Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aIdVJ9xo6YZqH9t1qZMGQFFHP_4.roa
File: aIdVJ9xo6YZqH9t1qZMGQFFHP_4.roa (raw, json)
Hash identifier: DvNmtrnxFZUHxUqRa/ZzKmpAizp+lN3WOu9XP3qfKDM=
Subject key identifier: 68:87:55:27:DC:68:E9:86:6A:1F:DB:75:A9:93:06:40:51:47:3F:FE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B12
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aIdVJ9xo6YZqH9t1qZMGQFFHP_4.roa
Signing time: Sun 07 Apr 2024 08:22:30 +0000
ROA not before: Sun 07 Apr 2024 08:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15122 (0x3b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 08:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=68875527DC68E9866A1FDB75A993064051473FFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:77:05:c0:8d:42:a1:b3:67:31:67:72:89:
77:17:ea:82:20:42:c4:17:11:80:fd:bd:8c:e4:86:
10:e3:f8:67:3a:1e:54:3d:5a:8e:11:db:ff:d2:aa:
3c:f2:c1:be:d5:38:75:5d:f1:2c:b9:e5:33:18:3d:
88:f8:ff:b7:82:29:6e:65:69:87:78:2a:0a:3f:db:
e5:3b:89:ca:13:e0:8c:b4:49:31:44:0e:c3:1f:44:
33:c5:92:ca:79:5e:e6:a3:ac:c6:d7:99:cd:35:3d:
6f:75:f7:b0:3f:13:ba:01:d1:55:8e:89:cc:7c:ae:
93:40:bf:9a:d9:3b:b4:da:8d:e5:d0:da:57:0b:d0:
ef:36:eb:23:4a:43:fe:7e:53:2e:a7:0b:4d:6c:68:
ea:f9:64:a7:fe:21:64:b1:57:74:79:4c:8b:38:7a:
96:55:31:18:a6:bc:db:1d:20:f3:cd:8a:e3:5f:28:
7d:54:8b:b7:d5:75:dd:c8:d4:18:cc:9a:05:54:b9:
e5:e7:ce:8d:ad:02:2c:d6:30:5d:d1:73:0c:6f:52:
7a:f8:62:37:ff:7d:b4:a7:43:a9:c5:11:83:3b:8c:
0a:95:c2:3e:26:c0:5a:fc:9f:85:25:1e:11:11:3b:
8b:b4:78:6b:c9:05:26:d4:62:ff:41:82:dd:85:47:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:55:27:DC:68:E9:86:6A:1F:DB:75:A9:93:06:40:51:47:3F:FE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aIdVJ9xo6YZqH9t1qZMGQFFHP_4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:61:d2:38:78:39:b4:6c:c5:7d:74:f8:d2:ef:68:5e:cf:3e:
7b:02:00:aa:12:d4:e0:5a:72:1c:f5:ec:f2:cb:b2:cb:5c:d7:
91:a3:42:da:ab:d3:9d:46:cf:aa:b9:23:b7:53:5f:7b:d8:06:
c8:1c:b3:93:e4:de:b0:a1:03:00:7f:c5:cf:af:4e:a2:7a:a6:
19:ca:4e:55:ed:3b:0f:db:a4:e5:a2:f9:bb:db:72:cd:76:de:
f4:25:e4:9a:6d:e7:30:00:ee:38:5b:4f:ff:17:41:58:bf:73:
3e:f0:a3:19:dc:75:65:79:55:15:3d:08:d8:a2:cc:53:02:5c:
84:49:ee:8a:42:8d:e3:d3:c6:72:af:db:78:66:98:40:8c:be:
1c:98:d9:fb:9f:10:ff:5f:85:85:f3:09:0b:00:f5:68:4c:0b:
e9:88:73:ce:cd:0c:93:c2:58:17:1b:9a:f6:1d:2a:46:98:b1:
8a:8b:a8:86:81:2c:e9:39:9b:94:03:1b:7c:82:d3:34:a6:d4:
f0:41:8e:da:a9:92:7d:16:2d:4b:cd:57:13:6e:1d:c7:f3:97:
70:1e:be:41:d5:6d:fd:fb:69:3e:6d:6c:39:e6:cf:0e:dd:3c:
67:2f:2d:09:12:a9:56:95:6d:de:26:09:21:b4:95:dc:73:1e:
35:1d:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:34 2024 by rpki-client on console-fra.rpki-client.org