Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g16v7UbgsbXZ_gkl7BmHWyaHqBA.roa
File: g16v7UbgsbXZ_gkl7BmHWyaHqBA.roa (raw, json)
Hash identifier: VJJ5E/e1fnF4+pB0JClTObEm+VyD4YnR1xRs4iEHvLs=
Subject key identifier: 83:5E:AF:ED:46:E0:B1:B5:D9:FE:09:25:EC:19:87:5B:26:87:A8:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37FA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g16v7UbgsbXZ_gkl7BmHWyaHqBA.roa
Signing time: Wed 03 Apr 2024 05:22:22 +0000
ROA not before: Wed 03 Apr 2024 05:22:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14330 (0x37fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 05:22:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=835EAFED46E0B1B5D9FE0925EC19875B2687A810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:d8:7d:8d:9b:36:bb:14:9c:d2:04:10:ba:
b2:1f:0e:53:e4:fe:5d:75:6c:e4:2e:51:42:39:77:
df:73:d9:03:12:b7:ff:99:9c:72:98:20:ce:1c:fb:
c5:a4:ba:0d:f0:73:c1:88:fd:d8:73:7c:6d:8a:4e:
54:b5:38:2b:c8:31:be:c8:05:34:4e:88:a0:81:cc:
a8:8b:57:85:8b:8b:c5:18:3a:8d:d2:23:15:57:25:
e2:9b:34:23:ce:f6:7b:93:1a:ec:3e:b1:86:c0:a1:
1d:fb:ac:08:84:38:73:27:fa:06:4c:b1:12:e3:fd:
60:c9:04:48:78:51:c1:b3:7d:a3:69:87:1e:8a:17:
b8:78:2c:69:24:40:12:89:25:f3:25:da:e9:f2:73:
2e:cf:03:dc:08:69:f6:79:0c:78:d2:e2:13:2b:49:
84:50:05:d4:b7:1e:b8:b6:0d:b0:a0:25:fe:57:37:
f1:b5:3a:0d:f3:c8:17:94:b1:15:7a:17:bd:c9:b0:
f4:cd:4d:e1:67:c4:dd:2a:71:30:c0:43:94:30:1b:
3e:06:68:87:df:0d:a3:ef:4e:16:99:d1:9a:52:62:
e8:7b:b3:e0:3a:9b:9a:44:36:7e:fe:91:19:05:f6:
c3:ed:5d:41:e2:f1:5e:6c:f3:ae:44:43:ec:59:21:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:AF:ED:46:E0:B1:B5:D9:FE:09:25:EC:19:87:5B:26:87:A8:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g16v7UbgsbXZ_gkl7BmHWyaHqBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:43:11:d8:a9:ce:3b:99:8b:a3:75:34:1b:2e:8d:5b:85:53:
98:96:87:07:b7:b5:1e:a4:84:69:17:26:93:1f:7e:ad:13:ae:
9e:e8:05:ce:53:6b:88:9f:c7:f9:8f:ed:74:9f:70:13:b0:dc:
f8:e8:d2:78:88:28:e6:43:c8:3c:61:bd:94:d9:0f:2f:d1:52:
6d:ae:78:64:87:e3:48:7a:2a:cc:b2:da:ae:22:91:0b:9a:4c:
30:f2:66:4d:7c:81:f6:7b:9f:19:10:41:48:de:a6:6f:86:6c:
80:49:4b:2f:6f:62:e0:02:f6:e2:f4:11:58:03:b7:72:8d:5c:
0d:23:13:e8:81:6a:24:20:8a:cf:bb:09:f3:ca:39:d6:ac:67:
64:de:fc:7d:2c:28:87:1c:bd:fb:54:d5:5d:fb:57:7c:d8:25:
b9:be:9b:be:d9:ea:29:14:d9:83:26:e0:dc:6f:4e:2d:87:cb:
14:a1:58:ab:68:d4:7e:84:00:cb:1f:41:e2:d8:0c:aa:60:aa:
05:34:83:8c:af:19:5e:6d:cc:af:6c:29:c8:80:6a:ee:3a:02:
c0:82:25:40:1a:df:37:ad:5b:2a:2e:03:ea:4f:25:50:46:a3:
e2:ee:02:b6:a1:45:b1:ce:0b:35:97:38:32:f9:c5:23:f7:0a:
ea:10:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:00 2024 by rpki-client on console-ams.rpki-client.org