Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YUTfRRSrCcSzYmsJLvsJrVVu9tc.roa
File: YUTfRRSrCcSzYmsJLvsJrVVu9tc.roa (raw, json)
Hash identifier: LxjH5gT0GnuWpfKon7wd0jRTjGtSW3mL8eYkWwNmtaI=
Subject key identifier: 61:44:DF:45:14:AB:09:C4:B3:62:6B:09:2E:FB:09:AD:55:6E:F6:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3542
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YUTfRRSrCcSzYmsJLvsJrVVu9tc.roa
Signing time: Sat 30 Mar 2024 14:22:08 +0000
ROA not before: Sat 30 Mar 2024 14:22:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 14:22:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6144DF4514AB09C4B3626B092EFB09AD556EF6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:57:dc:eb:40:fa:50:36:38:1a:63:2b:b8:
50:94:be:4b:5b:34:47:41:5d:ac:c5:60:b6:93:a3:
2b:3f:f5:fe:a7:40:91:54:26:d3:ce:4c:eb:91:e9:
a0:ee:18:25:54:80:53:59:79:21:d3:96:28:98:af:
c5:c6:f5:c6:0f:43:4b:1d:bf:9c:fa:f0:a0:e3:03:
b6:c0:7e:5a:bf:ab:2c:f4:7b:40:65:ea:8e:37:f3:
6e:f2:a0:1b:5b:4c:13:39:11:e6:60:0f:08:67:ff:
cf:74:2a:ae:96:cb:55:d4:11:6a:d4:a2:f6:f2:1f:
07:8d:5d:78:e8:ea:8b:21:d0:8e:87:14:8a:6f:56:
08:31:c1:e9:18:12:ee:8f:35:6f:9c:7d:7c:45:06:
34:d5:96:c9:7b:5d:9a:bf:09:a9:03:0f:1e:27:84:
79:a3:7e:9a:d8:fd:23:db:0e:27:36:98:f0:7c:03:
7b:2b:cd:65:9a:02:0f:9b:bf:5c:61:ab:10:15:06:
9a:83:16:7f:41:a5:36:dd:53:9e:d8:22:6b:40:14:
ca:7b:5a:a2:86:f6:60:f4:84:45:e8:f9:ea:62:2b:
98:4c:3b:92:22:4e:b7:d0:da:97:95:66:e4:ab:3c:
5f:fa:ce:f2:10:3c:52:44:1c:84:a1:ba:63:65:54:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:DF:45:14:AB:09:C4:B3:62:6B:09:2E:FB:09:AD:55:6E:F6:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YUTfRRSrCcSzYmsJLvsJrVVu9tc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:79:c8:fa:58:25:5e:9d:f2:0d:d6:9c:0c:47:8b:ec:28:4e:
7f:da:85:4f:fa:43:b9:55:74:2c:fb:e0:9d:df:ea:49:c6:56:
24:1d:36:eb:33:1a:5d:40:2d:fe:c2:5c:e1:f7:90:8b:38:d9:
28:4a:06:7f:a1:49:f7:45:63:51:e1:3d:e7:8d:0a:88:3f:aa:
80:8a:0a:93:9e:36:42:a2:60:7e:a6:0e:11:bd:c8:77:e9:e2:
27:4c:1c:82:64:64:90:74:db:bd:b2:51:ff:57:ea:ea:c4:0b:
cb:d1:84:f2:35:a7:21:e2:67:5c:ef:d9:f6:2b:60:85:ec:d7:
0a:41:80:6b:50:12:01:7f:8c:a5:fc:76:89:bd:79:00:91:1c:
f3:c5:73:19:21:4b:1d:5d:d2:04:be:bf:80:c5:d6:20:55:8e:
32:70:a6:fc:af:40:0a:8a:99:8a:34:f8:41:1e:ed:3f:9a:76:
ac:7b:93:8d:65:86:95:f8:81:fa:24:9b:a3:f4:b2:89:32:14:
90:f4:48:9b:b4:4c:8f:b5:7d:61:f1:01:d4:2b:dd:6a:1c:f1:
af:f5:31:5f:e0:9c:26:7d:00:0e:72:e5:eb:89:93:2c:06:7a:
5a:5c:eb:34:48:b2:33:1c:06:54:a7:34:c0:a6:d3:65:e0:22:
6c:c7:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org