Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ndgx_uuGbakJeGwkweGI6gDTwG8.roa
File: Ndgx_uuGbakJeGwkweGI6gDTwG8.roa (raw, json)
Hash identifier: ThSKHtLCm4qhMYc4rU2wWyrKba7ndPD2log0eKw0Flc=
Subject key identifier: 35:D8:31:FE:EB:86:6D:A9:09:78:6C:24:C1:E1:88:EA:00:D3:C0:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ndgx_uuGbakJeGwkweGI6gDTwG8.roa
Signing time: Tue 09 Apr 2024 03:52:40 +0000
ROA not before: Tue 09 Apr 2024 03:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15470 (0x3c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 03:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=35D831FEEB866DA909786C24C1E188EA00D3C06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:20:3b:8e:ca:93:e8:45:31:58:4b:d2:c2:
85:e7:4f:00:93:39:cb:4a:5c:87:2c:64:11:25:8b:
40:b7:6d:26:21:0a:b4:9f:2d:33:07:15:36:71:db:
56:2a:91:d7:90:67:a9:17:09:f4:84:ed:18:c3:d9:
3a:17:ad:fc:0d:19:e9:e4:a5:7c:34:d6:50:9b:32:
0e:9c:57:90:40:23:75:a5:22:6b:52:4d:54:3a:34:
2e:fe:fe:c2:2e:ac:b5:39:e3:7d:74:5f:4b:26:ca:
d8:26:bc:60:b0:ed:58:6d:d1:a5:a4:8a:a7:af:aa:
a5:0a:45:13:6b:6b:08:4d:d7:56:48:07:ca:4b:ea:
3b:f4:27:f1:46:e9:4d:43:6c:31:4b:86:73:df:ad:
26:39:42:70:12:b9:e5:09:63:85:4c:9e:59:6f:1c:
98:1d:95:5f:42:d6:72:7d:4f:c1:c5:ed:0b:6f:56:
e4:f9:43:40:01:a4:36:4f:09:f9:6c:9c:e0:f4:56:
8b:00:19:5a:4a:ce:0f:16:84:5e:75:fd:a0:b8:c3:
2f:ae:bd:45:b8:f7:bf:fa:48:02:03:96:b8:91:ab:
09:62:9e:ce:ef:b6:87:37:33:36:ea:a7:16:d6:ea:
bc:d3:f9:56:ac:6b:ef:d3:1d:ad:72:6e:66:5d:1c:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:31:FE:EB:86:6D:A9:09:78:6C:24:C1:E1:88:EA:00:D3:C0:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ndgx_uuGbakJeGwkweGI6gDTwG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:08:8e:8f:7b:3b:d6:01:eb:6d:b8:be:17:9f:7b:35:17:19:
7b:d3:a0:50:10:80:a8:35:b9:0b:c0:1c:16:e5:75:b2:bd:e7:
be:cf:97:b4:e1:f6:78:02:35:29:46:47:63:3e:73:c5:0c:26:
f1:bd:d9:ad:1e:26:32:b1:1e:ef:6d:c5:0a:95:65:d3:e0:1a:
38:c6:93:84:79:78:31:d9:b0:99:02:75:5c:d0:61:e6:db:9e:
ae:c9:5f:0b:05:bd:95:b6:0b:fb:58:70:9b:1d:46:c6:2c:5e:
56:23:f3:de:c9:07:41:b0:7d:65:ef:b7:8a:b8:4f:89:e6:37:
77:de:2b:35:1d:4b:41:25:c4:b8:ff:e2:c4:86:89:72:22:c4:
74:18:e4:e4:58:ad:25:0e:2e:4b:43:d7:76:83:24:dc:57:bc:
7e:24:31:25:a0:25:5d:84:15:59:7f:8f:f4:cb:03:66:92:14:
03:ed:70:54:fd:7e:54:dc:0d:af:f6:99:20:bc:2b:1a:fc:ce:
f7:4e:02:28:2e:85:9c:cf:5a:0d:f4:cf:ed:4a:8d:80:a1:cd:
69:6e:58:7f:f2:ee:4c:3d:13:2c:59:bc:40:4f:ca:8d:0f:84:
17:2a:db:ad:4b:fb:79:50:81:5d:cb:d9:d2:4c:ec:d6:93:5e:
76:1a:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:35 2024 by rpki-client on console-ams.rpki-client.org