Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Z83fiB6zmEL1hI5YaRWoIcGX0b8.roa
File: Z83fiB6zmEL1hI5YaRWoIcGX0b8.roa (raw, json)
Hash identifier: ms76gVg1YBaygDzJ3Hs36jAHsWCiK615pYsj+tOXiic=
Subject key identifier: 67:CD:DF:88:1E:B3:98:42:F5:84:8E:58:69:15:A8:21:C1:97:D1:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ABE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z83fiB6zmEL1hI5YaRWoIcGX0b8.roa
Signing time: Sat 06 Apr 2024 21:52:32 +0000
ROA not before: Sat 06 Apr 2024 21:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15038 (0x3abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 21:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=67CDDF881EB39842F5848E586915A821C197D1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:4a:47:df:99:c4:83:ab:b8:91:50:87:7b:
3c:39:bf:a5:13:e9:d8:db:c5:b0:60:cd:15:3b:50:
5a:72:ce:06:91:40:1a:d8:3c:7a:39:d5:c9:04:a9:
de:4d:3f:96:b9:e8:63:04:32:01:2a:83:48:03:bd:
ad:7f:5f:5e:b1:4f:96:e6:88:f2:b0:24:ee:5b:d5:
38:b6:f1:a4:68:7d:1f:9e:3d:92:0a:4c:7c:66:0b:
9a:a2:67:f5:3a:0d:6c:e3:8f:53:f7:d8:da:73:57:
9d:12:c6:d8:57:da:e8:a4:9f:6d:7c:17:62:53:fd:
1e:89:68:22:2d:1d:0a:58:4c:31:6b:c2:73:d1:4f:
9a:77:4c:af:80:b5:0a:b3:3d:9e:e1:eb:c8:01:89:
5e:4c:1e:04:af:fd:49:e2:e8:89:58:27:9b:11:ed:
35:49:22:08:95:74:98:96:56:0d:4f:ac:4c:ae:54:
27:d3:f2:ff:66:d7:3e:de:a1:5a:97:b9:16:dc:7a:
92:70:3c:36:57:0e:b6:de:e1:50:de:86:da:f1:2f:
d5:c9:61:08:b9:d5:85:30:e7:09:ef:d6:88:76:c6:
4b:25:b5:0a:5a:9d:42:5e:d0:6d:64:96:23:93:81:
aa:71:62:48:97:eb:ed:d0:d9:b9:f0:3c:51:be:1e:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:DF:88:1E:B3:98:42:F5:84:8E:58:69:15:A8:21:C1:97:D1:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z83fiB6zmEL1hI5YaRWoIcGX0b8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:a6:a4:32:7a:8f:6f:a3:b1:97:3b:d3:a3:3d:02:b1:c7:d2:
4c:0d:ee:17:f1:52:9e:ea:cf:24:6b:9d:79:d0:47:1d:d5:a9:
30:28:e8:79:e9:97:39:9c:03:e7:50:8d:da:d0:f7:d0:24:ed:
55:7c:c0:6e:48:6f:8e:96:1e:c1:42:20:2b:33:54:bc:77:20:
a0:0f:60:23:b0:4d:41:7c:fe:aa:aa:5f:8e:75:ad:85:0b:b7:
79:5a:a4:15:23:11:1e:bc:f9:d0:7d:e5:ca:b6:d7:f4:a0:7e:
06:90:d9:ab:8c:9c:49:b5:07:e3:b0:43:f6:4c:6a:3c:97:fd:
ed:22:ae:6c:e9:32:cc:74:12:00:44:f2:4c:c2:de:dd:2a:f7:
cd:05:e4:b4:ea:0c:25:05:b9:1f:bb:f8:47:09:91:9c:ab:f5:
9c:c2:67:93:30:f2:ef:cb:0f:2e:f4:15:2e:69:61:d8:72:0d:
3d:2f:44:26:0a:ff:60:4c:aa:af:61:0f:6d:27:6d:fe:67:6d:
e3:c3:e3:02:66:df:56:f4:e0:0d:f6:31:b8:49:a8:33:b0:c6:
84:b2:19:a6:83:72:af:ed:d4:5e:d6:aa:17:a3:88:fa:10:bc:
c8:50:41:ca:83:47:74:8a:3a:07:63:c3:e7:1d:ae:87:9a:b5:
49:69:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:51 2024 by rpki-client on console-ams.rpki-client.org