Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Omqugl4iHIHK5RjN042BiNI5pLM.roa
File: Omqugl4iHIHK5RjN042BiNI5pLM.roa (raw, json)
Hash identifier: uPrCo2Yyt7rgk23n8zBR+ZkYh+s/Edev5eaRZjjVAVs=
Subject key identifier: 3A:6A:AE:82:5E:22:1C:81:CA:E5:18:CD:D3:8D:81:88:D2:39:A4:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 411A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Omqugl4iHIHK5RjN042BiNI5pLM.roa
Signing time: Mon 15 Apr 2024 09:22:54 +0000
ROA not before: Mon 15 Apr 2024 09:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16666 (0x411a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 09:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A6AAE825E221C81CAE518CDD38D8188D239A4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:a2:89:6d:a8:6d:91:1d:11:d7:21:f0:64:
f8:f3:1c:37:fc:77:a6:56:52:70:ab:2a:c8:f5:09:
d9:71:d2:7b:0a:c8:10:57:7c:2a:bd:c3:6c:69:09:
33:e3:63:ce:14:8c:ff:b8:e0:d0:49:67:c6:f9:ba:
e3:b0:cd:00:9f:af:1e:bd:8e:ab:84:0d:70:1b:48:
55:03:7d:7d:36:9d:a5:20:c1:42:ee:1e:f6:b0:16:
2a:c2:69:bf:63:d8:ad:b8:d9:ab:4d:04:d0:70:47:
9e:63:b1:05:c3:4a:96:11:bf:0e:90:00:fb:a0:eb:
f5:86:35:51:76:b1:25:ad:00:63:b4:a5:db:df:eb:
3a:ce:c1:06:27:ba:b9:f2:0d:a8:28:06:25:05:00:
50:cb:f2:0b:74:ef:a4:fb:1f:03:34:5c:ff:b1:30:
38:89:53:55:cb:61:e7:32:7e:aa:5a:a9:9c:b0:cd:
52:97:e2:dc:9c:5d:a4:a3:98:ff:9a:da:70:e5:1e:
f9:69:f7:cd:ec:73:e6:53:3d:02:42:2f:3a:ee:66:
8f:08:9c:2b:af:44:d8:c4:4d:16:29:d5:23:6e:d2:
4b:ab:b6:a9:93:86:41:22:21:52:49:e9:dc:db:7d:
a1:e6:66:fb:7f:40:98:1d:97:56:45:be:da:fa:68:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6A:AE:82:5E:22:1C:81:CA:E5:18:CD:D3:8D:81:88:D2:39:A4:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Omqugl4iHIHK5RjN042BiNI5pLM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:b8:85:65:64:bf:93:ac:d6:c2:a2:af:ba:ec:52:78:c6:d0:
2a:66:ac:65:b3:53:43:2d:90:e3:eb:48:17:59:27:18:6d:a4:
8e:b6:2a:2e:66:dc:fa:d6:34:46:69:df:fa:38:0a:82:6a:64:
48:14:d0:9f:92:82:e6:e7:9e:f5:3c:d4:48:87:83:01:9a:4a:
92:45:7d:b7:e8:59:45:5a:8e:94:22:d7:7d:ec:72:c7:7b:2c:
7e:f4:0f:20:7d:37:2a:4f:48:0b:7e:69:6f:10:cf:40:cf:e5:
43:8a:97:d1:dc:75:ae:e8:8a:e2:df:c8:7a:17:f9:93:be:d4:
a7:c4:47:4a:f6:08:2b:59:1d:b6:00:18:df:db:cd:7a:d4:76:
73:31:cb:6a:fa:30:99:48:f0:31:8d:f2:95:11:99:2e:5b:ad:
05:ad:dd:a0:62:f4:a4:f9:3b:4f:e9:b9:b3:4b:eb:9a:c1:d1:
52:96:eb:82:5f:61:ed:2a:d5:56:b5:c9:c5:07:63:0e:63:74:
c5:b8:af:bf:f9:17:e3:83:a2:7d:5f:5a:0c:02:b4:8b:42:c9:
e6:b9:3f:9f:a3:a6:8c:1a:b0:65:77:4a:d5:73:5e:fa:72:b0:
ca:01:e6:f2:90:c4:6b:74:73:5a:72:7e:42:39:d4:7e:cf:50:
06:ec:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org