Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_F7qNnsHzDaWxJQhgi8QvcISMsE.roa
File: _F7qNnsHzDaWxJQhgi8QvcISMsE.roa (raw, json)
Hash identifier: u14b5+zr+AGzy6xqsoDTB3yluLfHScFtIlCaMSQrQKA=
Subject key identifier: FC:5E:EA:36:7B:07:CC:36:96:C4:94:21:82:2F:10:BD:C2:12:32:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BEE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_F7qNnsHzDaWxJQhgi8QvcISMsE.roa
Signing time: Mon 08 Apr 2024 11:52:34 +0000
ROA not before: Mon 08 Apr 2024 11:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15342 (0x3bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 11:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC5EEA367B07CC3696C49421822F10BDC21232C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:c7:35:da:26:85:61:10:91:65:c8:d6:ca:
ff:3c:1e:6d:01:bc:8c:18:80:80:00:ad:e0:20:82:
c4:59:19:08:58:ab:3c:80:8a:02:6b:6c:db:00:b7:
d8:c6:03:80:5d:7b:d5:55:f1:c8:10:c7:95:1c:65:
e6:a2:15:6e:b5:42:83:a0:19:ec:93:94:a6:a1:31:
d2:5e:52:6a:f0:97:5e:18:36:23:fe:56:c6:61:cb:
6c:71:e4:e1:fa:7e:97:2e:09:fa:35:35:ad:dd:dc:
59:61:2a:8a:2f:ce:ff:d2:7d:4c:e3:91:ee:2f:2b:
06:87:d6:e6:d0:18:59:db:0e:95:43:54:d1:c1:64:
7a:96:c4:76:bd:d3:78:be:44:ef:0c:19:ea:d1:ef:
de:aa:c2:05:6f:6f:9c:45:53:a9:0c:9b:c5:5e:38:
65:a4:ef:1f:2e:38:d6:b8:da:53:3c:d7:d2:fd:62:
17:f2:1b:8f:20:a5:3e:d2:e0:50:cb:93:1d:b2:e7:
73:18:da:0c:55:17:98:6e:fd:16:32:4e:43:8c:23:
d3:af:21:8d:9d:5a:57:16:a3:98:57:26:7f:26:3a:
64:c1:29:3f:99:68:d3:ba:4f:54:52:87:08:16:d4:
74:1f:79:39:f5:4f:3a:1f:8d:6e:25:68:63:95:32:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:EA:36:7B:07:CC:36:96:C4:94:21:82:2F:10:BD:C2:12:32:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_F7qNnsHzDaWxJQhgi8QvcISMsE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:79:dd:0e:45:d4:0e:b4:9e:5a:06:4a:b5:0e:fa:80:c6:52:
b9:54:1f:05:69:46:4f:e3:4d:1b:0a:dd:42:9f:f3:45:6d:6f:
d0:b9:06:28:c0:1d:01:05:a3:5d:55:2e:d7:2c:a3:aa:64:6e:
f9:9b:a9:f7:55:5b:83:81:79:a5:9e:97:d3:8c:0c:47:db:be:
47:ef:2f:f3:8a:b3:01:b6:9d:ae:41:ce:85:34:47:97:52:6c:
de:c4:86:c0:66:36:44:49:51:98:c3:0d:bc:ef:cb:e1:49:f7:
4e:d4:bf:0a:3c:35:d9:86:41:b6:c0:8f:63:34:a5:e2:66:ce:
5c:ff:ba:32:ea:95:1c:da:ea:99:bc:8a:c9:50:ec:e3:f8:9a:
21:52:93:5b:b8:6e:f4:9d:72:76:3b:96:0a:fa:fd:1c:fa:5f:
ea:fd:31:fe:2c:38:38:ba:50:9f:8c:ae:9f:34:1b:10:cb:38:
10:3f:47:03:66:9e:dc:d6:77:b4:64:6d:82:a5:30:8b:59:e8:
86:9f:f9:8b:f1:1a:a5:a6:15:d2:78:47:8f:93:ec:40:eb:37:
e1:6d:c1:73:57:55:ad:06:41:d0:a3:dc:fd:69:72:49:a5:2c:
d0:3d:33:65:99:65:a0:30:ad:f7:0e:2b:9c:91:64:10:f9:4f:
96:12:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org