Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PqQ-YOMXNHSQzl6TVHwqDBWED3A.roa
File: PqQ-YOMXNHSQzl6TVHwqDBWED3A.roa (raw, json)
Hash identifier: M1cIjkWOvGWtRNDNeVEMWikIq25eIKYaoXpcfMnS9pg=
Subject key identifier: 3E:A4:3E:60:E3:17:34:74:90:CE:5E:93:54:7C:2A:0C:15:84:0F:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D1E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PqQ-YOMXNHSQzl6TVHwqDBWED3A.roa
Signing time: Wed 01 May 2024 09:53:34 +0000
ROA not before: Wed 01 May 2024 09:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19742 (0x4d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 09:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3EA43E60E317347490CE5E93547C2A0C15840F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:93:66:f6:cf:2a:89:3b:99:a8:51:5d:43:
a4:60:32:8a:a0:52:08:a8:4d:5e:60:31:88:ad:3a:
15:5d:88:a4:ea:7c:41:40:72:f3:4d:58:17:36:0f:
17:22:e3:03:1c:17:50:6b:9f:05:7d:18:21:60:70:
0b:08:e4:c0:04:3d:97:b6:f6:93:dd:3e:af:c4:fe:
43:aa:ab:bc:5c:e3:f4:bd:fe:4c:1e:c6:98:c9:41:
f2:a0:c1:66:ab:cc:c2:0d:1b:d5:49:9e:68:7b:d4:
a4:7d:2b:7d:a9:2b:58:8f:02:ac:2b:c4:b5:56:6c:
59:d5:66:0c:99:3c:c1:83:3e:c2:19:40:b8:4e:8e:
23:af:e1:d2:f6:01:85:70:d2:28:81:f1:43:cf:88:
f7:d9:ff:08:1a:01:93:40:44:e5:e5:27:df:ec:15:
d8:2a:45:78:ff:0b:02:ac:5b:cd:41:36:21:a2:1b:
6a:fb:a3:cb:35:e3:ba:e8:16:26:a3:a4:01:13:aa:
1a:cf:8d:53:03:bf:04:54:96:b6:e6:ff:66:e6:c1:
4d:a0:a4:e4:9a:e0:c6:08:46:0d:e8:95:89:01:55:
39:80:09:29:b7:1e:d5:33:8a:db:af:5e:a4:3a:82:
5f:92:ca:1c:e4:3a:07:f1:24:b1:16:18:ee:df:35:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:3E:60:E3:17:34:74:90:CE:5E:93:54:7C:2A:0C:15:84:0F:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PqQ-YOMXNHSQzl6TVHwqDBWED3A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:a4:4e:08:71:40:c3:01:15:23:19:0f:39:a8:89:b3:1b:61:
09:c7:9b:f1:d2:86:9c:78:f2:a0:e3:17:a9:56:4b:77:c4:40:
20:da:a9:45:54:bb:90:b6:46:7a:c3:2f:cf:ae:87:3f:12:66:
ac:17:3f:51:7b:23:e9:22:67:bf:1f:51:ee:0e:14:69:d8:e8:
48:c6:b9:02:1f:de:29:67:ab:22:87:c4:24:d0:a3:2f:4e:12:
89:e9:4c:ad:1f:c6:d8:e0:ad:8d:57:c1:da:4e:60:ea:18:45:
37:a6:56:9b:a1:28:60:6d:59:6d:9a:ff:71:e1:87:ff:01:e5:
49:8a:4f:57:f2:a6:e5:69:02:db:59:13:5d:8e:4c:52:60:12:
06:4c:bb:3e:da:af:91:ab:3c:76:03:25:b2:59:35:a6:bb:d4:
a9:24:bc:67:f6:20:f6:53:5e:47:e3:d7:e6:03:95:5e:9d:13:
a7:20:79:34:85:57:a5:b6:51:9b:a7:5e:fb:8a:20:01:69:d9:
45:c4:08:5d:25:48:87:c9:b9:cf:2c:83:fd:88:ac:5c:6c:74:
e2:c6:b9:95:e7:f0:75:a0:d6:e4:e9:19:1f:49:00:b1:8b:64:
7b:81:b4:5b:f9:78:9c:e2:4d:1c:3d:38:df:f2:ad:c7:05:1b:
f5:20:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org