Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bgbPn1qEyvTuLElJpvR5RxBcP_A.roa
File: bgbPn1qEyvTuLElJpvR5RxBcP_A.roa (raw, json)
Hash identifier: 6rFqC95FGYgYz7CnYhvnJuq9OZ0+Ad051fGW+0yUwsM=
Subject key identifier: 6E:06:CF:9F:5A:84:CA:F4:EE:2C:49:49:A6:F4:79:47:10:5C:3F:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3516
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bgbPn1qEyvTuLElJpvR5RxBcP_A.roa
Signing time: Sat 30 Mar 2024 08:52:08 +0000
ROA not before: Sat 30 Mar 2024 08:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590 (0x3516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 08:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6E06CF9F5A84CAF4EE2C4949A6F47947105C3FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:03:7c:de:90:f8:fa:44:ba:0e:d3:59:cc:
cc:5d:2c:72:85:2d:89:ae:ea:42:60:e2:d4:aa:09:
3f:db:a9:5d:15:13:fb:92:36:0c:3a:11:93:74:11:
04:ac:be:d4:27:da:2f:3d:72:ce:16:47:51:9a:81:
27:f1:d0:51:40:34:13:97:a7:fc:b1:d6:a9:b1:89:
fe:a0:4f:8f:ea:ba:c1:d5:4a:01:a9:fc:d5:9e:ba:
60:1a:21:29:61:90:65:f3:bd:11:51:5f:1f:3d:7a:
d8:ec:55:aa:e4:fa:0d:69:2e:fb:1b:98:0e:ca:5c:
35:f9:69:cb:fb:95:98:a6:20:d8:5b:56:9e:1e:23:
d6:e1:d7:2f:fa:41:26:21:69:88:33:4c:8b:10:90:
77:38:54:95:4c:9b:3a:e5:0d:a7:9b:68:d2:c4:7e:
1a:5a:22:9f:8d:7a:2e:c5:30:ad:62:f7:7e:d2:23:
d7:b9:c9:db:cc:ab:f6:67:0a:1f:36:23:e7:d3:f0:
f0:67:95:d0:3a:cf:63:e1:29:7f:6a:dd:1b:3d:42:
03:28:2e:01:05:b8:8f:b2:61:08:04:7e:d3:bf:70:
2c:8a:f0:27:0b:86:b3:ca:16:ed:f3:1e:71:46:24:
99:b2:0d:a4:c7:db:5f:d3:17:cf:7e:4e:25:15:d0:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:CF:9F:5A:84:CA:F4:EE:2C:49:49:A6:F4:79:47:10:5C:3F:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bgbPn1qEyvTuLElJpvR5RxBcP_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:2f:fa:e4:ed:e9:27:2d:8e:35:ec:a0:e4:d7:54:06:ea:b4:
6c:36:14:24:59:3b:60:a7:ce:ff:cd:b0:1c:28:e4:f9:bd:64:
ce:81:7c:42:dd:57:e0:e0:86:e9:d7:4d:81:a7:9a:c5:c4:e4:
f9:4c:e4:07:a4:47:39:ee:fe:40:53:02:43:b7:dd:88:82:a8:
1d:ee:63:16:8c:5f:7d:89:de:27:af:52:4e:a0:5c:54:85:84:
49:09:7e:2b:f9:11:16:6e:a2:2f:0e:70:cd:17:ee:be:22:70:
7c:34:c3:4e:44:0d:a5:84:3c:c1:9b:fd:1f:d0:c5:da:6d:a0:
1a:a1:a4:76:1e:4d:d9:0c:0f:ad:c9:eb:b0:8b:3e:1e:5b:18:
8c:4a:d9:8a:85:19:51:a7:92:cd:f1:9a:0a:00:f2:d4:e5:06:
fe:44:cb:a6:b5:c4:bd:02:78:3b:c2:6c:42:a0:c3:02:09:fe:
16:40:58:a4:23:e9:88:94:31:c1:b2:c4:92:34:04:f8:2b:27:
04:6d:f5:61:ec:17:3c:79:2a:76:95:91:ea:e2:e7:f7:97:a6:
53:76:97:f1:e0:2a:f3:62:26:f3:9d:82:14:c3:cf:8d:a7:fc:
35:b7:8b:fe:ad:6b:e0:c4:93:b9:ae:09:6a:19:69:5f:da:b3:
88:6f:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org