Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YjzEgVasl-LySBhtMhYXaQlOpiw.roa
File: YjzEgVasl-LySBhtMhYXaQlOpiw.roa (raw, json)
Hash identifier: HLcNPV+ZLJnmcPP6fwU/xQiKSHbVbuSVwMRSTZKWr30=
Subject key identifier: 62:3C:C4:81:56:AC:97:E2:F2:48:18:6D:32:16:17:69:09:4E:A6:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EFE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YjzEgVasl-LySBhtMhYXaQlOpiw.roa
Signing time: Fri 03 May 2024 21:53:50 +0000
ROA not before: Fri 03 May 2024 21:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20222 (0x4efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 21:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=623CC48156AC97E2F248186D32161769094EA62C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:55:b8:d6:8e:85:79:69:25:ec:56:89:39:
a5:fc:ee:e8:1e:8d:83:38:b6:4a:fb:19:6a:b9:cc:
a5:77:61:67:b7:50:9e:73:c6:d8:01:72:00:79:86:
d4:ae:ce:b8:c7:ef:5d:86:db:98:d5:19:be:eb:aa:
e0:3a:1a:ab:d2:d3:91:5f:d7:74:c2:7c:04:8d:af:
35:14:65:e2:55:86:d9:c9:cc:f5:07:59:1c:bb:f6:
c5:ce:07:5c:a3:72:be:7b:f9:da:ef:10:e2:26:15:
7e:ca:e5:93:1f:2f:b0:b2:95:63:7b:2b:44:0e:05:
54:5f:ba:c2:cf:3c:f8:b2:5c:f1:40:43:a8:2c:8e:
47:57:7b:cd:43:6e:86:70:21:e8:1c:1f:d2:fa:d6:
b8:0f:da:92:5c:cc:87:ad:c8:13:99:72:57:da:06:
18:12:1a:c7:84:80:66:71:25:8a:22:e6:cd:a0:27:
3c:93:8c:a5:ea:66:9d:f7:52:7d:a6:91:4d:67:2e:
62:93:5f:82:d6:90:ef:cf:82:11:ac:4f:1d:49:b8:
4a:1b:08:5d:96:4b:6f:82:69:76:b6:d0:ad:8c:63:
18:dc:b7:a9:66:c2:6d:e6:4e:09:a6:be:bb:ee:d2:
08:d7:4a:e1:c3:72:6f:9e:c1:bf:f0:35:24:57:91:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:C4:81:56:AC:97:E2:F2:48:18:6D:32:16:17:69:09:4E:A6:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YjzEgVasl-LySBhtMhYXaQlOpiw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:5e:15:10:82:43:b7:2f:20:66:1c:c2:56:06:76:cd:69:93:
98:4d:bc:d6:16:3b:f4:93:41:37:32:be:4c:87:bb:33:37:44:
b0:9e:00:4b:03:82:61:cb:5c:b5:d4:71:07:cf:bd:5c:ac:e8:
2d:23:67:57:02:22:1a:03:a4:a3:31:85:5e:f5:d0:ea:c6:5a:
bf:3e:98:db:03:52:1d:68:4c:3f:e8:eb:b6:b3:cc:e2:b7:66:
df:3d:e5:64:7d:72:bd:e8:04:0b:f1:6f:d2:96:f6:f4:97:01:
80:cc:3b:10:98:40:27:bd:14:52:ca:ef:e4:5f:12:b5:f5:bb:
c1:93:66:65:6c:63:be:25:87:45:18:62:1b:02:57:14:3f:c5:
d1:52:d7:02:6c:47:1f:36:48:44:d1:69:82:20:c9:32:8a:4f:
98:45:7e:a7:51:4a:7f:7b:2d:bb:ed:0c:45:c9:f3:ac:1f:f3:
b5:25:01:a5:dd:20:d3:c9:da:b6:53:d3:2b:ad:65:8d:2c:99:
38:56:05:1f:e2:7f:dd:3a:74:b2:2b:f4:e0:0f:5a:74:82:6f:
3b:b7:64:45:79:aa:a5:db:61:89:3d:3d:93:0d:7a:64:58:b8:
ce:3b:fa:95:f1:14:09:e5:c7:3a:b5:37:90:07:f6:f8:18:8d:
b1:f0:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org