Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hK-PdK9_itVVXwt86njBG3zDoBE.roa
File: hK-PdK9_itVVXwt86njBG3zDoBE.roa (raw, json)
Hash identifier: 6GsKb/gJ04goMjtUZbJ9tJsJPYsnPQIe7qcfccY5xhk=
Subject key identifier: 84:AF:8F:74:AF:7F:8A:D5:55:5F:0B:7C:EA:78:C1:1B:7C:C3:A0:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 538A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hK-PdK9_itVVXwt86njBG3zDoBE.roa
Signing time: Thu 09 May 2024 23:23:58 +0000
ROA not before: Thu 09 May 2024 23:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21386 (0x538a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 23:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=84AF8F74AF7F8AD5555F0B7CEA78C11B7CC3A011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:28:09:76:23:94:4e:f8:82:c1:d7:8a:09:
e3:6d:9e:72:e6:dd:20:92:49:bd:9a:45:3f:04:95:
8f:18:8c:44:62:e7:64:df:2e:f4:8a:4a:03:8c:05:
ec:45:29:8a:18:24:42:c5:6a:9d:f4:45:fc:a7:3a:
98:d3:7c:9b:c0:51:3f:f4:78:82:01:81:86:1c:00:
5f:4f:53:d7:7e:48:a9:2c:d3:64:7e:30:81:7b:89:
f7:65:c3:25:3e:62:4c:d5:f3:32:c3:6e:7d:da:0a:
c7:6a:ab:a5:57:78:d2:e5:67:2b:57:79:bf:9b:13:
87:3b:f2:ab:12:18:0c:43:cb:0f:02:d8:45:de:26:
3e:8c:9f:c3:bb:92:d0:99:12:63:d0:a5:0e:24:a9:
b9:43:7b:da:09:06:6c:75:73:88:cb:0a:6b:7b:36:
5c:db:fb:81:e2:09:df:64:24:f8:92:44:06:e7:f9:
88:0a:b7:53:82:fd:5a:0e:d4:15:d5:6f:c2:ee:76:
44:9e:df:79:a7:b9:c6:e4:8c:f6:22:65:29:3e:d7:
44:fc:91:b1:f7:be:c4:e3:c5:55:c9:d5:46:01:bd:
02:35:53:c4:34:73:aa:ef:dc:5e:b2:4b:46:9b:2a:
e2:26:47:9d:97:48:4f:86:15:3c:f2:5f:ad:5e:de:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:8F:74:AF:7F:8A:D5:55:5F:0B:7C:EA:78:C1:1B:7C:C3:A0:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hK-PdK9_itVVXwt86njBG3zDoBE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:89:24:3a:bb:ed:09:2d:6d:ce:e3:4a:4e:e5:6f:b4:b1:46:
39:75:de:c9:f7:76:32:0a:34:f3:fd:ce:63:7f:4f:30:aa:f7:
7e:a2:9e:30:07:83:8a:d7:c0:7d:e5:7a:6d:41:ea:dc:97:9a:
b6:7b:0e:2d:2a:1c:08:dd:81:18:54:3c:d5:4d:92:9b:e4:d5:
8e:e4:aa:e7:79:5c:27:dc:75:85:09:fe:d6:95:a1:2a:86:f6:
b2:f6:38:fa:7c:49:9b:f3:3b:5e:8f:0f:46:3a:3c:a8:11:5b:
38:92:c8:18:cd:32:39:4e:ce:1e:51:5d:15:94:70:89:77:ff:
04:85:10:51:d8:2f:f7:68:b0:d5:0b:4b:f2:03:bd:a6:46:cb:
4c:2a:7a:07:0b:ea:39:0a:92:b4:27:5d:a1:01:da:e0:3c:e4:
39:82:38:c4:8f:39:a7:64:6a:6b:ac:53:fe:5d:dc:f3:0c:5c:
fd:31:7e:d3:13:85:cf:4d:ae:4c:df:ed:18:8a:00:c4:f4:51:
7b:d1:1b:35:f2:4b:41:32:6d:a6:ae:bf:20:45:fe:75:80:94:
9f:18:94:70:c3:a4:72:4d:c8:f8:49:f7:7e:dc:c3:8f:02:3a:
ef:62:05:f9:fd:67:c6:67:05:a5:19:91:97:28:0d:30:74:80:
02:17:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org