Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T10jXn2Ruk5Rauv_AqM36yEAEho.roa
File: T10jXn2Ruk5Rauv_AqM36yEAEho.roa (raw, json)
Hash identifier: VCHlx7YoqqoSIbqeZPkWgm74eQBtEvwClvEh51omxWI=
Subject key identifier: 4F:5D:23:5E:7D:91:BA:4E:51:6A:EB:FF:02:A3:37:EB:21:00:12:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 516E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T10jXn2Ruk5Rauv_AqM36yEAEho.roa
Signing time: Tue 07 May 2024 03:53:52 +0000
ROA not before: Tue 07 May 2024 03:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20846 (0x516e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 03:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F5D235E7D91BA4E516AEBFF02A337EB2100121A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:45:c7:b4:e0:56:c6:83:c9:e1:ba:ae:1f:
d5:6b:57:50:7d:25:94:2f:d7:cc:74:ae:54:27:5a:
71:73:a5:ce:25:03:b6:bd:7d:de:68:5e:87:5d:99:
c9:b3:d8:e2:f3:72:94:97:02:1b:77:21:c8:71:3f:
da:fc:6b:b3:f7:a4:03:c1:dd:e9:95:01:0f:30:a2:
1f:28:40:f7:b0:0b:cd:e1:db:c8:8d:d2:bc:30:a2:
d8:ec:cd:8d:52:1e:88:43:f5:0d:ea:69:72:09:23:
db:32:d0:23:a7:2f:1d:64:2e:ef:e4:4c:cb:19:c9:
39:67:a2:55:6a:71:4e:01:ec:97:eb:42:c4:d0:a8:
51:2c:af:70:d4:9a:22:99:e9:75:15:ab:1c:a9:26:
bb:83:10:08:38:eb:1b:62:09:fc:e0:75:c1:0c:53:
91:f6:78:88:70:b1:a1:80:5e:48:6b:08:5a:0d:11:
7f:74:01:f0:e3:ba:81:34:32:73:bf:e7:f5:94:2b:
0f:52:ad:3e:e6:3e:0d:e8:cf:4f:59:cd:77:7b:96:
56:80:c3:6a:dc:e0:37:b6:83:d7:10:26:1f:a5:53:
f5:96:92:1d:3a:4f:98:47:d0:8e:25:c7:6a:4c:0b:
8f:b7:1b:bb:ce:d5:ad:af:56:8d:60:b2:94:c1:e4:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:23:5E:7D:91:BA:4E:51:6A:EB:FF:02:A3:37:EB:21:00:12:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T10jXn2Ruk5Rauv_AqM36yEAEho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:45:f4:e1:11:2f:fd:5c:26:64:95:25:12:3e:6a:53:e8:b5:
7e:54:12:50:2a:f8:71:ce:72:bb:81:d6:d1:83:08:a1:24:6e:
47:59:69:b1:cc:b2:ed:c2:84:d8:48:b9:53:4b:b5:ee:ae:7c:
1a:80:4d:a8:31:6a:9e:14:d8:7d:92:d3:96:84:03:b7:b7:ec:
55:60:78:b7:d5:dd:4a:cd:5d:65:b9:2a:cf:f1:02:c2:8f:57:
ca:57:b2:60:ae:5e:9e:86:92:a2:7e:e5:cb:f0:5f:4d:8a:3a:
00:ff:55:41:f2:ff:b8:ca:29:2a:c3:0b:30:7a:0f:a8:c4:c1:
05:2a:8a:a8:1a:1c:3b:9f:54:7d:59:69:50:51:c7:1d:b3:bf:
27:8a:ec:35:6b:cb:84:52:81:52:76:42:9e:7a:9e:43:4c:22:
38:f4:72:8f:87:7c:12:ac:ca:8c:ce:52:69:17:ab:28:51:7c:
af:63:fd:f7:24:53:61:08:90:44:f1:0e:96:d2:b0:b2:08:dd:
79:ff:e6:50:90:bc:66:f1:72:61:d1:06:f5:0d:67:2b:0d:51:
ee:de:9a:41:14:49:d1:2a:43:00:45:9d:0e:38:46:65:e6:54:
fa:2c:36:5d:87:4d:48:e8:65:6b:53:97:4c:ea:bf:60:9b:d2:
00:1b:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:43 2024 by rpki-client on console-ams.rpki-client.org