Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eYPWxLXWJUYgrYAD_bdIKgHyTlQ.roa
File: eYPWxLXWJUYgrYAD_bdIKgHyTlQ.roa (raw, json)
Hash identifier: 7f/2LH7CJPumg1/l4/QZTWod5G0PHB01DJtZFUotYe0=
Subject key identifier: 79:83:D6:C4:B5:D6:25:46:20:AD:80:03:FD:B7:48:2A:01:F2:4E:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FA2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eYPWxLXWJUYgrYAD_bdIKgHyTlQ.roa
Signing time: Sat 13 Apr 2024 10:22:55 +0000
ROA not before: Sat 13 Apr 2024 10:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16290 (0x3fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 10:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7983D6C4B5D6254620AD8003FDB7482A01F24E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4c:1a:9c:93:2d:2c:aa:9c:be:e3:0a:5e:62:
3f:95:fd:6c:14:d2:d7:bc:f8:b2:8c:c5:5c:60:59:
af:9e:cd:89:85:24:2c:6c:2c:9c:78:ff:39:6c:27:
1c:62:c2:d0:d0:29:d4:ac:26:20:46:1f:83:a3:e3:
d7:32:11:42:38:1b:e9:97:09:5a:94:93:cb:2e:e1:
07:bf:eb:78:6b:57:02:d2:c2:d5:54:76:2d:ef:c1:
7a:95:fe:eb:5a:d5:cd:9d:9e:14:84:d2:c7:77:2f:
33:b0:18:39:9b:53:54:f0:e5:41:ce:43:6c:2d:74:
d1:d4:d5:a7:64:da:3d:c7:6c:41:a2:b9:ae:d2:59:
fe:80:51:2e:69:6b:f0:e5:af:7b:85:4d:ce:44:54:
73:8d:d6:77:08:dc:08:dc:53:a9:9a:4c:5c:fe:fe:
d3:21:8f:56:5e:3d:e2:f6:1c:74:f6:18:65:01:67:
11:5e:08:82:30:4e:4d:e9:de:f2:42:55:f7:89:2e:
22:6c:d6:cd:ab:66:fc:e2:73:03:3e:94:a9:11:ba:
5f:6d:32:d8:29:a3:ee:83:97:13:83:da:30:18:7c:
6b:9d:e5:be:ab:15:41:be:de:e7:b0:23:d5:eb:aa:
30:8c:bf:20:7a:00:15:74:94:2d:5f:01:9d:f5:94:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:D6:C4:B5:D6:25:46:20:AD:80:03:FD:B7:48:2A:01:F2:4E:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eYPWxLXWJUYgrYAD_bdIKgHyTlQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:8a:f7:e3:10:8f:99:24:e4:a9:57:c7:0a:cd:24:2f:d9:9f:
49:99:cb:5e:9e:24:0d:e5:b0:10:2f:cb:5a:4a:15:b7:bd:96:
f7:99:37:3b:1a:ad:2c:1a:04:e7:45:ba:35:7e:4d:65:d3:fd:
16:2e:5f:cf:31:20:73:01:a8:34:ac:dc:9e:2b:ea:41:45:a8:
c8:a0:60:f8:de:cf:38:63:70:c3:da:d5:8a:ca:6e:c0:df:91:
60:bd:03:31:e1:56:ef:c8:7f:33:ce:e2:b5:78:39:59:54:75:
32:81:ae:5e:35:5e:b5:d2:b2:61:f9:50:01:61:b4:95:51:b9:
4b:92:4a:df:09:47:73:8b:f6:88:98:47:4e:dd:a2:40:b5:a2:
80:32:4e:62:d4:03:c4:02:3e:c4:6f:28:51:70:ec:0e:2f:8c:
09:67:19:e3:1b:da:ef:bd:a2:e2:5b:0e:2d:c4:41:13:94:e8:
97:72:77:19:95:24:ee:b6:dc:ab:5f:d5:f3:b1:e5:35:2b:f6:
9c:58:30:07:d4:d2:dc:87:20:d2:ce:00:82:c8:d6:d1:4e:4f:
91:4b:c5:e2:c1:c5:bb:20:da:0d:f8:cb:95:87:06:18:f3:ad:
63:d0:67:02:74:68:34:e8:a9:31:d5:ed:3e:19:8a:10:b6:50:
ec:89:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:58 2024 by rpki-client on console-ams.rpki-client.org