Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ST9MF7qyGSBg8zT02agIxTwASWI.roa
File: ST9MF7qyGSBg8zT02agIxTwASWI.roa (raw, json)
Hash identifier: Nu5xlsV+PQSrzzpyd7e58NbH4Q9u4xewsxETlM64lws=
Subject key identifier: 49:3F:4C:17:BA:B2:19:20:60:F3:34:F4:D9:A8:08:C5:3C:00:49:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ST9MF7qyGSBg8zT02agIxTwASWI.roa
Signing time: Fri 10 May 2024 03:54:00 +0000
ROA not before: Fri 10 May 2024 03:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21422 (0x53ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 03:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=493F4C17BAB2192060F334F4D9A808C53C004962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:15:a5:78:cd:bc:be:88:26:37:ae:95:1c:
66:6d:5e:39:40:ff:bf:0a:f5:94:05:60:38:f2:18:
49:0d:15:43:85:f6:d0:2d:dc:2a:82:2c:a7:2a:90:
39:3d:39:5c:eb:42:1f:2c:5b:df:00:8b:70:e3:de:
8d:0f:9c:be:71:99:48:58:f3:76:d7:73:3b:b5:67:
e6:a9:cd:ce:3b:53:d1:6a:2f:ae:d2:0d:ab:f3:36:
f3:5c:3f:6f:fd:ca:a5:7b:89:94:54:ed:42:0b:50:
77:bd:45:ac:03:65:20:db:6f:12:6a:26:fe:17:24:
bd:cd:a4:d7:96:5b:8f:e8:47:e1:42:53:99:a3:89:
47:1f:ae:23:b1:21:c0:6d:69:79:fa:f9:91:e5:4c:
97:f7:e7:5d:94:d7:64:db:de:fd:c0:b7:d6:d7:dc:
ac:0e:c0:21:9c:87:0b:a2:8a:a3:94:d1:91:0c:34:
bd:d2:75:73:69:14:14:8a:d6:a9:64:b2:f5:63:1a:
10:e4:67:a7:a3:2c:46:46:8c:8b:3d:c9:be:0b:47:
9d:20:d8:cf:70:c9:7e:f2:e1:a9:e7:c8:75:d0:43:
d0:f7:15:cc:7a:0b:8b:5d:e6:78:fb:21:6c:b1:bc:
c8:6a:2c:05:b9:4c:0f:e2:f1:89:a9:31:71:5a:84:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:4C:17:BA:B2:19:20:60:F3:34:F4:D9:A8:08:C5:3C:00:49:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ST9MF7qyGSBg8zT02agIxTwASWI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:96:90:f7:3a:84:73:50:a7:b6:8a:8e:25:5a:db:3f:79:27:
f4:71:01:6a:3e:e8:73:a8:fd:9c:e8:e9:4c:59:7b:d8:63:e9:
8d:ad:ab:8b:74:3a:f4:4b:a4:00:fc:78:53:b2:08:2f:c4:15:
4a:eb:6c:b4:d1:aa:17:34:f7:89:df:75:98:69:eb:0c:2c:c1:
09:e5:22:f1:a6:1c:5d:13:17:f2:5a:36:17:68:b5:03:94:eb:
4a:68:10:8e:13:a5:1c:ac:a8:16:43:52:39:c4:d5:d7:03:d5:
a3:8c:6c:20:d0:6b:9b:18:c8:53:f5:e6:63:62:98:44:db:5c:
33:51:93:43:4d:90:6b:22:23:f8:ae:ee:14:a3:87:ac:54:15:
74:40:b2:7e:cf:bb:a4:8c:21:c4:15:80:f7:a5:af:9c:3d:b0:
23:29:de:df:3b:18:63:7c:88:69:a6:3b:2d:56:8c:25:73:d8:
5e:c3:0f:a6:2a:fe:11:b3:6d:bc:57:88:7a:ee:75:19:ee:99:
7b:88:fd:f5:fe:40:83:e5:e2:cc:ba:18:a5:64:8f:e0:c7:03:
51:c2:3c:c1:b4:58:bc:d8:60:86:92:58:f0:95:f6:44:2f:a4:
65:11:31:17:44:bc:f1:12:68:ea:9d:df:e2:ee:65:48:da:df:
af:5a:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org