Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/coAu89GFdVjKw5JgkUA668na5so.roa
File: coAu89GFdVjKw5JgkUA668na5so.roa (raw, json)
Hash identifier: 90TeKa1OGmH64hW+e+GquQq+ETzoAzZZcfL3CZJWSkY=
Subject key identifier: 72:80:2E:F3:D1:85:75:58:CA:C3:92:60:91:40:3A:EB:C9:DA:E6:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/coAu89GFdVjKw5JgkUA668na5so.roa
Signing time: Sat 06 Apr 2024 19:22:29 +0000
ROA not before: Sat 06 Apr 2024 19:22:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15018 (0x3aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 19:22:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72802EF3D1857558CAC3926091403AEBC9DAE6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:4a:33:c2:0b:ec:46:cd:c3:10:a3:53:e0:
3f:d9:83:0b:1b:a5:8c:a6:37:8c:72:cb:8c:80:87:
43:b9:82:0c:48:0c:e0:9f:f8:ce:c2:40:77:61:96:
86:5f:8d:74:96:20:67:a5:49:6b:91:55:f0:2d:14:
81:b8:b5:cb:00:33:b9:25:e7:3d:79:aa:a0:b4:46:
17:8d:8c:5b:b8:31:d3:ed:9f:f4:f7:7e:49:39:5d:
ac:d7:ef:b5:6b:6f:27:b4:a5:84:33:7f:46:bd:a3:
fe:ec:b8:3b:70:43:d5:6a:33:43:e7:a5:9c:dc:a2:
73:9a:26:64:6e:6e:e1:da:b7:4b:e4:78:4c:15:63:
88:4b:b2:61:f2:d3:89:a6:bc:fb:ce:bb:58:66:27:
f6:bb:45:b0:7e:f4:f9:ff:77:4a:a1:69:ca:9c:3b:
f1:de:46:d7:80:a5:7e:92:6f:17:da:dd:6a:9d:45:
51:81:5f:b9:d1:15:88:4e:08:ed:41:b9:ae:ab:74:
3f:2c:8d:5d:74:b9:96:9b:e1:03:a0:90:93:aa:c2:
58:6c:16:e0:2d:59:2c:ec:5d:34:ee:ef:1b:74:79:
3f:e2:47:93:4c:3f:96:f5:56:cc:40:f1:d0:3f:9f:
ad:a9:4a:e7:69:55:cd:de:63:f5:64:ee:c0:12:71:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:2E:F3:D1:85:75:58:CA:C3:92:60:91:40:3A:EB:C9:DA:E6:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/coAu89GFdVjKw5JgkUA668na5so.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:85:b1:24:76:e6:dc:af:2d:31:a5:e1:4f:65:35:3a:b7:65:
ad:73:3a:f9:02:1b:b8:b4:18:94:cd:c7:54:96:cf:0c:06:51:
c4:8e:1c:5a:40:51:bf:d1:f9:30:6d:49:bf:38:5f:f0:e0:d7:
3b:90:2a:28:78:3d:82:66:a5:39:6f:09:a6:8e:1f:15:5f:16:
d8:18:32:66:1a:57:36:b2:df:c1:87:25:6a:cd:47:ea:64:99:
6c:b5:bf:d5:cb:b8:c9:c3:2f:1f:78:3c:c9:e2:f8:79:c6:5c:
db:af:80:ef:19:5d:af:46:15:0d:e6:23:d8:dd:1c:f8:b7:a9:
92:3b:98:90:c5:9c:d6:3f:fc:c3:fe:8e:68:8b:5b:c9:b6:3f:
ac:fe:a2:ea:b7:a8:ca:de:83:22:16:ea:32:53:bf:3b:a5:db:
e6:16:e4:b5:3b:0a:44:60:ff:4e:71:b3:76:53:f9:e8:89:ae:
ce:3f:4c:f1:02:11:6d:cd:27:99:f9:de:60:c5:e1:2b:6b:d2:
e9:fe:f7:9a:84:22:fd:f6:c9:be:7a:bd:f1:7e:f6:c9:54:06:
59:7e:b7:2c:00:91:48:22:a9:78:f0:d7:18:68:b2:7b:f1:61:
12:a0:91:66:98:99:ee:38:08:d2:21:79:eb:a7:fb:3b:7b:1b:
05:bf:41:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org