Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OO3c3Uj78zIpz8LxXiNl4LMX9NI.roa
File: OO3c3Uj78zIpz8LxXiNl4LMX9NI.roa (raw, json)
Hash identifier: YC9k29FTZMhRU+KqVdLJ02JpLu2C6VSCrg3XyOzy2cI=
Subject key identifier: 38:ED:DC:DD:48:FB:F3:32:29:CF:C2:F1:5E:23:65:E0:B3:17:F4:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 551A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OO3c3Uj78zIpz8LxXiNl4LMX9NI.roa
Signing time: Sun 12 May 2024 01:24:04 +0000
ROA not before: Sun 12 May 2024 01:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21786 (0x551a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 01:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=38EDDCDD48FBF33229CFC2F15E2365E0B317F4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:53:36:c5:da:48:a2:77:16:e5:e3:8f:c9:
49:e1:63:41:97:25:ff:15:e3:00:bf:91:72:60:6a:
8e:87:1c:c4:3e:db:d2:31:c0:ab:70:e7:b4:bb:3f:
32:1e:3f:da:b1:3a:3c:94:be:72:dc:be:64:48:43:
2d:66:c6:67:a4:d4:0e:73:29:3b:ce:5a:0b:2a:e1:
27:2f:89:be:c1:26:3b:28:47:1a:e8:24:63:5f:8c:
4b:f0:90:c7:3b:1c:18:05:87:1d:bb:2e:99:b7:9a:
31:53:06:24:11:c9:7e:d7:e9:80:de:e1:38:42:0b:
0f:0b:2b:e8:c6:de:b7:af:39:a3:01:ee:14:f9:09:
9f:a7:ed:f0:32:c5:e4:ba:95:1e:34:29:5d:a1:47:
86:88:3d:14:e3:c8:dc:9c:9a:f3:49:02:bf:ea:b9:
2b:83:85:d5:b3:f6:b3:b2:5f:6f:d1:d3:41:f6:7f:
45:16:ca:1a:07:44:cd:46:2f:4d:d2:f7:f1:fe:04:
94:c5:da:f1:f6:b0:74:47:4e:d1:a7:04:20:79:60:
c6:6c:19:50:18:fa:f0:74:d4:ca:e5:a8:59:9f:8e:
9e:c1:fe:6e:20:40:b9:d3:54:cc:5d:b1:6f:32:df:
2e:79:c5:bb:1c:31:4c:67:e0:c6:59:a1:49:39:4e:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:DC:DD:48:FB:F3:32:29:CF:C2:F1:5E:23:65:E0:B3:17:F4:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OO3c3Uj78zIpz8LxXiNl4LMX9NI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:35:51:b1:de:f5:94:cc:bd:c2:88:46:8a:75:b2:5b:e1:1c:
f9:f7:d4:1e:7c:3f:38:4f:02:85:35:45:1a:3f:c1:57:9c:74:
0b:54:76:8b:c8:70:41:ea:88:19:67:d7:06:e8:e3:d0:9b:da:
45:c8:6e:db:6f:20:66:57:f1:ce:93:99:1c:b0:66:93:2e:ca:
a6:13:f6:7f:52:40:63:b5:45:f7:22:0e:96:f2:2d:9f:f7:10:
0a:c8:2c:0f:0d:fb:b9:55:f5:7f:fb:71:f7:5f:87:4c:2a:8d:
eb:10:dd:86:d0:62:e1:e1:e2:4b:7c:0f:ff:56:ef:4a:0b:9e:
c9:f5:82:a3:f3:88:f8:97:41:31:1e:dc:1f:bc:c6:55:83:ad:
46:62:ca:db:ec:5e:53:d3:26:37:ae:9a:e4:fa:cd:67:d3:03:
67:0e:4c:25:e0:11:c1:d9:81:e8:a6:87:43:40:12:67:9b:5b:
5e:35:34:c4:7f:ee:06:54:20:e6:5d:48:a6:5a:85:36:f2:eb:
e0:63:db:5f:3a:4d:31:75:86:cc:ae:b8:e1:7a:73:22:2a:b8:
dc:b7:d0:99:b3:66:bc:46:3a:6c:7e:5d:aa:c0:13:8c:54:07:
dc:41:ab:b3:1a:15:60:2c:35:6f:8c:9a:8f:d1:57:f1:e6:96:
7c:5e:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org