Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YXJI1MAnf3s49DoiJ5gsTCho-E4.roa
File: YXJI1MAnf3s49DoiJ5gsTCho-E4.roa (raw, json)
Hash identifier: f8jDBo6drzhb96aNYLIlUhRfEANOc1tI158pjJ3KjR0=
Subject key identifier: 61:72:48:D4:C0:27:7F:7B:38:F4:3A:22:27:98:2C:4C:28:68:F8:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C4E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YXJI1MAnf3s49DoiJ5gsTCho-E4.roa
Signing time: Mon 08 Apr 2024 23:52:35 +0000
ROA not before: Mon 08 Apr 2024 23:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15438 (0x3c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 23:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=617248D4C0277F7B38F43A2227982C4C2868F84E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:13:81:75:c3:af:0d:b6:f7:8b:eb:b6:53:
a2:03:5e:76:f5:bc:1b:e7:b5:0b:e2:e7:a6:93:b7:
99:49:08:00:ac:f4:72:7e:55:7b:a3:62:13:79:a6:
3d:c5:74:52:72:d0:40:49:e0:45:da:1e:fb:fa:75:
d1:37:e9:37:03:2c:59:1a:f0:91:51:8e:f1:fe:9d:
01:1a:f6:79:6a:43:fb:35:a4:03:ef:d2:eb:81:6d:
ae:1f:bf:f3:39:21:7d:8d:d8:44:89:33:01:a2:74:
c0:40:93:46:76:5d:8a:ee:f5:d2:53:ae:02:98:64:
5e:49:30:b4:fb:8a:aa:a5:54:c9:fd:8a:b1:b0:63:
0a:42:29:4a:05:54:15:16:3d:77:8a:07:c3:ad:d5:
e8:95:d2:9f:16:19:24:71:7c:0b:de:60:41:b2:58:
3f:69:33:eb:66:da:60:a1:61:71:cb:12:0b:a5:6a:
43:78:cb:75:9d:74:82:61:fd:8c:cb:19:b7:af:23:
b7:0e:fc:84:75:84:d0:d5:2c:16:4b:68:af:bb:4d:
80:ef:ec:30:d2:e2:d2:f0:a4:26:f1:02:4a:27:57:
a5:56:ba:67:6c:04:96:97:1c:10:c8:97:57:8f:3d:
3a:7d:a7:3b:65:91:5f:6e:20:ca:4c:bd:b4:20:ed:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:48:D4:C0:27:7F:7B:38:F4:3A:22:27:98:2C:4C:28:68:F8:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YXJI1MAnf3s49DoiJ5gsTCho-E4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:ea:b6:89:f3:44:a5:b4:e8:7c:ea:31:51:07:7b:e3:a8:f4:
84:24:56:6a:ea:6e:88:c5:80:56:c1:72:ba:f5:f6:78:57:1e:
40:09:ca:f0:56:16:da:ed:a9:77:4e:f2:c2:47:a0:f4:f6:6f:
1c:25:40:eb:22:96:e0:b5:fe:8a:f2:60:62:e6:92:7f:b5:cc:
7c:15:af:45:5c:8f:06:b7:51:9f:dc:27:e5:57:d7:ac:b6:41:
d2:29:0b:9e:99:83:68:50:55:e5:0f:26:a4:00:c6:99:14:e3:
f1:0f:12:81:5f:1e:55:0a:df:a3:c6:5e:16:45:36:e3:8a:32:
f7:ff:87:c9:a3:24:ea:74:5b:c6:66:41:9f:14:72:50:fd:6a:
95:5a:8f:a6:41:bc:36:cb:75:66:bb:fb:f4:d8:19:ca:47:a7:
32:b6:65:d2:90:fe:31:00:01:2f:cb:c9:8e:91:6f:cb:64:fc:
fe:61:49:89:86:7d:dc:c0:e1:76:94:2a:d5:bf:be:31:88:00:
b2:45:63:8d:92:4f:bf:a2:00:3f:d5:0b:b1:41:25:71:f9:1e:
e0:ea:fb:53:3f:a0:83:97:4a:cd:44:7a:6a:7e:96:79:38:4a:
19:b6:a9:a4:2c:16:ce:cd:a9:d7:55:3b:02:99:37:48:a4:06:
1a:01:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org