Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gbubgnj7RS45ZMiRDqWYuABX5P4.roa
File: gbubgnj7RS45ZMiRDqWYuABX5P4.roa (raw, json)
Hash identifier: GXfwFT0ToIgUnyt+Hdek/Cs72X4k3t49xFfD+xJtlFQ=
Subject key identifier: 81:BB:9B:82:78:FB:45:2E:39:64:C8:91:0E:A5:98:B8:00:57:E4:FE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gbubgnj7RS45ZMiRDqWYuABX5P4.roa
Signing time: Mon 01 Apr 2024 20:22:15 +0000
ROA not before: Mon 01 Apr 2024 20:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14066 (0x36f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 20:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=81BB9B8278FB452E3964C8910EA598B80057E4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:c6:8d:ff:fb:1e:d2:c2:e0:6f:be:52:30:
d0:2e:83:43:03:3b:16:b7:bb:2f:7c:6e:d7:44:df:
da:8f:33:14:e5:8e:90:32:fe:14:64:3a:06:a2:50:
c4:3b:07:a7:a5:9d:8e:81:8e:da:79:49:3a:6a:51:
ea:6c:0e:c1:60:2b:25:0a:e1:b7:35:33:05:92:e5:
7c:2d:94:92:f6:64:45:3c:c2:01:e9:a9:cc:ff:1f:
f4:b9:f8:4e:33:52:95:a6:a1:50:44:82:74:2d:7b:
bc:f3:8b:ee:a5:45:f9:3b:e5:cd:53:69:1f:49:cb:
5f:cd:b6:b7:60:3d:af:21:7b:08:fd:a5:2e:8b:86:
af:67:f9:6d:40:6a:b7:2c:11:1b:03:51:2d:44:69:
b4:58:da:d9:fc:6e:2e:85:15:e2:a1:79:50:42:78:
42:52:bb:b1:a5:1d:9e:be:e5:cd:bf:28:2e:af:2b:
88:0b:85:9f:71:65:02:8d:5d:97:52:52:d1:1f:fd:
5c:d3:a3:9f:8b:24:31:32:32:43:66:ea:86:62:79:
48:df:7e:00:b7:cf:11:fc:48:a3:a6:e0:f2:54:90:
7b:40:f5:62:f4:b9:c0:9a:26:2d:1f:d8:40:6b:1f:
31:3e:6a:62:d2:91:00:48:47:cc:29:eb:bf:b8:0c:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:9B:82:78:FB:45:2E:39:64:C8:91:0E:A5:98:B8:00:57:E4:FE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gbubgnj7RS45ZMiRDqWYuABX5P4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:3c:76:95:7f:4c:f3:27:b2:d2:ef:a1:3a:fe:01:a1:8f:db:
21:e4:13:e6:ff:09:a3:a8:d9:96:01:cc:c6:27:aa:22:45:d1:
11:94:58:d3:36:2b:d6:7f:ba:5f:58:32:9d:07:8a:e0:b0:da:
70:b2:ca:f9:77:91:2e:e1:3b:96:73:9d:66:57:1c:94:3c:ad:
ae:98:a4:7f:06:25:68:69:fc:c0:0e:d6:f3:61:8c:0c:bb:d2:
30:f8:42:f6:22:4e:60:33:58:48:a9:c9:b2:0d:fc:0a:bb:77:
af:d1:2a:34:66:7f:89:1c:30:1a:67:7a:f6:fe:15:68:00:26:
a8:a3:dc:c4:67:86:21:90:f8:3b:cb:dd:d3:be:d2:f3:e9:74:
2c:b4:e7:ef:34:d5:90:f1:14:25:e6:03:a5:b9:7f:1c:01:06:
7b:72:60:cb:0f:c1:40:ab:03:9c:e9:dc:51:18:1a:49:0c:fd:
58:32:5e:03:6d:05:f6:d6:f8:93:3b:6f:5b:7e:c3:db:2e:cf:
6c:df:1c:bf:2d:6c:5d:be:e2:b6:8c:f9:d6:83:de:e3:d6:d3:
e0:25:9e:4e:d0:6c:35:63:87:37:63:f3:70:a9:0a:0c:0d:ad:
b5:3e:d4:90:4f:57:40:e2:99:42:ea:9d:47:9c:41:e1:ba:97:
10:1e:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org