Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PJBh_uBz7XG72EsbPAj4MVz-yEE.roa
File: PJBh_uBz7XG72EsbPAj4MVz-yEE.roa (raw, json)
Hash identifier: aHYJh5l/6cuxG0PvU+qNYk9ICqtiv2HyTwntNlR5VmA=
Subject key identifier: 3C:90:61:FE:E0:73:ED:71:BB:D8:4B:1B:3C:08:F8:31:5C:FE:C8:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 515A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PJBh_uBz7XG72EsbPAj4MVz-yEE.roa
Signing time: Tue 07 May 2024 01:24:09 +0000
ROA not before: Tue 07 May 2024 01:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20826 (0x515a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 01:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3C9061FEE073ED71BBD84B1B3C08F8315CFEC841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:d0:5d:87:9a:24:b2:3e:7b:de:ee:55:86:
34:f9:9c:a5:8b:1d:6d:35:44:1d:75:50:0c:4f:9e:
79:60:45:73:61:a7:0f:fc:d6:19:17:45:ca:b1:ae:
73:28:24:f5:79:03:df:83:04:70:72:c4:d7:69:88:
e9:4a:a4:bb:8f:5a:ca:ed:a7:1f:6c:64:f9:65:10:
85:c7:64:c6:b3:fa:8c:c1:3c:61:a9:21:55:4b:d8:
06:9c:87:b7:9f:02:df:09:bb:24:23:8e:ed:20:5f:
a6:0b:23:8b:35:8b:d6:76:b6:70:f0:a6:55:10:e5:
9b:10:a7:60:7a:8a:07:25:4b:22:2d:ff:db:00:b1:
d2:f0:67:17:5c:b8:0d:74:aa:50:8c:4e:80:88:5f:
34:79:2a:7d:41:d3:6f:93:28:f4:92:6f:6f:bf:48:
c7:7a:15:b5:39:38:99:2f:d4:f4:cc:ee:16:b5:12:
a6:4e:27:3b:f4:9a:69:9a:0d:5e:f0:4d:95:0d:a1:
f5:95:8a:fd:8e:bb:5d:a6:3f:31:14:32:e6:f7:ee:
84:a3:fc:9b:2d:7f:87:b6:d0:96:2f:9b:8e:b2:5f:
6d:93:26:b6:2e:7b:de:bd:6e:6c:0e:d3:ef:7c:dc:
93:41:21:fb:e3:e3:c9:a9:4e:0d:1d:61:3d:ff:4a:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:61:FE:E0:73:ED:71:BB:D8:4B:1B:3C:08:F8:31:5C:FE:C8:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PJBh_uBz7XG72EsbPAj4MVz-yEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:fa:09:db:89:ad:19:7b:54:47:82:b0:6d:67:24:cd:13:5a:
61:17:cf:96:e9:fc:c1:70:60:76:3c:34:9b:66:7c:34:23:35:
af:fb:1c:48:4c:fb:cf:ef:30:26:a7:16:9c:4f:d6:af:4b:7e:
38:52:93:10:f6:84:d2:eb:b2:37:28:77:8b:cd:c9:08:0a:d0:
92:34:b7:07:89:63:6e:40:21:7c:a8:85:a2:0c:9d:b5:73:7b:
b2:8f:42:f3:66:5d:b0:1d:f5:65:7c:2f:b6:07:ba:3e:82:bb:
b0:66:a7:ca:77:2a:4f:5e:44:87:c3:19:54:47:06:ca:57:2c:
0a:68:52:2e:91:91:4a:4b:a0:a2:22:a0:9a:ae:0d:56:a3:cd:
b6:26:01:08:e9:c5:65:09:21:cb:5d:48:b9:b6:e8:d7:73:f7:
60:1f:d2:70:49:44:ca:9c:e8:26:0d:7d:14:c5:eb:50:b1:89:
53:17:5d:6a:24:4c:32:0f:3b:dd:04:cd:59:19:69:17:21:29:
22:45:ff:6d:b0:8b:93:c2:2a:77:8f:86:ae:10:63:dd:6a:29:
09:76:13:0b:e3:90:ad:bb:a1:4b:d3:43:a9:29:4b:85:b8:cd:
6b:44:84:5e:1d:3a:8c:86:fa:2a:18:f6:a4:41:74:87:c3:28:
a8:33:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org