Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/a-YMTj-cZJjoWzkg9X4y6y0mGY4.roa
File: a-YMTj-cZJjoWzkg9X4y6y0mGY4.roa (raw, json)
Hash identifier: YuATzjn+yOlnUBx60ey3AK2ncZKkPKG6STQ+6F92H2w=
Subject key identifier: 6B:E6:0C:4E:3F:9C:64:98:E8:5B:39:20:F5:7E:32:EB:2D:26:19:8E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 504E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a-YMTj-cZJjoWzkg9X4y6y0mGY4.roa
Signing time: Sun 05 May 2024 15:53:50 +0000
ROA not before: Sun 05 May 2024 15:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20558 (0x504e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 15:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6BE60C4E3F9C6498E85B3920F57E32EB2D26198E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:29:4c:7b:77:eb:d7:61:15:b8:6b:20:63:
c8:d3:62:7c:be:e6:c4:17:2e:9d:0a:fd:c2:6c:8c:
13:74:f3:df:88:c7:84:60:e3:71:55:bb:8d:fc:81:
7c:da:28:57:ec:1c:4e:9e:65:b6:ac:33:0a:aa:6e:
99:d7:39:50:a0:8e:54:ae:f7:60:02:d0:b0:50:eb:
9b:d8:c7:ef:21:b5:6d:e7:29:e3:0f:6f:5d:06:dc:
22:d4:24:c0:83:00:33:a8:bf:0a:48:6c:21:2d:83:
2e:8d:be:30:40:67:34:2c:85:da:81:a0:05:6a:76:
3f:d9:fc:4b:79:7a:89:93:2d:43:1a:9e:ef:e2:3a:
f4:84:ef:20:c2:6b:c9:2f:86:d8:0c:81:81:bc:1b:
8d:2d:da:11:b7:01:38:e1:bb:fd:89:92:e2:f2:f0:
47:02:42:15:26:af:1c:6a:04:db:b7:62:4c:71:be:
6e:83:5b:be:54:47:53:a3:06:5c:46:1b:fc:80:01:
25:2e:df:ef:ed:01:25:3a:22:1b:2f:5e:58:60:98:
4c:dc:d8:82:ee:04:35:58:69:2a:82:c4:fa:cc:f3:
3c:13:9e:d7:e2:a2:0f:40:b8:d0:77:00:03:7f:d9:
c0:cc:9e:03:47:e5:be:b4:48:15:15:84:b9:bf:f1:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E6:0C:4E:3F:9C:64:98:E8:5B:39:20:F5:7E:32:EB:2D:26:19:8E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a-YMTj-cZJjoWzkg9X4y6y0mGY4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:75:42:56:cb:ff:fb:ca:18:08:b9:b7:96:ab:68:73:ad:fc:
38:ef:a6:e7:7e:51:4d:ef:ef:d8:2d:ae:57:c6:4d:1f:bf:35:
8a:08:1f:a0:86:17:ee:02:ff:c7:c1:2e:4c:6a:da:6f:49:7a:
78:68:b3:f4:bf:d3:13:79:e1:a8:4c:89:27:52:94:ee:86:59:
f4:ca:15:b8:09:93:df:5a:55:8d:98:57:4c:b2:b9:57:93:c1:
be:c0:fb:79:8a:0d:68:34:1f:76:ab:1f:56:11:54:23:49:7b:
2b:f7:e1:c1:6f:74:5a:b8:af:30:a7:64:7b:ea:1d:68:ec:98:
58:b6:64:8a:a9:91:54:3b:71:d3:36:07:9d:2f:34:30:54:6c:
b6:81:09:11:bf:6c:8c:32:cd:be:1f:80:11:18:ae:31:ad:fb:
f9:c6:02:80:e8:67:de:d3:66:f2:9e:b3:6b:9d:5a:2b:01:99:
06:26:f1:5a:2c:f0:31:d9:35:e2:b6:14:cf:09:3d:73:7b:92:
43:f6:c5:02:90:4c:d6:57:f4:55:30:82:d9:13:ad:2b:70:f8:
eb:cf:86:c7:fa:eb:db:67:e5:ca:47:02:81:af:85:c4:8e:eb:
0a:be:10:0c:99:91:a2:25:4f:90:7b:e0:8e:5e:98:d0:cd:d9:
bf:d4:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:53 2024 by rpki-client on console-ams.rpki-client.org