Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jUZ0Ae0KvM2wQ8d0rPYnXdlmocU.roa
File: jUZ0Ae0KvM2wQ8d0rPYnXdlmocU.roa (raw, json)
Hash identifier: f45tIz4BR5MWIBKnjTaidugjq5B33xOgAXCgx5m2Fvs=
Subject key identifier: 8D:46:74:01:ED:0A:BC:CD:B0:43:C7:74:AC:F6:27:5D:D9:66:A1:C5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D62
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jUZ0Ae0KvM2wQ8d0rPYnXdlmocU.roa
Signing time: Wed 01 May 2024 18:23:38 +0000
ROA not before: Wed 01 May 2024 18:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19810 (0x4d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 18:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8D467401ED0ABCCDB043C774ACF6275DD966A1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:d6:e1:31:f1:8e:6a:48:6e:0b:9b:87:9e:
c4:58:f6:63:79:f3:18:d4:06:ef:f3:3a:13:00:16:
37:4d:48:98:6e:65:23:e3:4d:c2:bc:bc:20:45:a7:
ad:a1:96:2c:e4:4a:3d:12:be:19:d2:16:05:8f:9f:
e3:f2:3c:93:67:6b:bc:30:c9:d2:34:96:d6:e7:4d:
c2:10:e9:7f:b5:e6:e3:b9:78:cf:2d:e6:21:e6:c1:
ab:f5:c1:21:af:7a:53:8e:65:4c:15:56:b2:88:35:
52:f7:fa:a5:8b:65:2a:00:42:3e:48:35:5c:9f:c1:
62:c6:fd:d1:47:99:59:5e:ba:25:7a:1b:cd:cd:e4:
a8:99:41:50:23:16:74:ce:f9:a4:70:68:d8:ef:4d:
f2:9f:1c:39:8e:a2:57:b3:10:5a:da:57:7c:9e:c4:
ec:63:12:ee:5a:cf:15:1f:2d:31:e1:9d:32:40:67:
0a:35:bc:e4:b6:50:af:dd:e2:c9:ff:1d:b3:2d:45:
ea:2e:5a:ff:ea:48:c5:39:d4:98:28:80:54:78:2a:
02:4c:7d:9d:dc:33:6b:c1:2c:02:5f:b5:12:a6:03:
c2:96:04:eb:49:d4:72:66:0e:05:fa:f0:1b:35:a3:
0d:07:65:f6:ed:5b:f2:cf:a4:21:ef:d0:28:4e:5f:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:74:01:ED:0A:BC:CD:B0:43:C7:74:AC:F6:27:5D:D9:66:A1:C5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jUZ0Ae0KvM2wQ8d0rPYnXdlmocU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:ca:b8:a5:c9:a5:d2:32:f5:9d:02:6d:80:37:6a:7d:0f:d7:
ca:a9:3c:a8:e2:53:90:e7:74:d7:16:38:92:f7:39:71:5a:7b:
b4:72:be:15:d1:d6:87:b5:7f:05:7e:12:2b:2d:95:59:2e:80:
49:da:8f:ba:a9:ae:eb:10:0e:70:a3:7c:17:ff:93:22:ba:4a:
01:04:37:fe:6b:fa:d2:00:91:38:7c:45:af:b6:b2:78:72:44:
44:df:34:3f:86:cc:de:30:90:a9:d5:f9:95:dc:af:5b:8d:81:
9b:e1:ac:89:7e:7e:24:e4:90:06:8b:a2:ef:06:14:48:0f:a0:
50:7c:1a:1f:4f:76:4a:17:d4:63:6d:1a:ab:10:52:12:f4:0c:
d4:b4:28:dd:5b:ee:b4:d2:44:48:63:18:6d:cc:8a:5b:fc:d6:
17:c5:ee:d2:1e:28:f6:0f:da:28:ce:04:8a:1d:d2:fa:31:c3:
95:4c:67:4a:61:0b:3b:4b:02:35:35:77:40:53:01:b5:91:cd:
4a:38:86:1a:e1:27:79:6f:36:b7:25:ab:e2:1a:08:21:c5:4a:
a6:98:83:e9:e9:61:5a:d8:2a:ca:12:cb:99:06:4b:ce:6f:6f:
03:09:01:5b:a7:5e:1b:bb:28:2d:95:e8:14:ec:c9:4a:e9:95:
61:93:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org