Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cvJbKwlAsSNbTi0NA86xDuYidhE.roa
File: cvJbKwlAsSNbTi0NA86xDuYidhE.roa (raw, json)
Hash identifier: Km0EtE1LQRvBFvEXZ9qjl8MQDCygXiQPXDkZEpH34EI=
Subject key identifier: 72:F2:5B:2B:09:40:B1:23:5B:4E:2D:0D:03:CE:B1:0E:E6:22:76:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3972
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cvJbKwlAsSNbTi0NA86xDuYidhE.roa
Signing time: Fri 05 Apr 2024 04:22:53 +0000
ROA not before: Fri 05 Apr 2024 04:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14706 (0x3972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 04:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72F25B2B0940B1235B4E2D0D03CEB10EE6227611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:5c:50:80:90:c8:fc:cd:bf:c2:bb:2f:a8:
47:69:ca:4f:fc:b6:53:5b:88:f7:e3:bd:37:68:d6:
5a:89:d1:86:a2:91:58:b9:72:50:64:4f:34:2b:3f:
1c:57:f8:61:f8:a0:46:8c:e8:65:97:4e:7d:84:89:
7f:2f:cc:67:c0:9b:88:d2:39:10:a3:1a:35:72:5b:
a8:66:a4:91:91:b4:b1:6d:bb:86:ac:97:24:8c:10:
92:dd:03:b8:fe:89:30:ab:8b:df:08:f0:fd:e9:47:
d6:cb:ca:e1:25:9c:93:35:29:31:40:00:79:6c:fe:
3e:7a:fe:ba:42:ba:0f:62:77:e0:24:08:f5:4e:3e:
7e:76:8c:ae:5c:c7:91:59:27:e8:51:38:df:aa:b1:
55:ac:40:8f:5c:b5:ac:79:f7:4b:51:4c:3e:6b:1d:
f1:bf:99:4c:f2:05:1e:84:34:cc:cd:d5:75:65:7b:
3e:2c:f0:31:60:bd:cf:0a:e1:5b:f8:0a:67:01:69:
ee:0c:16:b7:88:f5:3b:fb:81:a3:4f:68:90:6d:a0:
44:1f:13:d4:1e:5d:4d:fd:0f:22:49:68:59:f0:93:
a2:24:15:d1:ed:d1:54:00:ad:39:96:9f:58:c1:8a:
d3:54:5f:29:d3:92:64:9e:9d:d6:55:72:ea:08:a3:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:5B:2B:09:40:B1:23:5B:4E:2D:0D:03:CE:B1:0E:E6:22:76:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cvJbKwlAsSNbTi0NA86xDuYidhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:05:c3:b6:d8:67:d6:e3:b0:ee:0a:86:54:0a:01:a7:89:2e:
d3:ad:31:09:ec:dd:aa:7b:d0:3c:2f:0d:d3:ca:6a:8a:ea:5b:
06:45:08:8f:f4:c9:37:fd:04:73:6c:cd:d6:a5:bb:4b:36:54:
63:1a:88:18:47:a2:c4:fc:04:e5:9d:af:87:45:38:c5:34:25:
86:95:cf:03:b2:17:da:e0:a0:9b:72:3c:13:aa:02:09:14:6a:
2d:5b:21:f1:9f:5b:1f:df:59:ce:14:94:99:7e:53:5a:3e:7b:
92:94:3d:ef:cc:03:ec:59:cc:b0:17:b4:07:de:78:73:59:6c:
0a:51:92:1e:a3:80:f7:29:6c:46:db:d7:c1:33:5a:60:60:dd:
a8:ef:eb:84:07:c7:3e:3c:1c:64:ba:98:32:a5:1b:e1:6b:71:
17:01:a7:f4:5d:75:ee:77:c5:5a:a8:93:3d:bd:8e:dd:5a:73:
da:cb:15:67:f2:e9:4a:5e:39:19:e0:79:a6:8b:57:c8:31:de:
21:b2:93:4f:f2:8e:3a:fc:e9:ad:74:f7:97:20:b7:d6:1d:12:
8e:49:ba:fd:f6:75:55:3b:6c:ff:f8:22:9f:52:20:72:dd:a8:
de:55:ce:6d:7e:9f:4e:aa:62:04:79:bf:73:e7:c6:f0:1c:ea:
51:85:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org