Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d_wjrx8UlEdNRcPJ12_df-WMZhY.roa
File: d_wjrx8UlEdNRcPJ12_df-WMZhY.roa (raw, json)
Hash identifier: ScvXRhMyPXzy3vUikmk9x9FGOjKFHGDmH1cQCQbMAgY=
Subject key identifier: 77:FC:23:AF:1F:14:94:47:4D:45:C3:C9:D7:6F:DD:7F:E5:8C:66:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d_wjrx8UlEdNRcPJ12_df-WMZhY.roa
Signing time: Mon 01 Apr 2024 13:52:15 +0000
ROA not before: Mon 01 Apr 2024 13:52:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14014 (0x36be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 13:52:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=77FC23AF1F1494474D45C3C9D76FDD7FE58C6616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:96:f7:89:25:e2:e0:b8:12:42:2b:62:31:
b8:94:63:29:cb:22:12:12:1a:b4:27:dc:83:d5:a1:
9b:94:08:c0:48:25:e7:f0:ae:a5:89:9c:8b:bd:68:
86:90:d0:5a:bf:d9:be:d0:3e:dc:26:1d:13:51:50:
8f:e8:33:d7:7b:cd:90:69:c5:d5:7b:6c:88:cb:44:
b6:c1:63:6c:d0:48:04:45:a4:81:8f:ae:68:a4:83:
66:e3:a8:21:cf:ca:51:25:53:81:51:4b:c5:8b:7b:
85:08:a0:8c:a9:d1:20:44:cd:21:1a:13:ed:f8:a3:
bf:62:74:8b:32:0b:d4:b4:c8:5f:c4:1b:d7:0e:18:
a9:65:9e:66:39:e4:9d:b1:aa:8f:dd:bb:1c:78:c3:
52:0b:08:a5:80:26:c4:47:f7:fd:41:1c:eb:c1:96:
c1:ef:5e:83:c6:1c:47:95:13:f1:ad:cb:2d:fc:d4:
35:9b:3d:43:80:fa:77:6f:02:ca:26:f4:ef:c2:4b:
20:d8:38:03:39:7a:6d:25:ef:7b:df:47:89:2e:75:
62:d6:af:f4:eb:cc:8d:a4:5a:b6:be:0b:72:11:d2:
20:b7:39:f7:cd:d8:e3:cb:42:7c:b0:3a:cd:c4:45:
0e:55:35:b8:84:7e:2e:6e:02:90:17:8a:bb:c2:55:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:23:AF:1F:14:94:47:4D:45:C3:C9:D7:6F:DD:7F:E5:8C:66:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d_wjrx8UlEdNRcPJ12_df-WMZhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:20:f4:4b:86:ad:00:b3:8d:48:6c:5e:8d:41:6d:4d:73:7a:
9a:cf:7a:f3:30:b7:8d:50:f2:2e:d4:92:e9:24:20:6c:29:ec:
b5:0e:ba:02:ac:2b:5b:8a:bc:8b:e5:bc:f5:a2:dc:d1:6b:a2:
c1:a9:38:10:1e:82:11:22:64:34:6e:f3:e1:de:79:04:da:8b:
e7:e9:96:e7:77:dc:dc:ed:cf:3b:84:96:3a:83:6e:1e:bc:c1:
41:33:df:82:da:d3:75:73:ff:39:cf:a3:18:59:8e:8d:ca:ea:
1c:6a:1d:ab:39:52:3c:76:11:07:23:b6:bb:e7:8d:d0:78:af:
af:1f:00:96:9e:c6:75:e1:b4:be:b9:2b:6d:57:18:cd:53:14:
21:13:49:88:a2:9e:4d:b1:9f:4a:bf:5b:5d:c7:15:bf:39:3a:
86:3f:56:76:92:ce:59:f9:4b:81:a8:54:05:05:aa:70:5f:8c:
1f:37:d3:52:99:81:a6:7c:bf:81:3c:a5:e3:2e:b9:ad:98:db:
0d:11:08:83:db:33:14:5e:d7:ce:bd:03:64:37:e9:73:04:32:
b2:26:97:0f:87:96:3e:76:eb:26:4b:56:ba:09:5c:e2:c0:e5:
23:7e:2f:40:37:c3:49:3d:dc:92:27:e0:b5:18:8e:f0:5c:f8:
46:14:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:57 2024 by rpki-client on console-ams.rpki-client.org