Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fi2ARdrcN1lMS6JL0jcbLMjRjhw.roa
File: fi2ARdrcN1lMS6JL0jcbLMjRjhw.roa (raw, json)
Hash identifier: ZmC5QjBzTOJIqwDKym2Vq0rW12eL1J66SzYXHaqjx+E=
Subject key identifier: 7E:2D:80:45:DA:DC:37:59:4C:4B:A2:4B:D2:37:1B:2C:C8:D1:8E:1C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5646
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fi2ARdrcN1lMS6JL0jcbLMjRjhw.roa
Signing time: Mon 13 May 2024 14:54:07 +0000
ROA not before: Mon 13 May 2024 14:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22086 (0x5646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 14:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7E2D8045DADC37594C4BA24BD2371B2CC8D18E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:25:99:ed:ee:58:e6:99:9c:64:77:04:6f:
30:85:af:97:ed:d5:be:a3:16:2e:4e:24:e7:f7:9a:
7c:00:6a:50:43:b9:db:4e:20:4f:58:58:e8:da:f3:
ff:f1:a7:02:2e:91:ad:a2:59:4f:08:a1:35:8f:17:
67:19:4a:1f:76:98:e9:fd:fb:d0:35:76:93:36:74:
58:90:58:ab:9e:d6:b3:95:be:e1:93:fd:df:24:3c:
69:b2:f2:17:70:66:37:b4:d1:2a:8e:ca:59:b0:c7:
13:90:16:56:97:0f:66:0b:a5:f9:cd:b1:e5:1d:e2:
eb:09:f8:cc:21:bf:63:08:0f:01:89:53:16:1a:57:
75:a4:b8:60:6b:aa:cd:ca:c8:4f:c7:70:73:5f:90:
ea:30:aa:d4:07:27:90:5e:6a:82:9e:34:2f:95:46:
77:d9:9b:42:7c:fc:13:c4:2e:e8:1a:57:d7:c7:c2:
ba:78:db:0e:ec:24:24:fa:1d:f5:1c:0a:a5:4e:da:
a0:a0:a1:64:63:69:25:ae:db:ea:66:72:1f:c5:66:
cc:3a:2c:6c:b9:ad:c8:0f:41:8e:55:d1:d9:0c:19:
ab:6f:4c:b8:6f:95:e0:35:f4:b4:af:3c:72:df:91:
b3:00:f8:09:85:fb:e6:38:32:50:d3:c1:36:ff:7b:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:80:45:DA:DC:37:59:4C:4B:A2:4B:D2:37:1B:2C:C8:D1:8E:1C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fi2ARdrcN1lMS6JL0jcbLMjRjhw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:65:00:00:0e:2c:7a:27:6c:c3:c4:f0:ae:c7:b7:d7:c3:75:
ed:41:0e:d5:50:75:41:8b:e5:f4:b8:d1:ca:55:de:c3:5d:1b:
53:0d:65:5a:89:63:d0:54:c7:0e:4c:96:28:db:59:dc:56:30:
64:63:76:06:39:01:45:7e:92:fd:53:18:eb:9b:3f:a1:df:fb:
a4:98:a0:36:2a:ed:2e:52:33:d1:98:39:17:5a:ba:1b:60:bc:
04:56:2c:69:18:9f:df:54:b4:0f:83:9c:6e:99:3c:8e:2e:09:
be:fd:1e:5b:9c:87:91:75:0d:62:69:74:5e:43:69:d6:54:9f:
8f:ad:a3:40:27:a6:df:d6:31:f4:b8:a5:77:bb:34:69:41:1a:
d9:a5:e7:b6:d1:24:a4:2b:04:00:57:1b:bf:75:75:11:bb:bf:
b0:77:46:af:25:aa:cd:0b:f1:2c:46:a1:48:9e:29:e0:88:c9:
c0:aa:5c:91:4e:78:62:85:99:f1:98:d4:f0:5a:7f:14:1e:91:
b8:95:fc:58:a7:72:e0:9e:26:d6:44:b0:d3:f1:3e:f0:2a:da:
54:c0:ce:18:89:a6:f3:b4:ba:c9:f6:4f:ad:65:02:3b:43:bd:
1a:c4:a0:3f:25:6b:e2:0b:56:5b:26:9e:25:cc:5b:6b:c9:16:
d0:75:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org