Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XJ1fHtb9fNBppCOFKGgCrH1w27o.roa
File: XJ1fHtb9fNBppCOFKGgCrH1w27o.roa (raw, json)
Hash identifier: w1/N2DsjKG2G8douFA45ZzvMMAMSEgjAZlRSFZAOzdo=
Subject key identifier: 5C:9D:5F:1E:D6:FD:7C:D0:69:A4:23:85:28:68:02:AC:7D:70:DB:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 336A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XJ1fHtb9fNBppCOFKGgCrH1w27o.roa
Signing time: Thu 28 Mar 2024 03:22:01 +0000
ROA not before: Thu 28 Mar 2024 03:22:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13162 (0x336a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 03:22:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5C9D5F1ED6FD7CD069A42385286802AC7D70DBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:ab:fd:53:34:fd:f6:e0:ac:90:08:7a:06:
da:7c:8f:87:32:81:19:fa:22:b4:79:ad:08:60:3e:
9f:dc:e6:4b:69:f8:32:b0:91:2f:0a:2d:71:7f:62:
eb:14:53:13:4f:a9:40:35:b8:92:40:20:92:60:94:
44:e0:cf:92:0a:c6:5b:35:01:2e:7d:36:e9:ba:8d:
22:bc:d1:9e:c8:ee:d4:50:db:5e:2f:18:9d:c6:07:
98:75:1a:57:2e:ad:88:34:09:17:bc:c3:d3:96:a4:
4a:71:d2:3f:ef:d7:af:82:4b:f8:d3:12:39:d0:f4:
3c:b8:36:b5:5b:04:ef:b9:cb:da:cd:bb:c3:c3:cd:
04:eb:34:af:1c:80:8f:81:68:2a:13:89:c5:ff:58:
ae:8c:e1:b0:4b:62:14:bb:7b:13:d4:83:d3:c3:64:
24:6c:05:0c:4e:17:d5:e4:04:dd:21:ed:b9:1e:d6:
76:59:1f:9b:eb:5c:60:57:7f:7b:8d:ad:c4:ce:6f:
91:8d:6c:d8:10:6e:ba:19:e0:68:e6:fb:2a:ca:a2:
ae:89:a3:f2:10:6a:e9:85:ce:9b:62:ed:29:7f:16:
56:12:ff:12:5c:dd:01:e9:40:b2:10:f3:9d:49:51:
4b:68:11:3b:3d:a4:2a:36:d0:65:ea:3e:21:5d:3c:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:5F:1E:D6:FD:7C:D0:69:A4:23:85:28:68:02:AC:7D:70:DB:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XJ1fHtb9fNBppCOFKGgCrH1w27o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:70:9d:ad:fb:5d:25:73:7b:92:6b:31:28:95:f9:4c:b8:d3:
11:57:bf:b3:fc:93:9b:8b:ba:b2:2f:ca:8f:21:b9:44:f7:cd:
28:e7:70:31:0c:03:5c:97:a3:18:b3:29:df:6b:de:03:01:8b:
e5:28:3e:8e:6e:ab:92:9a:0d:6f:07:3c:78:c7:78:1b:eb:9d:
42:58:56:fa:f3:0b:18:1c:a8:4a:15:76:95:35:c1:a8:c9:33:
0f:9e:36:8a:30:3e:6c:bc:e0:02:bf:be:ae:6d:5d:66:a5:8e:
b4:6e:b9:9c:ea:49:7e:af:6f:3e:43:78:e7:1e:49:ae:b6:42:
9d:51:e7:f1:29:27:e6:b1:cd:7e:a8:9a:eb:50:25:bc:d4:60:
90:7d:17:d6:57:24:b1:32:e4:5f:d4:0d:6c:f6:23:e3:9e:56:
21:28:83:9c:5d:3d:95:c5:64:24:f7:74:14:98:cb:e2:d6:0b:
47:76:9a:75:16:e9:db:cc:0c:41:c4:3e:84:f5:87:39:79:a9:
3c:92:a5:cb:db:58:c4:5e:e7:a0:46:e9:01:7e:9c:53:5e:f5:
f9:d1:9b:38:40:6e:c8:ba:2f:fb:b6:74:5d:b1:71:ad:ae:a0:
ba:89:35:b6:b1:ac:ea:a7:2c:83:aa:c1:2e:d0:5b:26:6b:4c:
d4:da:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org