Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WKcuIQw0WXJJClSgYjpc-cay4T8.roa
File: WKcuIQw0WXJJClSgYjpc-cay4T8.roa (raw, json)
Hash identifier: 9KoifsLpIg/Ewoty5zad1RdXtulVPG2DSuhhcPO0/d4=
Subject key identifier: 58:A7:2E:21:0C:34:59:72:49:0A:54:A0:62:3A:5C:F9:C6:B2:E1:3F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 537E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WKcuIQw0WXJJClSgYjpc-cay4T8.roa
Signing time: Thu 09 May 2024 21:54:27 +0000
ROA not before: Thu 09 May 2024 21:54:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21374 (0x537e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 21:54:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=58A72E210C345972490A54A0623A5CF9C6B2E13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:2d:b5:86:3c:52:c3:95:3a:1c:a4:ec:1c:
b0:b6:c0:50:71:44:89:ae:92:c9:10:8a:50:99:20:
55:26:e5:12:c4:10:eb:3b:45:cd:35:88:6c:54:08:
66:f5:dd:d3:c1:a7:57:46:a2:e5:88:b6:2d:ea:b0:
01:f3:c4:e6:68:79:2e:a9:eb:3c:7f:4f:53:fb:b5:
38:d8:0f:3b:61:d8:56:d7:55:a8:48:e4:a7:28:ca:
9c:d7:a4:42:b2:c5:53:87:cc:2a:32:77:69:8c:02:
df:48:b8:32:92:ef:bd:ce:06:49:33:7f:2c:8f:f4:
d7:d3:cd:bb:fa:8a:9a:ab:23:2b:aa:3c:a7:f7:0f:
be:3b:1b:a3:f8:5c:b9:8f:69:71:9c:64:f7:27:19:
f6:cf:0a:6b:6f:b5:e9:a5:0b:f9:e0:f8:a7:11:9a:
68:39:a9:3b:ed:5d:d3:78:17:36:68:9e:20:6b:09:
35:47:da:65:5d:dd:ba:66:9a:45:dd:fe:f0:83:b8:
3a:64:2b:dd:2d:e3:b4:b7:5a:63:bb:d6:ce:0a:21:
cc:d4:0c:19:c8:e3:5f:64:49:ac:77:d7:69:bc:45:
df:b9:8d:2f:6f:c6:3d:fc:0a:27:9b:ad:79:ad:95:
48:5d:8c:54:cf:2a:60:a0:cf:4e:ae:5c:ed:3f:94:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:2E:21:0C:34:59:72:49:0A:54:A0:62:3A:5C:F9:C6:B2:E1:3F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WKcuIQw0WXJJClSgYjpc-cay4T8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:e3:9c:c0:67:60:3f:49:aa:01:ca:c8:4b:32:e2:fe:8e:80:
2f:49:ea:f8:fe:0d:1a:6e:a7:19:41:27:c6:63:f1:78:b4:bb:
bb:81:7c:7d:a0:bf:ce:30:c9:ff:00:92:e3:b7:13:a2:0a:d6:
25:d9:10:d3:3a:01:a2:69:ff:39:1d:d4:a5:36:e0:69:09:f4:
45:4a:b2:30:63:a8:43:b5:f4:56:97:36:b2:e4:b1:83:8a:83:
77:b2:21:a8:0f:01:67:89:9f:34:a6:87:4a:90:b5:9d:da:eb:
4c:53:14:58:45:35:dd:0f:21:13:1e:67:b5:55:e7:90:bc:71:
b1:8e:e8:ab:75:43:d1:a1:ba:bb:84:ca:e3:b8:0e:be:f1:5e:
cf:e7:06:00:59:78:02:31:2c:fa:c1:d5:58:11:79:a2:7f:67:
59:f4:c6:8d:93:c9:ba:5d:c5:0f:e7:5e:33:a7:0a:b1:87:d7:
c2:a3:2d:76:3e:2d:25:17:d7:4d:7a:02:20:1e:1b:e2:89:40:
0b:38:b4:d8:aa:42:bc:23:95:a8:88:ea:e6:5b:44:54:c5:d6:
98:5b:11:9a:3c:ee:cc:5d:fd:35:df:84:ed:8f:2b:98:88:d8:
80:79:d6:cf:ed:ed:f7:28:ad:19:bd:07:e2:2d:45:c6:d0:7f:
72:b6:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org