Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Nxa5M5cMlv2gTPKRkrx-MSmJ-sI.roa
File: Nxa5M5cMlv2gTPKRkrx-MSmJ-sI.roa (raw, json)
Hash identifier: CacCV7hE7IUI4zmXyPDGdz6Qda8oSTgnCBJ6XDYpmQE=
Subject key identifier: 37:16:B9:33:97:0C:96:FD:A0:4C:F2:91:92:BC:7E:31:29:89:FA:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3846
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nxa5M5cMlv2gTPKRkrx-MSmJ-sI.roa
Signing time: Wed 03 Apr 2024 14:52:19 +0000
ROA not before: Wed 03 Apr 2024 14:52:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14406 (0x3846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 14:52:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3716B933970C96FDA04CF29192BC7E312989FAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:3c:dd:2b:32:7a:3b:dc:5b:a7:65:34:e7:
b0:22:47:91:b6:07:ca:92:62:e4:bc:04:17:0e:b4:
ab:72:80:46:3c:84:1e:13:6d:0d:ab:b0:a1:d3:3e:
49:21:24:17:85:43:ab:52:75:b5:65:c7:06:aa:89:
00:26:fd:1a:f1:d3:12:c8:c6:f8:62:92:5c:45:d0:
f5:47:e9:0f:b7:2a:f4:04:bc:6c:55:7f:0d:4d:20:
a0:52:8d:4c:56:5f:50:c7:cc:c7:0c:de:47:a5:1e:
fa:87:e1:bf:16:1e:64:52:88:c7:40:4e:ce:36:e9:
3f:c7:58:d1:d6:a6:a8:f1:1d:a1:2d:6d:ff:1d:01:
f1:0c:68:ec:ed:f2:e7:72:c1:f2:bc:7d:5f:32:7a:
e5:fb:fe:17:3a:15:7e:b9:c7:42:f6:07:2b:ba:f1:
92:c7:68:69:56:cc:e8:05:5d:02:14:6e:46:be:64:
25:a4:2f:61:b1:08:ed:ef:9f:bb:0c:74:bf:0c:29:
c7:ba:af:99:09:a3:54:53:d2:db:3b:a2:74:86:92:
58:df:53:6c:78:dc:09:c3:10:0f:1b:0e:1e:f9:10:
7e:ad:1e:c1:c9:c4:d1:d3:36:7d:f9:e4:d6:d0:9d:
18:59:b1:fd:a0:45:3e:f8:ae:5c:05:d2:ef:b8:86:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:B9:33:97:0C:96:FD:A0:4C:F2:91:92:BC:7E:31:29:89:FA:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nxa5M5cMlv2gTPKRkrx-MSmJ-sI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:23:3c:2e:01:68:69:d6:60:d5:96:10:92:06:cb:02:9a:d4:
10:24:64:60:ba:02:98:63:24:ac:59:45:63:7d:aa:e7:c4:75:
4b:52:be:6a:23:af:e5:d4:2a:c8:0b:6b:ab:71:6e:94:08:9c:
7c:8e:15:22:5b:f3:25:34:5d:2a:ae:a9:1f:54:6f:1e:f1:e3:
e6:48:d0:10:be:28:64:bc:52:66:d9:a3:9b:87:41:69:d3:7a:
0b:05:52:4b:08:1c:4a:41:69:83:21:07:ac:ff:35:07:66:c1:
38:44:a2:b9:d7:17:84:a6:e2:42:aa:6b:66:6e:ad:16:92:6e:
9b:95:95:3e:95:b9:f9:cb:41:3c:d0:b9:f0:2c:27:7a:f5:1b:
ac:4c:65:1f:b8:27:16:97:6a:1d:93:e3:15:44:46:7b:d5:c9:
92:cc:6a:01:6a:1d:9d:26:44:37:b6:6e:f7:39:d9:ef:ae:82:
e2:f0:cb:0b:9b:15:0d:d7:cc:66:a4:59:92:e4:27:c9:36:ca:
c3:34:34:70:79:0b:f6:e4:19:c7:5d:b0:f3:7a:11:a6:82:23:
ba:ae:0d:c7:f0:6f:03:34:55:32:76:99:ac:b6:93:8d:6b:d0:
09:e4:64:83:1b:09:5e:55:5b:b3:e5:e7:fd:22:d6:f2:0c:25:
bb:11:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org