Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c-1cena28BIR5QlbSIDXRBioIpI.roa
File: c-1cena28BIR5QlbSIDXRBioIpI.roa (raw, json)
Hash identifier: 1k/ruBc59ilv5TWf0wFip1PaL1/wSmFmBOY67AG0T1A=
Subject key identifier: 73:ED:5C:7A:76:B6:F0:12:11:E5:09:5B:48:80:D7:44:18:A8:22:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52CE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c-1cena28BIR5QlbSIDXRBioIpI.roa
Signing time: Wed 08 May 2024 23:53:56 +0000
ROA not before: Wed 08 May 2024 23:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21198 (0x52ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 23:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73ED5C7A76B6F01211E5095B4880D74418A82292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:f3:57:22:b7:0d:b5:a0:8e:c3:f8:41:55:
16:f4:ee:9a:11:86:50:7f:0d:12:c6:b7:e4:92:a9:
94:96:37:23:40:fa:b4:76:3c:fa:82:5f:9a:ce:bf:
04:44:aa:8b:b9:10:a0:8d:e9:87:e9:d1:d9:76:68:
8c:91:13:2e:00:87:3d:48:74:5e:58:43:29:a6:94:
f3:be:d7:f0:ee:3a:30:b2:5f:29:42:c5:a2:8d:3b:
54:b3:c9:ae:a4:09:88:37:61:ec:74:28:00:f6:b0:
23:6c:38:2b:34:e8:cd:12:23:33:10:2c:d9:45:9a:
f5:5b:d3:2b:21:bc:ee:e9:c8:12:1a:a2:8c:32:26:
bb:49:72:2d:7f:9a:df:29:2a:a2:50:63:b5:66:dc:
e9:d9:23:33:5b:f6:f7:58:fc:b8:7b:66:82:d2:5f:
71:69:63:02:c3:0f:7e:a4:7c:3c:35:7e:77:32:97:
7e:2e:2a:32:4f:66:25:5f:44:01:bf:bc:4a:6a:c1:
5d:17:de:37:22:71:7e:8e:c2:b5:6c:5a:d5:95:11:
43:3a:92:22:dd:3a:ce:0a:31:27:07:8b:1f:7a:bf:
63:3a:e2:08:c4:76:10:69:ce:78:ca:66:a5:54:d1:
c2:d2:ed:e0:2b:92:08:63:73:69:08:6a:4d:e8:fa:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:5C:7A:76:B6:F0:12:11:E5:09:5B:48:80:D7:44:18:A8:22:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c-1cena28BIR5QlbSIDXRBioIpI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:2e:37:33:34:0d:f1:07:2f:2f:d9:00:ec:c8:cd:44:0b:a5:
1e:16:44:09:93:71:02:81:e3:ee:43:27:b9:3c:d5:42:b7:e5:
cf:e0:d8:e6:26:e7:b6:c6:83:fb:4b:46:19:22:54:25:5e:a9:
0f:6b:cb:c8:2e:76:7a:3f:0d:9e:42:16:99:8d:46:3c:6f:70:
e1:61:2c:66:4c:e6:2c:c2:5f:8d:4a:9c:65:fd:95:e1:34:b9:
04:6d:4f:1c:09:38:cb:d3:c2:dc:88:bc:14:17:d1:8f:3a:13:
af:52:39:d3:7b:1d:77:22:f8:15:a7:ad:48:c1:d2:26:1c:6a:
66:dd:0c:79:7e:8f:a7:4c:7f:35:b5:33:34:b9:af:30:18:22:
7c:db:79:c2:10:57:2b:86:1c:3b:20:49:5d:46:3b:2b:1d:9c:
a1:c3:1d:dc:3e:4e:f1:8f:e2:4d:a4:84:52:a0:03:e5:01:25:
d9:7c:a9:5e:0a:47:f7:c8:26:fb:d1:09:0e:c0:58:56:74:37:
f4:59:7f:75:79:d7:c0:8f:ad:d9:43:02:e0:38:b8:5a:9b:c7:
c6:97:fb:6d:c0:69:85:54:91:8b:e0:c9:2e:da:ff:a7:30:0d:
7d:e5:fe:a0:38:9f:a6:54:0c:55:2e:2a:61:58:bf:5f:f9:cb:
4b:70:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org