Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ec0TfBPwqHwu3mNo49chj73fzUU.roa
File: ec0TfBPwqHwu3mNo49chj73fzUU.roa (raw, json)
Hash identifier: zTVkxX8tZIam50yZJZO8rakohpgKrU0KNqKHfyUYNlI=
Subject key identifier: 79:CD:13:7C:13:F0:A8:7C:2E:DE:63:68:E3:D7:21:8F:BD:DF:CD:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ec0TfBPwqHwu3mNo49chj73fzUU.roa
Signing time: Sat 13 Apr 2024 03:52:52 +0000
ROA not before: Sat 13 Apr 2024 03:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16238 (0x3f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 03:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=79CD137C13F0A87C2EDE6368E3D7218FBDDFCD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:9e:55:65:57:97:5d:1e:c0:f8:7e:b7:8f:
ed:77:9f:c3:4a:f3:65:e3:01:82:f3:36:37:62:cb:
a1:9d:0a:f4:a2:32:87:ae:23:64:5c:43:bd:38:a0:
d7:62:4c:9b:7a:98:d8:ea:71:69:b2:45:19:d4:c6:
62:a1:e3:39:9f:88:aa:cb:5f:7c:d3:79:d3:c7:de:
d3:27:32:54:07:b3:e7:43:33:5a:d3:dc:ec:03:50:
60:c1:a1:b8:44:80:c4:86:d9:fc:d2:cd:43:21:c3:
47:f1:af:8f:c8:aa:eb:d2:69:e1:73:8f:e4:9b:ef:
41:3b:4c:c1:9e:bf:f4:bf:9d:76:3e:29:0c:21:ba:
93:77:c9:66:4d:73:ee:c6:bc:b0:43:2f:05:fa:d2:
af:0b:ba:d5:da:4b:ba:f0:24:61:41:20:aa:e0:f5:
16:12:35:d7:e8:ec:09:ce:e5:c5:b4:00:9c:a3:a2:
7b:5f:0f:f9:6b:bc:5b:9c:29:a5:08:ae:08:c2:05:
22:ef:3a:89:d0:63:59:01:8f:54:f5:13:dc:8f:4a:
b6:c5:a8:0c:a9:ba:22:b4:d3:fc:26:42:52:df:95:
ef:e6:dc:d1:89:13:19:bd:61:69:7d:b6:42:0e:3b:
cb:18:8a:5c:e8:e9:0e:ba:32:0a:23:80:32:e6:7c:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:13:7C:13:F0:A8:7C:2E:DE:63:68:E3:D7:21:8F:BD:DF:CD:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ec0TfBPwqHwu3mNo49chj73fzUU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:ff:14:da:c0:b0:f7:7f:52:53:9f:20:4f:dd:d3:f6:8a:c9:
87:e9:1d:56:6c:3c:cd:f1:e7:9a:d2:7e:86:be:af:2f:f5:83:
28:21:59:d2:65:7c:1b:16:8a:76:70:f1:0e:df:92:5f:68:1c:
d9:ec:94:f1:02:73:e0:75:77:21:0c:0c:4a:48:24:26:ac:a0:
59:f7:80:ab:e1:73:63:94:58:1e:49:24:f7:0e:d0:31:ae:84:
75:18:91:34:84:ab:ef:75:94:45:86:47:9a:37:57:6b:bc:21:
be:75:da:dc:01:b9:b3:63:6d:2c:ed:02:15:48:12:77:2b:7a:
a3:e4:95:b3:3d:2b:4a:42:e8:fa:ec:f8:ed:7a:49:7d:2e:b5:
ce:86:50:57:00:8b:99:53:3c:9b:14:20:e6:93:d0:47:27:ad:
33:e5:78:8c:f1:ad:b1:74:7b:28:0a:22:4a:2d:f8:02:96:ed:
98:11:31:d5:03:98:17:1b:1e:6c:2f:0e:1a:29:65:14:98:d2:
db:26:bc:cd:8e:f3:ec:8b:2d:12:be:28:52:40:4a:65:d4:c9:
39:53:2d:5b:8e:d7:73:67:0a:45:e4:ee:97:a8:72:aa:b8:64:
cc:e0:3f:0f:d3:31:ab:42:88:5a:d7:c7:41:7c:4b:06:db:03:
0c:7d:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org