Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S8mJxcSeMwc8z7kJzMt0BCBnQzU.roa
File: S8mJxcSeMwc8z7kJzMt0BCBnQzU.roa (raw, json)
Hash identifier: EugTDLqjcyNDvVvVwa1rJ2KGg/VofOCuD/H0rm3YI6k=
Subject key identifier: 4B:C9:89:C5:C4:9E:33:07:3C:CF:B9:09:CC:CB:74:04:20:67:43:35
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F62
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8mJxcSeMwc8z7kJzMt0BCBnQzU.roa
Signing time: Sat 13 Apr 2024 02:22:49 +0000
ROA not before: Sat 13 Apr 2024 02:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16226 (0x3f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 02:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4BC989C5C49E33073CCFB909CCCB740420674335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:9d:a2:b9:78:59:78:a1:47:43:66:68:61:
b1:33:6f:44:64:8f:87:ae:8f:d7:bf:0c:d7:d6:ab:
54:f8:91:18:0a:88:3c:fe:bf:68:63:7d:2b:a3:bf:
84:a0:d7:0e:c2:3a:22:5f:60:11:27:51:25:7c:5f:
b9:f1:73:e7:7c:d4:1a:ec:2c:66:bf:ff:63:fb:c6:
d9:e3:b8:c7:b3:8f:ad:2c:4c:c7:be:a4:89:07:88:
d9:6f:2a:ee:07:78:76:ba:e3:7f:52:23:05:94:06:
a6:6d:9a:89:e5:6e:04:1c:b5:8d:67:ac:ea:72:9d:
41:2e:f5:cf:32:a1:a0:88:7f:3d:ae:90:c3:1c:90:
be:82:97:15:d3:41:a9:14:8d:3a:aa:74:20:16:f7:
a4:bb:42:c8:5a:72:4d:4a:dc:8d:b0:9f:5c:b1:60:
ce:2c:d0:91:ed:79:6e:56:e2:31:70:f7:72:18:65:
47:dc:75:ca:23:3c:1f:9f:50:c1:c8:fd:9e:93:60:
a4:d1:1f:90:8b:7f:0e:85:55:3e:ab:43:34:0a:15:
fd:33:7e:e7:01:5b:05:fd:ce:f0:4e:8a:fb:35:b8:
53:82:53:59:92:43:e6:5e:ef:1c:76:f3:a1:4f:be:
30:6e:bc:33:82:79:fb:2b:0a:5f:35:21:8d:49:32:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:89:C5:C4:9E:33:07:3C:CF:B9:09:CC:CB:74:04:20:67:43:35
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S8mJxcSeMwc8z7kJzMt0BCBnQzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:d8:7f:23:95:d5:fa:4f:8e:94:67:2a:06:19:fe:8c:f7:fd:
d2:a9:1b:60:79:2a:c2:53:10:7e:28:09:74:50:1c:4e:1f:32:
49:41:9e:2b:c4:8f:e2:60:34:4f:3f:d5:ff:46:6c:6f:d1:94:
44:59:5b:da:e5:da:8a:91:9b:cf:12:39:55:f5:22:c1:70:11:
d9:25:5b:22:4a:fa:62:cb:17:8a:92:05:da:03:0d:f0:1a:fb:
50:75:eb:25:40:42:f2:8c:2b:bd:3d:e9:27:a9:6f:f2:fb:16:
4e:ff:f9:b3:44:da:48:17:47:cb:8d:02:4a:10:71:97:80:46:
4c:ef:56:24:0d:38:a3:39:3e:4b:75:98:de:7c:b9:b4:f7:56:
c4:19:3a:c0:14:34:83:7b:fe:5a:4a:c1:94:b3:93:0f:fc:c8:
c3:0b:1a:2f:f2:fd:39:eb:9c:92:38:45:37:b9:9f:54:5e:85:
43:ac:fc:7a:34:13:a8:2d:08:8d:34:cd:cf:23:db:f8:61:27:
97:4c:cb:2d:28:6c:5d:cc:9a:b8:86:55:68:b3:5a:b1:2f:d0:
00:23:bb:66:71:0a:1d:fd:be:d7:bb:e7:d3:7c:a1:9a:0c:16:
bc:ff:ef:b6:a7:1b:66:6d:6a:b1:69:5e:ac:99:30:06:38:81:
02:14:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org