Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TzDUKluW91suGuVGD6Uj9UJ3RPI.roa
File: TzDUKluW91suGuVGD6Uj9UJ3RPI.roa (raw, json)
Hash identifier: 8RHvyk91bjjxID692TAr//jMfC5LLOBW+MFsoDT4JO0=
Subject key identifier: 4F:30:D4:2A:5B:96:F7:5B:2E:1A:E5:46:0F:A5:23:F5:42:77:44:F2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 555E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TzDUKluW91suGuVGD6Uj9UJ3RPI.roa
Signing time: Sun 12 May 2024 09:54:11 +0000
ROA not before: Sun 12 May 2024 09:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21854 (0x555e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 09:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F30D42A5B96F75B2E1AE5460FA523F5427744F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:9f:c2:8f:f4:a9:81:00:ba:95:a5:94:21:
25:66:01:b8:ad:61:cc:c0:63:50:00:60:ff:f1:77:
73:25:54:37:41:3c:4a:7b:84:2c:0b:da:a5:cb:6c:
9f:89:72:12:6d:0e:41:75:0d:31:19:3a:ae:09:88:
ad:a6:74:3d:f4:b3:11:33:d4:05:2e:86:e5:ee:fe:
27:27:bd:4b:95:e5:99:4a:ee:ae:49:e6:94:60:ac:
41:43:be:28:e7:41:22:60:6b:01:17:b3:79:d1:e3:
a9:3e:80:32:72:64:0d:b1:fc:81:a2:e3:47:17:a2:
10:2a:82:f6:52:05:10:d3:c5:54:a5:32:27:b1:b1:
cd:f9:c0:04:77:b5:c1:0a:d7:f2:de:b4:77:c0:12:
b2:96:f7:67:e2:2d:63:49:f5:39:ec:83:ec:ff:a9:
68:33:e9:12:64:4a:46:13:25:11:1a:8e:37:7f:87:
a0:78:a9:48:99:80:05:c4:a2:19:71:6d:af:67:24:
33:c3:f3:80:24:ac:2d:9a:a3:51:9b:5d:39:7c:f9:
6a:27:fc:24:d2:eb:20:c1:b1:60:a9:48:e2:19:6c:
2c:b5:c1:66:79:e1:c4:a8:db:e7:49:a0:8f:c3:d4:
64:00:1c:d5:5f:dc:2e:04:56:b8:28:ec:f0:7e:9c:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:30:D4:2A:5B:96:F7:5B:2E:1A:E5:46:0F:A5:23:F5:42:77:44:F2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TzDUKluW91suGuVGD6Uj9UJ3RPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:23:46:6d:79:0d:d2:c0:19:cc:ad:75:cd:5d:51:96:80:26:
66:31:9f:53:b4:35:5b:75:ec:0b:26:2e:a0:fc:cb:64:2d:ce:
eb:27:58:87:04:e2:d2:13:de:2c:d5:74:13:a2:47:25:11:89:
a6:b5:32:2e:f3:34:3a:5d:be:0d:53:ed:d2:08:90:16:13:35:
4e:f9:bb:66:0e:59:86:f9:2c:4d:8b:98:c8:ee:d1:04:79:8f:
35:a3:23:d4:48:cd:12:f7:98:0b:9d:17:2d:26:78:71:61:b9:
20:b8:f0:ab:80:23:c2:49:37:89:f1:58:3e:99:d4:e8:21:32:
09:48:b4:b7:3e:c8:af:e8:46:77:fc:bc:bd:53:a2:ab:1a:72:
9a:c5:e8:68:57:ef:38:37:68:33:08:90:a2:00:b7:48:75:8c:
d6:48:ec:0b:23:86:37:0c:79:5b:da:8b:56:5c:3b:12:3e:55:
c6:47:85:61:e8:b9:73:b0:73:c6:4e:03:de:91:3a:5b:a7:53:
5f:c8:25:4d:a3:8e:4d:5b:0b:16:f9:80:48:b5:05:08:55:06:
c3:0b:2b:f4:ae:18:77:89:1e:92:28:8d:c9:2c:89:aa:dd:cf:
79:30:6a:91:42:b5:a3:89:32:b4:2e:76:be:35:fd:35:34:24:
06:28:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:44 2024 by rpki-client on console-ams.rpki-client.org