Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XeANy7oa7CWlbBDnLfrxFdL_go0.roa
File: XeANy7oa7CWlbBDnLfrxFdL_go0.roa (raw, json)
Hash identifier: 4636QMrmPi1YtxXb/uF3eNHWLoAkoNFs7WlXyEUpA6A=
Subject key identifier: 5D:E0:0D:CB:BA:1A:EC:25:A5:6C:10:E7:2D:FA:F1:15:D2:FF:82:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44FA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XeANy7oa7CWlbBDnLfrxFdL_go0.roa
Signing time: Sat 20 Apr 2024 13:23:05 +0000
ROA not before: Sat 20 Apr 2024 13:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17658 (0x44fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 13:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5DE00DCBBA1AEC25A56C10E72DFAF115D2FF828D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:2e:7d:2e:1c:a8:af:ad:9a:53:49:4f:04:
38:af:f7:7c:93:0e:9d:52:2f:0c:8c:3d:72:ec:73:
eb:e0:67:af:de:74:a3:58:52:93:b5:15:2b:11:94:
1e:ae:69:bc:40:fb:03:6a:7d:13:49:a6:48:dc:5c:
cc:39:2e:c3:cf:c5:6e:34:84:9d:d7:ad:fa:6e:7d:
4f:26:26:83:5c:74:c2:dd:79:bb:be:27:30:ec:f9:
db:85:e4:00:d3:4a:1e:26:2b:b7:18:ae:f8:ce:1d:
a2:72:b8:99:a9:99:ee:8f:23:82:1c:81:85:b7:74:
5a:bd:d9:da:94:f6:66:ad:67:5a:4c:93:37:39:51:
4f:cd:02:c7:26:7d:e7:a6:70:8d:47:f2:12:fc:94:
ed:ce:77:20:01:12:c6:cc:b1:cc:cd:50:90:17:ec:
ac:1e:72:fe:a1:f8:d3:d6:69:19:12:53:dc:cd:a9:
b1:39:8d:7a:aa:c9:d6:c5:5d:b7:21:5b:d7:99:db:
52:3a:cf:43:38:e9:94:07:aa:1e:25:81:e1:8c:18:
01:4a:f4:a9:69:14:4b:b8:96:15:64:0b:44:f9:9e:
e2:17:00:7e:a6:12:ee:fd:c8:f0:1f:9f:5a:13:fc:
a5:f4:7f:fb:c0:88:41:11:02:71:bc:a6:cb:48:a8:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:0D:CB:BA:1A:EC:25:A5:6C:10:E7:2D:FA:F1:15:D2:FF:82:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XeANy7oa7CWlbBDnLfrxFdL_go0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:23:65:24:8a:f3:56:e4:69:3a:ef:4c:57:c7:11:ae:98:9a:
ba:b4:35:70:05:7c:e2:75:03:d0:ed:fc:72:13:c1:16:13:7d:
cf:f1:cb:36:54:f2:68:3e:74:1e:6e:b9:bc:e2:ca:11:20:88:
f4:b0:9a:04:70:ae:46:0b:f2:7f:9f:c1:68:00:2b:f3:7d:65:
7e:80:00:a8:83:c0:4f:39:b5:62:80:01:8b:d9:12:f7:d6:7d:
b7:0f:ae:34:96:10:97:1a:72:ba:9c:15:ea:78:e4:65:58:1c:
27:17:80:6c:e9:5a:78:a3:c5:9c:a1:91:27:fc:23:d9:0d:31:
bf:07:05:77:d3:a5:0d:cf:c5:9d:cb:34:4e:67:76:2d:92:c4:
a2:e3:cd:15:f0:ed:60:00:92:f6:40:b4:67:26:cc:ac:ca:7e:
25:82:4e:72:08:17:3b:7a:29:1c:92:0a:dc:0d:23:04:25:06:
a1:aa:cc:0e:de:9e:75:6f:64:74:35:03:87:70:a3:6d:0c:e8:
2a:38:33:08:38:d8:73:d2:64:67:b2:19:07:12:20:10:78:e9:
00:20:0a:8d:3f:de:6e:1d:97:55:ff:62:c8:07:79:30:4a:89:
1f:e9:42:f6:de:d0:66:a5:6e:5e:ad:87:42:a3:4e:38:a3:3a:
07:a7:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org