Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g710lul11m_Tb-SJshac793WbCc.roa
File: g710lul11m_Tb-SJshac793WbCc.roa (raw, json)
Hash identifier: USRhnajKmjVKs6Y8hSuN039gaJG9IPTNtvf+60S1+S4=
Subject key identifier: 83:BD:74:96:E9:75:D6:6F:D3:6F:E4:89:B2:16:9C:EF:DD:D6:6C:27
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52D6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g710lul11m_Tb-SJshac793WbCc.roa
Signing time: Thu 09 May 2024 00:54:07 +0000
ROA not before: Thu 09 May 2024 00:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21206 (0x52d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 00:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=83BD7496E975D66FD36FE489B2169CEFDDD66C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:95:1b:43:23:e9:7d:ca:e9:7f:f2:a6:6d:
7f:0e:14:e4:44:61:34:11:87:a9:ba:b3:be:59:03:
0a:4e:5c:fc:f9:80:a6:38:94:ac:18:84:6c:ea:8d:
37:fe:68:15:13:b4:76:9a:36:4d:fa:eb:f0:cd:16:
2e:03:e5:7b:8f:01:43:f5:18:61:52:55:6a:7f:12:
c6:7d:e1:dc:2c:37:b7:f4:51:b6:35:57:c3:1f:65:
98:19:23:28:48:ac:ad:28:32:f8:d3:7f:e8:63:e2:
31:17:d8:5b:4a:61:a8:c8:0e:2f:91:ba:7c:4a:9d:
34:91:15:15:54:f7:7e:91:a7:9b:45:82:0f:6f:65:
49:6b:73:5d:9b:c7:ec:9f:21:eb:54:9a:da:c5:31:
ca:e4:17:0c:41:75:23:7d:c3:51:65:bc:47:31:de:
07:d7:03:69:fe:f2:98:6b:e1:6e:2e:a0:93:88:e7:
ff:09:bd:67:40:29:af:98:6c:28:5d:0e:54:22:ed:
d6:60:5a:db:fc:4c:5e:37:4c:12:da:4b:6c:14:bc:
8d:4c:bf:37:85:61:f7:bd:d6:b9:35:d9:cf:35:a8:
2e:9b:12:f2:66:ad:6b:c4:05:4c:0c:fd:f0:13:da:
ff:a6:6e:0c:c3:cf:da:00:70:cf:55:a3:4b:27:a7:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:74:96:E9:75:D6:6F:D3:6F:E4:89:B2:16:9C:EF:DD:D6:6C:27
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g710lul11m_Tb-SJshac793WbCc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:61:fa:66:66:24:a4:e5:cc:b0:e7:31:fe:7f:54:2d:91:7c:
31:43:1a:97:d6:01:f2:15:be:a7:fb:57:c7:02:e8:fa:cd:e9:
63:aa:77:12:56:85:12:9a:70:2d:20:c2:00:a9:22:8e:ff:47:
c5:1e:5d:e0:96:9c:67:6c:10:64:bc:8a:7a:57:5c:bd:02:69:
b7:ef:c2:13:ba:14:0f:86:bc:42:06:75:f3:ee:8d:9e:2f:d3:
cf:d7:6d:f0:8d:4d:e5:90:62:eb:ac:47:87:7f:24:1f:81:29:
d8:a3:db:e9:8c:ab:df:81:f1:30:6b:00:85:c9:8d:2b:e4:c7:
df:a3:5a:b7:bf:dd:24:0e:63:0b:3e:4c:54:47:7b:80:5c:45:
7e:dd:8d:d3:0f:b6:38:6a:24:64:d8:87:f9:90:af:93:7e:47:
40:05:94:7b:77:0e:00:fd:3c:9e:4d:b4:45:bf:02:3c:38:af:
df:e1:5d:7a:79:a2:e6:da:0b:6b:61:7e:41:19:7e:f6:06:95:
e8:81:7a:ae:34:19:70:6e:d0:a9:07:aa:bd:07:a7:a6:f0:60:
ee:2b:0d:1b:77:25:75:03:27:3e:70:2f:75:7e:6c:95:bb:6f:
8e:8d:19:04:07:47:6c:40:24:a1:a4:54:8a:8d:c6:5a:b1:ca:
a5:6c:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:00 2024 by rpki-client on console-ams.rpki-client.org