Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ah9xPpvJrHX7zDeVXUEERj7tDV8.roa
File: ah9xPpvJrHX7zDeVXUEERj7tDV8.roa (raw, json)
Hash identifier: mM81hzbzLVUPepbbwKITTDHUbvq7fGelrLPtyPE3bys=
Subject key identifier: 6A:1F:71:3E:9B:C9:AC:75:FB:CC:37:95:5D:41:04:46:3E:ED:0D:5F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5306
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ah9xPpvJrHX7zDeVXUEERj7tDV8.roa
Signing time: Thu 09 May 2024 06:53:57 +0000
ROA not before: Thu 09 May 2024 06:53:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21254 (0x5306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 06:53:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A1F713E9BC9AC75FBCC37955D4104463EED0D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:5b:44:2e:6d:5e:85:e2:44:21:03:fb:7e:
9d:d6:e6:55:b8:ee:b2:76:e0:6a:a6:e5:fb:da:ad:
ea:e9:8c:18:26:fe:4c:bd:ff:d9:6a:e7:8f:f0:0f:
d6:52:81:c2:a6:96:45:ba:af:3c:ec:52:32:91:61:
f1:a0:b9:0e:e6:46:3f:71:4c:17:45:df:3a:5f:40:
b2:d9:e8:d5:7d:47:70:40:cf:ae:6b:62:cd:9f:69:
99:14:80:d7:a8:b1:fd:c2:3f:2f:a8:78:14:df:4a:
4a:c4:29:36:91:e5:1f:ac:02:ae:a1:d5:85:43:0d:
94:83:8c:c2:1f:e3:8b:3e:a7:be:ad:bf:c7:02:d8:
d6:5a:20:d6:25:ac:48:54:4a:86:7b:7a:b7:a2:64:
10:e3:01:5e:14:91:c0:13:84:c5:b3:8d:ac:27:01:
41:db:8b:5c:e4:4c:dd:29:d9:a1:79:f7:30:2b:d5:
7c:c0:64:c2:e9:e6:d0:14:1b:60:b8:92:61:ab:a0:
04:b3:c4:2e:b3:2b:1f:f9:d4:26:3a:97:d8:d5:de:
87:ce:b1:fd:b0:b4:18:a6:53:43:f7:fd:5e:df:1a:
18:e9:37:82:7d:e3:3f:39:31:e9:80:b8:70:95:84:
6a:5f:66:1e:61:cf:cb:62:fa:ec:ba:73:af:9f:f8:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:71:3E:9B:C9:AC:75:FB:CC:37:95:5D:41:04:46:3E:ED:0D:5F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ah9xPpvJrHX7zDeVXUEERj7tDV8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:55:75:f6:63:94:ef:e2:9d:f5:2c:4b:1b:89:b8:c4:8c:80:
35:7a:88:b2:b5:a2:4c:4a:96:1b:3a:94:ee:6c:a4:da:14:bf:
86:d9:46:21:6b:6b:a6:fc:7d:5a:5a:98:f2:ed:73:84:13:b5:
0a:fb:50:8b:96:45:4d:4f:c5:09:ee:08:6e:fa:a5:f2:c8:13:
54:30:31:c4:be:c2:fd:5a:b8:ba:1d:cf:d4:7d:01:ea:67:eb:
a4:f2:7f:75:1f:08:5d:6b:4c:87:8f:99:a2:ca:b8:ad:40:13:
2f:41:ae:51:d7:57:93:90:30:c2:02:79:03:dc:c5:a4:bf:9b:
2b:d0:1e:4d:87:34:52:41:6b:88:9b:37:78:c6:8c:7e:a6:ab:
cd:83:0c:d5:d3:46:66:05:1c:36:24:9d:62:47:0f:0e:46:03:
b5:fc:39:da:8b:6d:a3:34:8c:ed:e5:2d:79:24:f5:20:69:f0:
5f:2e:07:f9:4d:8e:ca:9e:f1:4b:eb:e0:72:84:85:5a:c1:97:
7d:62:b3:ec:9e:b1:43:d4:71:37:3f:0b:66:e0:b5:53:13:e9:
54:a3:35:44:4b:b3:7b:b6:e7:6f:0a:14:92:31:f3:2a:0b:70:
2f:31:ce:f4:ee:10:3e:42:8b:31:66:55:38:bb:9d:00:d0:b7:
4d:e6:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:34 2024 by rpki-client on console-fra.rpki-client.org