Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O_b9Npg-Eey5ib1OSMqZV0kQGAY.roa
File: O_b9Npg-Eey5ib1OSMqZV0kQGAY.roa (raw, json)
Hash identifier: YE8wza+XoFss6iaXfot9vlnk1fg+SUwi8L4G/cwFWiQ=
Subject key identifier: 3B:F6:FD:36:98:3E:11:EC:B9:89:BD:4E:48:CA:99:57:49:10:18:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44D2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O_b9Npg-Eey5ib1OSMqZV0kQGAY.roa
Signing time: Sat 20 Apr 2024 08:23:04 +0000
ROA not before: Sat 20 Apr 2024 08:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17618 (0x44d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 08:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3BF6FD36983E11ECB989BD4E48CA995749101806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:36:25:24:97:e3:b9:55:c5:eb:6d:3f:d5:
7d:73:cd:e3:59:a6:60:1a:9c:71:8b:ce:ec:a5:6b:
0d:59:70:64:7a:d3:ac:cf:31:de:82:20:15:7b:12:
58:12:e0:5c:00:00:dc:a0:81:0c:d9:9d:c9:ff:75:
2b:69:84:f2:59:75:60:ca:e5:f2:d1:8e:01:94:55:
e1:27:fe:46:b9:46:54:76:f0:a7:32:91:a7:43:f9:
f3:1e:64:4c:30:15:f3:2b:96:b8:35:8e:53:08:86:
2f:df:d5:f7:ad:41:99:6c:0b:b8:67:43:c1:12:29:
53:c5:8f:6c:d6:b1:e3:7e:42:0b:a1:97:5d:13:ee:
9a:21:39:c7:d7:3f:12:57:e7:df:9c:c7:35:06:f0:
86:7c:8c:5c:b0:72:d7:04:e3:57:61:bb:4c:41:5b:
46:18:72:23:70:6d:9b:95:56:55:4e:0b:41:8b:31:
4d:74:a3:99:94:4d:96:25:22:d5:5b:bc:41:cc:51:
d7:1b:8e:9c:e7:77:47:5e:d2:c7:09:cf:aa:61:4f:
b9:b2:64:4a:66:c1:19:70:a4:1c:a5:ac:91:70:a0:
d2:4f:5b:fe:bf:75:7a:ed:30:35:42:9d:1b:4c:0a:
7f:1d:60:30:31:4c:4a:e6:70:56:a7:e1:f7:16:0c:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:FD:36:98:3E:11:EC:B9:89:BD:4E:48:CA:99:57:49:10:18:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O_b9Npg-Eey5ib1OSMqZV0kQGAY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:90:9c:e3:43:26:09:51:24:40:3f:ba:18:e9:fd:86:df:89:
dd:de:4b:2c:8b:6d:cd:88:71:a8:61:34:d0:bd:91:27:05:a4:
41:78:cb:e9:1f:ad:6b:dd:20:e5:62:6c:a4:dc:aa:24:87:2f:
fe:62:99:93:d7:23:ea:a9:a7:71:2e:fe:ee:48:a2:94:2c:c0:
b1:4b:ef:9b:f9:5a:c2:bf:4f:0f:41:dd:47:49:6c:7d:9e:38:
46:33:c3:9d:9c:8d:cb:0d:57:c0:7e:74:de:e3:69:63:11:cc:
2e:80:53:f3:31:f7:92:9e:5b:60:b9:ae:0f:35:40:76:32:29:
fd:c5:bb:6e:98:43:af:06:4a:45:c1:05:be:5e:58:97:b4:97:
54:28:a7:d3:8e:5a:1f:24:0c:ee:b0:0e:b8:2f:45:40:1d:63:
c1:3f:94:26:73:d6:0b:8b:56:07:02:fc:dc:db:41:d4:9c:9c:
95:13:92:95:98:8d:8f:9c:cd:f4:cc:9b:57:d8:e2:fc:da:04:
f8:05:7e:c9:ec:c0:65:38:21:e6:23:ee:b1:cc:40:66:63:b0:
02:f9:d4:ee:2a:bc:a9:d1:30:82:5b:5b:8d:fe:15:ca:63:24:
c0:04:81:d5:8e:33:2c:81:99:7f:81:20:bc:e5:11:61:70:60:
cf:b4:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org