Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UrMM9Kty9Gdq64oE_l32G5vasmA.roa
File: UrMM9Kty9Gdq64oE_l32G5vasmA.roa (raw, json)
Hash identifier: hwLu9VupZUzzU94cMmO/cesX3HzNOqUz8yQIkqNfOVw=
Subject key identifier: 52:B3:0C:F4:AB:72:F4:67:6A:EB:8A:04:FE:5D:F6:1B:9B:DA:B2:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3552
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UrMM9Kty9Gdq64oE_l32G5vasmA.roa
Signing time: Sat 30 Mar 2024 16:22:26 +0000
ROA not before: Sat 30 Mar 2024 16:22:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13650 (0x3552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 16:22:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52B30CF4AB72F4676AEB8A04FE5DF61B9BDAB260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:46:ed:75:61:d8:cb:60:3b:a9:a0:72:14:
d2:80:d8:7e:9c:0e:85:e4:c5:24:e3:ec:02:4d:86:
0c:80:69:0a:b3:d7:4c:a3:3e:6f:e2:e5:e4:8e:d4:
50:42:d5:aa:d3:fb:4f:bb:3e:e6:5b:a1:64:de:ae:
f0:ad:49:01:b7:c1:8d:ec:26:d5:98:1e:71:cd:37:
11:3e:56:5e:ff:c1:f9:33:29:29:91:0f:75:f8:30:
3f:8e:df:26:5d:64:10:35:55:1e:23:1b:ca:c5:bc:
bf:f8:4e:b9:93:b4:3c:0b:f5:f8:8e:7a:75:26:ff:
95:db:2d:71:36:73:79:13:4d:c0:8b:d6:df:fc:be:
7a:27:ba:ef:84:54:42:ec:96:76:1b:c9:fa:09:53:
bc:29:43:5a:7a:92:c8:d2:2f:7f:63:64:de:75:2f:
12:ee:50:21:15:ff:a4:02:ef:54:55:25:a6:39:ef:
f3:dd:45:a7:9d:0a:3f:30:b1:ad:ee:f7:4d:eb:f2:
9d:85:1a:08:3a:a7:5d:35:9c:81:28:83:15:25:92:
c4:d7:d5:d7:f2:14:12:72:89:67:a0:c5:94:48:ee:
46:2a:ca:cc:6b:49:93:15:4e:1c:bb:da:e2:50:a9:
d7:7b:fc:e4:74:b5:64:57:c9:ba:cc:53:c2:cc:ad:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:0C:F4:AB:72:F4:67:6A:EB:8A:04:FE:5D:F6:1B:9B:DA:B2:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UrMM9Kty9Gdq64oE_l32G5vasmA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:98:72:2c:9a:95:83:11:e5:41:7d:6c:b1:7c:0c:41:1a:ce:
00:13:6b:52:a5:b2:4a:3f:1b:80:47:80:6c:86:81:5c:ca:1e:
aa:1b:86:61:00:ae:36:33:3c:ce:ca:39:37:09:b4:39:f8:46:
35:15:63:ff:31:02:cb:cb:8d:77:56:9f:38:28:c7:1b:ab:2d:
55:36:23:21:ff:b7:bf:a7:3c:63:4e:33:8d:e2:82:d0:56:c7:
6e:7d:a2:0d:9b:2f:24:d0:60:9b:07:73:c2:81:f8:44:5a:1c:
f1:0d:b7:e6:84:aa:bb:6a:0b:6f:2a:49:66:25:3b:bf:10:f0:
6b:b1:fe:40:4d:11:6a:aa:02:40:fe:67:5b:c2:bc:a5:a8:81:
c0:af:07:31:7c:68:8d:41:97:7d:80:0c:1c:6e:ca:cf:12:65:
22:43:f5:68:e8:c9:cf:d2:97:e9:e1:9a:b2:ff:ee:d7:24:1d:
f0:5b:3e:ef:2a:40:5c:49:1e:83:9b:94:11:ae:fd:ab:d7:1f:
d0:5c:67:d0:94:78:7d:3e:d9:1c:a1:4e:7c:b6:5d:70:0d:6c:
6b:5e:54:de:2d:7b:fb:08:2b:44:2b:3b:48:5a:e1:34:da:be:
c4:23:1c:32:30:f1:d2:f0:94:9e:9b:35:06:70:85:3b:92:10:
91:2b:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org