Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WN3j35xPbKB6ZFUabrIkGNyEsbI.roa
File: WN3j35xPbKB6ZFUabrIkGNyEsbI.roa (raw, json)
Hash identifier: /ZAayK3EUq1ZqUdhQ61m24IFk8F7f1+qPllk5xEc/Qk=
Subject key identifier: 58:DD:E3:DF:9C:4F:6C:A0:7A:64:55:1A:6E:B2:24:18:DC:84:B1:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 257C
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WN3j35xPbKB6ZFUabrIkGNyEsbI.roa
Signing time: Tue 07 Jun 2022 10:06:22 +0000
ROA not before: Tue 07 Jun 2022 10:06:22 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9596 (0x257c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 10:06:22 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=58DDE3DF9C4F6CA07A64551A6EB22418DC84B1B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:d2:9a:8c:54:da:42:6b:8a:95:bd:ed:89:
2d:c9:a7:e8:c7:8e:82:d2:1c:48:88:35:b4:af:54:
5a:ae:37:87:9d:91:68:80:5a:a9:86:77:5e:bc:09:
a2:6d:61:0b:a8:6b:85:77:10:99:ec:bb:09:c7:57:
14:0f:5c:ff:ce:30:6e:17:30:1e:71:db:a8:d6:4a:
53:2f:1a:c8:85:a9:a7:a7:35:67:ab:0f:82:39:66:
ac:7f:3a:93:e0:41:c8:a1:17:ab:13:be:c9:dd:3e:
88:31:45:e4:d2:b1:f3:34:65:19:3a:3a:24:a1:93:
ab:0d:36:0e:e5:eb:f1:5c:5b:68:73:e0:f6:2c:28:
fa:83:34:b3:66:6f:6a:00:16:3e:9a:25:9b:90:a9:
cd:4d:8f:86:44:ee:58:3b:31:81:a2:8c:11:f2:95:
5a:e1:7f:36:e1:0d:4e:ad:ef:f0:79:c1:6e:a9:55:
ce:ba:61:eb:c9:b4:4c:e1:a8:b8:5a:35:ef:83:36:
fc:5b:8e:f2:f8:b4:00:a3:b3:79:29:69:31:a1:a6:
02:fc:e3:a0:6c:84:6c:c8:b4:af:59:bc:80:db:5c:
98:cf:d1:2b:57:27:a9:f9:ef:1d:97:b4:aa:8c:7e:
57:2b:41:97:85:63:82:e5:d3:c0:6b:e6:b5:8d:94:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:E3:DF:9C:4F:6C:A0:7A:64:55:1A:6E:B2:24:18:DC:84:B1:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WN3j35xPbKB6ZFUabrIkGNyEsbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:4e:70:69:b3:bf:ac:6a:cc:14:34:c7:bb:d5:19:bd:07:c8:
41:7d:1c:16:3f:ea:3a:0b:fe:af:3f:85:70:cc:0c:00:3c:c8:
70:07:f9:9c:d7:36:e2:95:9a:74:d1:16:12:36:3d:d6:37:aa:
87:e5:c4:82:8c:30:e5:27:df:50:52:7e:40:07:92:0d:2e:c9:
5a:c9:5e:78:75:f2:f6:d7:fe:42:c8:e3:55:08:50:bd:f1:28:
56:73:d9:70:e6:a2:16:3c:f8:5a:f3:27:59:4d:88:ac:98:c0:
63:60:7b:b5:37:76:81:39:21:d8:97:18:d8:ca:75:de:6b:c3:
66:c5:23:9c:3c:24:f7:5e:46:fc:13:b8:07:1d:f4:e5:b5:99:
1e:40:eb:0f:90:94:dd:55:09:1e:27:64:47:2e:93:71:e5:75:
9b:e4:c2:72:52:a7:f4:28:99:ce:98:67:97:eb:02:98:e4:55:
ad:86:65:78:4f:d2:c6:52:92:1c:a7:2e:c5:73:bd:28:4d:2a:
67:eb:c0:bb:92:fd:6d:5f:13:ef:2c:6c:4d:30:7c:de:27:9e:
8f:8a:5e:a7:5c:3d:4c:b0:7b:bb:cd:1c:b7:2b:c7:75:fd:e7:
8d:13:68:8d:ed:68:3b:65:16:55:64:8d:55:98:60:e9:61:02:
65:3e:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org