Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Q4zW_8bIASGwIII32Phv5DYAYZ8.roa
File: Q4zW_8bIASGwIII32Phv5DYAYZ8.roa (raw, json)
Hash identifier: GbKAvIddq1kC97Xs0MKMWtLjHSlmJHtm9wvJF1XYRhU=
Subject key identifier: 43:8C:D6:FF:C6:C8:01:21:B0:20:82:37:D8:F8:6F:E4:36:00:61:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q4zW_8bIASGwIII32Phv5DYAYZ8.roa
Signing time: Tue 14 May 2024 03:24:28 +0000
ROA not before: Tue 14 May 2024 03:24:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22186 (0x56aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 03:24:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=438CD6FFC6C80121B0208237D8F86FE43600619F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:ab:32:ce:1f:c6:92:b7:a7:aa:12:fc:36:
e4:ac:ac:75:e9:02:97:ee:02:bc:05:fb:95:6c:22:
d2:dd:e3:51:9d:94:61:e9:3e:ee:5f:87:1c:a1:19:
fe:0c:35:76:79:9d:8b:ce:61:76:dc:a6:48:49:ea:
01:3e:d1:16:5c:bf:80:b3:30:2a:5d:cf:1f:b9:ea:
dc:86:81:17:6e:31:bb:c3:86:65:5f:ab:88:2d:b4:
ab:e7:42:df:78:42:03:11:8a:6a:96:78:b2:37:8d:
2f:b1:5e:be:25:8e:b2:c5:1c:97:e1:5b:15:ba:6d:
4f:6f:8c:f6:0c:2c:1f:f2:3c:85:63:9d:0d:1d:d6:
8f:91:e1:9e:eb:ff:45:22:83:15:2c:8e:91:41:88:
38:56:d5:a9:52:b0:bd:e1:b2:78:ff:29:56:cb:e5:
06:7b:2e:18:36:c4:94:15:37:d7:98:30:04:a4:a9:
0e:54:64:86:e5:08:38:e8:67:b0:98:6e:19:a6:18:
7a:84:3a:ce:6d:d8:3c:73:9d:56:99:fa:39:a5:18:
ed:fa:5c:eb:66:65:72:40:92:18:d7:77:b3:8f:f5:
99:45:cc:d3:26:77:90:bb:2a:18:4e:cc:80:ab:4f:
ca:73:6f:49:66:6e:96:2d:03:9e:5d:7e:be:66:3a:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:D6:FF:C6:C8:01:21:B0:20:82:37:D8:F8:6F:E4:36:00:61:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q4zW_8bIASGwIII32Phv5DYAYZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:ea:89:04:3d:ef:d7:48:0a:7a:64:70:f8:75:2a:c9:cb:69:
f4:7c:dc:65:df:61:53:06:d9:7d:de:15:a5:cb:3b:8b:c4:83:
12:89:a8:24:ce:e1:bb:73:c0:63:7d:93:7c:56:fa:b0:3d:a9:
d9:e9:f7:da:61:36:93:4e:00:89:fc:50:25:95:b1:13:14:f9:
36:a5:4e:a6:8b:09:78:e2:bd:f0:ab:05:27:7f:51:db:6a:77:
3a:5e:10:de:d1:b7:a1:a3:20:45:a4:6f:84:b9:26:28:d9:14:
67:d0:25:25:de:15:7d:d1:7e:55:79:ae:f8:a0:fa:df:64:fb:
86:4b:59:b3:7a:a0:1c:3d:5a:d0:a6:cf:97:54:96:8c:a5:43:
5d:60:28:6e:54:be:87:cc:7e:01:8f:a5:8c:f9:4b:de:78:bb:
b3:d6:e6:29:69:c5:d8:06:bd:74:42:a0:28:61:ff:6c:af:8b:
46:35:fe:bb:28:a8:eb:20:67:be:71:b1:76:26:f4:c2:52:8b:
63:12:1a:a3:8f:84:a0:90:75:4d:0a:79:9c:db:b1:40:c9:81:
8e:4d:03:0a:6e:25:64:67:c5:37:17:1d:bb:a5:7d:bf:88:2f:
b0:25:ad:a7:63:98:e1:1a:bf:36:f2:87:92:9a:1a:e5:1e:a0:
1f:1e:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org