Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VxcKAcqcLwu83F_3OQaZYKGIPi8.roa
File: VxcKAcqcLwu83F_3OQaZYKGIPi8.roa (raw, json)
Hash identifier: JQ7gGEI7Nzko7OAG7jGtbfX8hmj/VZ5yRz+OQhavBcg=
Subject key identifier: 57:17:0A:01:CA:9C:2F:0B:BC:DC:5F:F7:39:06:99:60:A1:88:3E:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D92
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VxcKAcqcLwu83F_3OQaZYKGIPi8.roa
Signing time: Thu 02 May 2024 00:23:40 +0000
ROA not before: Thu 02 May 2024 00:23:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19858 (0x4d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 00:23:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57170A01CA9C2F0BBCDC5FF739069960A1883E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:57:03:e2:08:ac:4c:4f:3b:a3:39:80:51:
35:71:8d:7d:5a:1b:ab:4f:70:59:01:46:4a:bd:30:
f7:8b:71:91:7b:f5:28:64:c8:92:cb:04:9d:6c:e1:
27:52:1a:63:de:83:8c:3d:df:75:a1:92:bc:9c:f8:
1b:db:8c:4b:1f:dd:a8:ae:53:73:c5:08:b0:51:91:
a5:a3:a3:61:0d:6d:62:f0:dd:b9:7d:3c:ae:62:de:
7d:99:99:12:fb:ba:f9:c0:d1:84:90:18:c4:52:f2:
d6:ac:94:aa:bc:e3:2c:6d:b8:66:2e:e8:62:d8:17:
be:1d:df:e1:49:ed:27:a0:62:b6:5d:20:5b:16:3d:
59:7a:e7:4b:f2:05:3f:6f:12:a3:0a:27:61:c2:e1:
b3:4e:b1:6c:8a:6a:b8:90:e0:48:1e:5d:08:1a:05:
f0:27:a2:7c:14:6a:9b:d2:13:26:b4:ee:21:42:8c:
2c:1f:75:a9:6b:c0:db:f0:4c:74:62:56:35:44:90:
e9:3c:5f:b6:05:98:48:fe:22:0d:68:d7:94:35:36:
e5:11:75:f2:0f:68:b0:b2:4c:0b:86:6f:41:93:b7:
77:00:d3:85:2b:eb:3c:47:ec:71:8c:ad:4b:14:a3:
16:83:03:84:3a:5e:6e:74:a7:5e:2a:62:b4:5f:18:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:0A:01:CA:9C:2F:0B:BC:DC:5F:F7:39:06:99:60:A1:88:3E:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VxcKAcqcLwu83F_3OQaZYKGIPi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:1d:ae:83:01:48:eb:2e:81:dc:e0:c9:b0:b7:7a:f2:1e:9c:
73:1f:68:0e:8d:b5:f7:92:67:62:31:11:68:da:d6:a5:f5:df:
9a:21:8e:73:bb:fb:95:1a:47:92:87:93:b1:5e:47:9b:15:3c:
9d:db:01:b7:f1:35:bc:1a:e5:d3:e6:b3:1c:78:34:82:47:6d:
51:ab:88:94:d9:d5:da:04:f1:7d:b6:31:89:e1:02:0d:ea:47:
2a:98:51:7d:77:6d:15:4d:e9:3d:a7:e8:af:bd:c5:90:a2:f9:
92:bb:5b:38:d9:1e:b9:43:ea:8a:62:19:3d:1b:f8:cf:e1:81:
b5:05:b0:59:d2:d1:69:8b:af:a4:45:71:02:d0:57:0b:e7:0a:
2c:e7:cc:2d:80:a6:55:ad:a2:72:c8:81:1d:cb:97:d5:ab:87:
e0:82:7a:24:bd:85:85:c8:5c:0f:f7:30:89:63:68:48:36:7e:
0c:c2:95:33:4f:a1:25:37:91:e3:98:68:03:74:60:a8:91:1b:
e4:24:3c:2e:56:10:01:ac:5e:2e:c6:3b:3a:7e:55:97:fe:7f:
e6:6b:6d:16:35:7e:e3:15:59:04:f0:7c:3f:df:02:05:bd:6c:
8f:5b:23:bc:cb:24:07:fb:cd:d6:c5:11:45:80:25:61:fe:9c:
1d:e1:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org