Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T3cfSnvyG3ppXr_OZVpG59WEsjM.roa
File: T3cfSnvyG3ppXr_OZVpG59WEsjM.roa (raw, json)
Hash identifier: phsL7WT3yZQYziF2sCkxAi0cNKcdj/jR+ZuX9BDX7P8=
Subject key identifier: 4F:77:1F:4A:7B:F2:1B:7A:69:5E:BF:CE:65:5A:46:E7:D5:84:B2:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3686
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T3cfSnvyG3ppXr_OZVpG59WEsjM.roa
Signing time: Mon 01 Apr 2024 06:52:12 +0000
ROA not before: Mon 01 Apr 2024 06:52:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13958 (0x3686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 06:52:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F771F4A7BF21B7A695EBFCE655A46E7D584B233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:61:26:fe:f4:10:01:a1:ab:6c:ba:37:b9:
97:22:0b:3b:1e:77:3a:fb:19:d3:57:5a:d9:b7:10:
cf:21:e4:55:28:1f:07:2b:46:54:ed:07:ec:41:5c:
03:91:b5:e5:a2:f3:ec:a6:ba:2e:83:d2:f3:64:d5:
82:3c:f7:73:9c:be:40:10:a7:5c:fb:29:a7:60:98:
00:ae:a0:92:aa:62:44:2d:50:c9:c6:fe:66:53:8b:
c2:f9:51:51:94:e0:a0:f5:71:63:2d:1f:b4:74:b6:
d8:4d:8b:f0:4a:15:7a:bb:05:51:ac:81:ed:84:df:
fd:26:79:be:27:dc:d4:0c:47:50:50:65:9f:f6:35:
63:16:cb:45:09:8b:b2:c2:dc:e2:45:e9:02:e0:61:
70:5f:35:bc:bf:fe:97:fd:4b:6e:3b:69:b8:3d:87:
49:c7:95:bc:b5:05:4b:d1:43:50:15:9a:09:91:51:
10:03:6c:b9:80:af:52:a2:c9:f9:a6:fe:67:e0:29:
cc:97:ac:2e:df:a6:57:5f:4e:74:e5:32:b4:e7:2e:
94:e0:4a:e1:36:bc:de:e0:05:25:c4:91:ae:ba:b5:
b5:0d:32:ce:46:ef:21:75:5a:2d:bd:ca:e3:65:0a:
32:e2:e6:d7:9d:dc:be:5f:d9:4a:8b:a3:06:4c:98:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:1F:4A:7B:F2:1B:7A:69:5E:BF:CE:65:5A:46:E7:D5:84:B2:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T3cfSnvyG3ppXr_OZVpG59WEsjM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:fc:f5:df:9d:b2:96:62:ef:18:8b:1b:65:d8:41:09:10:5a:
b9:82:9a:4d:3d:6c:eb:54:8e:17:82:af:cd:12:67:d3:27:e9:
a5:82:7b:09:ac:d8:df:76:0a:c7:7f:d8:0f:d8:c3:12:f3:e3:
ac:a0:f0:cb:8a:26:6a:67:76:a6:66:c5:3f:51:51:b6:7f:82:
91:f2:ac:4c:16:73:23:c4:22:bd:98:59:2b:da:5e:f4:96:a2:
5a:b5:4f:6c:74:01:84:e4:90:18:26:2b:77:2e:dc:c8:5a:7e:
5e:2a:b2:fd:61:b6:f4:53:0e:d0:d7:70:bc:13:b0:31:f4:19:
4b:41:2c:a9:47:92:04:6a:9b:4d:43:60:31:a0:fb:b4:9a:41:
2d:90:50:19:fe:de:63:2b:dc:48:e8:45:0c:b0:cf:62:7c:28:
f6:33:6f:b6:b8:ee:bb:8a:f2:ce:c8:9d:02:cf:1a:1f:44:d2:
dd:61:a1:5f:2a:fb:eb:65:fc:a0:72:57:d1:b2:0e:79:5d:fc:
89:57:cf:bb:5f:9e:3f:9d:9a:97:d7:87:7d:23:e7:ae:34:66:
cb:d5:b2:00:af:23:1e:05:e9:27:2a:ff:a3:92:af:24:64:97:
55:db:aa:10:27:ae:31:b8:2a:5d:04:ae:50:da:1f:42:d2:61:
b2:ed:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:43 2024 by rpki-client on console-ams.rpki-client.org