Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmrqXY7UVbypW2yj-bRR7IFxrPU.roa
File: ZmrqXY7UVbypW2yj-bRR7IFxrPU.roa (raw, json)
Hash identifier: gFLcZkJqdCFTUqshmd4sSnUmxaTSzqynFQz2SVvEnlA=
Subject key identifier: 66:6A:EA:5D:8E:D4:55:BC:A9:5B:6C:A3:F9:B4:51:EC:81:71:AC:F5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5286
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmrqXY7UVbypW2yj-bRR7IFxrPU.roa
Signing time: Wed 08 May 2024 14:54:06 +0000
ROA not before: Wed 08 May 2024 14:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21126 (0x5286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 14:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=666AEA5D8ED455BCA95B6CA3F9B451EC8171ACF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:93:af:54:06:d3:aa:9d:f5:db:b5:fd:19:
a2:f1:f7:5b:1d:f2:fc:2e:68:67:a6:6e:a5:28:e2:
7b:f9:e8:4c:a0:51:64:9c:8e:f6:91:f8:e9:8f:41:
0d:04:c0:8d:85:79:d4:c7:97:28:cc:df:09:a8:84:
13:ed:a8:90:73:ce:6f:73:cc:54:40:98:0b:b7:b4:
24:4b:4f:9a:37:76:a2:90:8d:90:36:f8:0c:88:2d:
bf:e3:1b:bd:b2:41:29:74:5a:98:24:8e:31:60:86:
94:8f:44:c0:3d:57:e4:75:fc:e8:d6:69:a2:cb:db:
2d:c2:e1:f8:73:ef:3c:e8:20:c0:fb:ed:3d:4b:29:
11:27:6d:7c:ed:94:26:7f:b8:71:43:39:20:49:f5:
6e:17:d2:3f:0b:b5:3d:d3:d8:1f:63:aa:e5:e3:d9:
a4:99:3d:ec:9c:0f:a1:1e:d7:c8:f7:1f:ce:55:c6:
da:ca:cd:e1:54:be:3e:24:de:c3:c8:8e:f4:66:d4:
f6:e9:dd:ca:a2:75:13:aa:ee:4b:76:fe:36:05:0c:
d5:da:74:c6:4b:90:36:11:02:f1:c4:71:5b:2e:0e:
92:b0:a9:df:68:be:54:24:07:9f:25:e8:09:70:33:
19:6e:ee:86:fa:33:39:91:23:c1:a3:c4:98:02:f6:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:EA:5D:8E:D4:55:BC:A9:5B:6C:A3:F9:B4:51:EC:81:71:AC:F5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmrqXY7UVbypW2yj-bRR7IFxrPU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:8d:fb:eb:e6:08:8a:90:1f:69:3b:c7:e6:8a:92:5a:e5:1d:
6c:89:86:64:9b:3f:83:58:32:2f:fa:58:db:5b:5a:27:4c:cd:
37:65:c3:e7:72:f1:5c:b1:c5:41:3b:42:2c:4a:7d:82:f1:21:
a2:fa:46:05:ef:ab:d4:92:35:ec:9d:d0:2b:07:9c:9d:2c:93:
d2:74:9b:d4:33:30:f2:ec:02:59:ce:fe:78:22:21:d9:7b:63:
fd:01:50:2b:ef:1e:d2:53:38:f4:fd:f6:ed:8f:62:ad:62:cf:
79:2a:ba:e9:8a:b3:09:e6:e3:13:55:6b:ae:4c:32:10:0d:2a:
36:44:bb:4b:67:0d:90:a4:a6:7e:34:39:ac:8c:d5:30:8a:7c:
bb:14:70:00:d6:15:3d:d5:e0:a6:a7:28:93:f5:a7:c7:e4:8e:
eb:f3:52:99:f9:c9:75:99:37:b9:98:82:68:3a:d4:5a:e7:d1:
42:e3:ad:5f:1b:e5:a5:2f:70:af:a0:7e:09:42:ae:02:f6:a5:
38:be:96:d0:ce:13:4f:e4:57:22:79:7f:79:3b:08:0f:40:06:
ae:01:2c:bd:e1:a9:7e:39:7b:cb:bb:67:34:4d:9c:f4:2c:2c:
61:5f:b7:fe:fb:55:e9:5d:ba:1d:50:84:b6:ad:49:3d:ac:25:
84:4d:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org