Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WSvosxtNvxK3lul5xhT1hZVr0Wc.roa
File: WSvosxtNvxK3lul5xhT1hZVr0Wc.roa (raw, json)
Hash identifier: aEVAlN/zffqvv75KMhmx3z1Wdh0eZgkA7zJMnv7xkak=
Subject key identifier: 59:2B:E8:B3:1B:4D:BF:12:B7:96:E9:79:C6:14:F5:85:95:6B:D1:67
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EC2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WSvosxtNvxK3lul5xhT1hZVr0Wc.roa
Signing time: Fri 03 May 2024 14:23:44 +0000
ROA not before: Fri 03 May 2024 14:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20162 (0x4ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 14:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=592BE8B31B4DBF12B796E979C614F585956BD167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:bb:a7:80:f4:8b:a2:15:08:cd:d2:e7:2b:
63:6b:43:c7:53:c2:77:9d:fa:f5:b0:5e:27:f6:87:
e7:7f:b3:14:ec:6d:dc:c4:e7:bd:30:79:0f:dd:e9:
22:43:75:a7:14:8c:cf:5f:13:57:cf:73:90:9f:bc:
d8:f7:1f:e3:69:6e:e9:77:c7:c2:fc:fa:92:f5:b6:
8c:23:bd:4d:0a:23:d3:0d:e0:4b:3b:3a:69:06:35:
43:da:1f:78:27:bf:6b:0a:03:2b:dd:3d:d5:7e:98:
cf:8f:4c:ea:dc:73:82:1a:0a:96:ac:75:4c:c0:42:
7d:f0:b5:2a:fa:03:29:02:51:6f:fe:85:de:18:96:
95:61:06:33:e5:45:3e:cf:3e:93:4b:f3:24:3f:de:
f5:c8:e8:be:03:69:41:28:ac:99:81:38:69:25:70:
2a:5b:56:b7:ed:cf:b6:7a:02:fb:cd:ac:8a:59:94:
eb:20:c9:8c:99:ca:f0:dd:2f:eb:ad:24:23:18:64:
ba:fc:07:12:62:7e:88:af:01:d7:2f:a2:7a:b2:a9:
b0:35:62:58:a8:20:8a:db:b4:84:ad:3a:95:6a:ba:
f4:18:4b:4c:36:c5:c4:2f:bb:69:91:c8:d9:d4:ae:
28:4f:76:5d:13:a0:83:3c:23:61:2f:01:68:06:9d:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:E8:B3:1B:4D:BF:12:B7:96:E9:79:C6:14:F5:85:95:6B:D1:67
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WSvosxtNvxK3lul5xhT1hZVr0Wc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:6a:ac:4d:28:50:3b:6c:98:23:34:d2:57:10:6b:8d:43:01:
f5:5f:64:26:de:c3:57:11:2a:0b:bb:2b:67:af:34:19:bf:ef:
77:b2:d1:62:bc:01:90:9e:53:20:d3:65:21:82:dd:41:4c:9d:
2b:55:dc:2b:f7:b1:e3:c6:12:ca:3b:9d:eb:65:00:1f:e8:99:
de:af:bd:42:06:4f:ac:c4:26:fe:3b:4e:29:3b:50:71:f1:2f:
f8:ca:dc:65:86:c9:e1:53:a3:3d:ed:62:38:e6:2d:ac:9a:37:
60:76:b3:ac:6d:8a:71:7c:52:cf:72:55:fe:bd:a2:5e:12:c3:
77:0b:f9:e9:ff:37:63:9e:56:67:22:08:38:46:7c:cb:46:9f:
29:b2:1b:d1:3a:d1:01:14:25:7a:fa:27:52:06:36:36:0a:e0:
2c:13:e4:69:82:b7:89:dc:7d:77:f0:36:81:e5:df:44:02:83:
b3:f9:fd:e6:cf:24:07:82:0c:ae:e3:31:c0:4b:a0:3f:31:b1:
b5:75:5d:52:f8:8c:81:57:16:e2:71:36:7b:50:c4:41:78:21:
b2:fd:f3:e8:1a:a1:bc:da:ba:66:fe:11:4f:52:a0:20:0a:98:
58:9a:e9:26:f9:ff:83:4c:6d:9c:3b:fa:5d:3a:0d:12:1b:28:
82:78:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org