Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eJnP-tGuH5z-TdLJ35MerrJsqGQ.roa
File: eJnP-tGuH5z-TdLJ35MerrJsqGQ.roa (raw, json)
Hash identifier: RaUnpn9f0hMeLuaH45z1ykJXY2WT19Sb3hDn2zOfxDw=
Subject key identifier: 78:99:CF:FA:D1:AE:1F:9C:FE:4D:D2:C9:DF:93:1E:AE:B2:6C:A8:64
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4332
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eJnP-tGuH5z-TdLJ35MerrJsqGQ.roa
Signing time: Thu 18 Apr 2024 04:22:58 +0000
ROA not before: Thu 18 Apr 2024 04:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17202 (0x4332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 04:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7899CFFAD1AE1F9CFE4DD2C9DF931EAEB26CA864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:f4:30:9c:cd:8a:bc:00:4e:99:b0:6d:3a:
20:1d:d8:63:f5:0f:77:5b:9b:30:b4:aa:55:bc:05:
ad:4f:e6:af:16:58:1d:df:d8:ae:18:31:69:64:fa:
27:ae:2f:2e:18:18:27:29:ea:02:29:f4:da:4b:f9:
fd:9d:f0:8b:17:5c:ac:41:cb:fe:42:d8:ed:93:40:
00:70:c3:ed:6a:5c:68:07:cf:44:94:44:1b:5a:3a:
e0:53:9d:73:a5:3a:7d:6f:93:97:46:c2:d0:02:36:
59:23:1f:af:53:18:bc:f6:07:39:fc:9e:eb:46:74:
45:cc:4f:79:fc:b0:4c:e6:96:30:6a:b2:f1:45:f5:
15:fe:fe:4d:9b:b9:b5:fc:3f:27:65:e8:ae:4d:1a:
00:c0:54:94:66:e1:57:f1:f5:fd:d8:e8:51:71:ba:
54:64:ba:94:d8:b6:f5:ca:f6:ec:b0:7a:6b:24:68:
41:86:ca:e8:a9:a6:40:bd:52:8f:4f:ef:11:fc:d0:
75:8a:78:65:d5:2f:30:73:1b:5c:86:c7:4b:33:44:
bd:5f:f5:0a:29:24:92:09:0b:c1:bd:e2:e9:00:6e:
82:74:ae:3c:fa:d4:9e:1d:41:74:30:f3:b0:54:8e:
a3:b6:b4:5d:7a:8c:70:45:85:67:61:66:00:fb:6a:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:CF:FA:D1:AE:1F:9C:FE:4D:D2:C9:DF:93:1E:AE:B2:6C:A8:64
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eJnP-tGuH5z-TdLJ35MerrJsqGQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:88:66:c3:4b:5c:bf:41:34:dc:1a:c4:67:7d:57:f2:6d:0f:
20:cd:a1:bb:ff:55:aa:f6:2d:20:e4:66:49:0a:fd:c6:b6:6c:
8b:01:2b:b6:5e:88:f8:ab:1c:f2:47:7d:e5:00:20:a7:bc:ec:
49:34:71:c7:ac:33:1b:43:69:aa:a7:5b:3b:ce:ba:97:61:04:
54:cf:56:ef:8f:f3:07:4a:fc:b1:4f:0d:7c:ff:33:41:ba:e3:
18:32:40:d6:a3:db:f3:7c:a5:86:23:54:6f:cf:67:7b:bb:c2:
d1:47:94:4d:a9:ad:85:0c:2e:3a:76:0e:b2:91:87:60:f1:b4:
dc:d3:b9:a2:19:fe:c6:e9:0a:a4:fc:e3:9e:0e:1a:de:54:a7:
d9:2e:eb:6c:1b:73:91:03:9c:46:26:09:64:8d:cb:ba:7b:63:
de:51:cb:e8:f7:7f:63:56:a3:74:ae:69:1b:11:8d:b5:43:e3:
f6:2a:ea:b1:e4:fe:17:01:f6:c4:3e:6d:7f:2e:07:57:e1:35:
d9:0f:17:99:d6:5b:2e:ad:27:12:cd:c9:c1:59:59:cf:fa:ea:
21:cf:58:6c:74:0d:64:ef:b2:66:81:74:11:d8:e0:43:70:12:
98:1b:4c:84:42:cb:e9:29:a1:02:b6:e7:22:46:2f:a5:a6:d6:
00:0e:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:58 2024 by rpki-client on console-ams.rpki-client.org