9d:29:50:af:38:43:06:
7f:06:db:ce:c9:bd:53:6f:a0:81:0e:95:4d:72:ad:ef:06:11:
cd:95:9f:87:ab:c0:66:1c:6b:c8:7a:9f:4d:b1:71:d1:9e:42:
ea:43:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:21 2024 by rpki-client on console-fra.rpki-client.org