Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jc071_RLlMozyQSxzA16rtq0KqI.roa
File: jc071_RLlMozyQSxzA16rtq0KqI.roa (raw, json)
Hash identifier: omic4ADqmb+leohuvk1R0WACbWRDKlcwvmcfX5JyXDc=
Subject key identifier: 8D:CD:3B:D7:F4:4B:94:CA:33:C9:04:B1:CC:0D:7A:AE:DA:B4:2A:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 502E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jc071_RLlMozyQSxzA16rtq0KqI.roa
Signing time: Sun 05 May 2024 11:53:49 +0000
ROA not before: Sun 05 May 2024 11:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20526 (0x502e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 11:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8DCD3BD7F44B94CA33C904B1CC0D7AAEDAB42AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:a1:82:21:bc:1e:06:21:14:4e:1d:c2:cf:
be:0c:2b:34:f7:1a:11:fd:96:e2:8a:99:8d:13:eb:
d6:82:11:c2:93:d4:1e:87:4d:55:5f:90:8e:92:10:
63:29:ad:b5:b2:c7:b4:ab:1f:ad:27:14:b1:ea:16:
cc:da:9f:c0:af:52:df:cc:dc:d9:9f:ac:8b:4c:a7:
8e:85:a2:61:15:14:0d:51:77:26:fa:27:6c:09:69:
bb:e5:47:92:d4:93:a4:0c:21:7c:e2:ba:f0:18:48:
4c:c6:a3:e7:b5:6e:8e:6c:3a:e7:f0:cd:1e:2a:c2:
71:7c:69:c6:87:98:b3:5e:3e:fa:29:dd:b7:8c:46:
40:eb:1e:e0:66:7f:4c:86:7e:f0:f0:14:6f:2a:81:
2d:ad:e9:d7:79:89:b0:89:90:cc:9d:da:47:e5:71:
0e:83:cb:86:f7:7e:69:6e:01:90:3a:be:a2:20:83:
6b:26:b6:98:2d:6c:46:33:6a:64:92:1a:e9:ff:7e:
88:c4:e3:2a:4d:99:8e:fc:ab:d9:94:83:c6:90:cc:
d6:47:0d:09:11:63:0b:b6:be:1c:3a:44:51:84:63:
27:a7:eb:3d:ad:8f:1f:e8:fb:15:b1:12:e3:bc:dd:
87:a8:46:15:a2:a4:1e:38:53:11:44:0d:cc:70:7d:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:3B:D7:F4:4B:94:CA:33:C9:04:B1:CC:0D:7A:AE:DA:B4:2A:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jc071_RLlMozyQSxzA16rtq0KqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:70:3b:e5:5c:0e:16:c0:af:0b:b1:7a:09:3e:d1:5b:50:1f:
2e:c3:49:47:45:06:71:d2:9e:74:23:bc:55:9f:9b:60:2e:77:
44:70:7b:68:eb:7d:f4:8c:42:95:7b:1d:4d:8d:fc:41:7f:5e:
5a:92:17:7c:81:f5:9c:40:bd:49:5f:da:62:22:71:4a:df:58:
f5:52:81:32:bc:d1:45:97:e5:01:98:d4:71:26:83:42:00:a9:
c7:51:b1:d5:2e:36:dc:e4:a4:07:b8:aa:39:92:96:84:d7:c1:
af:4e:71:cc:b9:bc:fd:b7:0f:9b:91:1b:25:cd:94:9f:bb:c9:
b9:17:44:f4:1c:90:48:20:5e:f8:9b:54:ab:3d:b1:7c:29:69:
3d:44:7e:06:10:83:2f:e5:eb:f0:5e:3c:4a:7a:32:75:27:f4:
ff:a2:46:8a:80:38:17:f7:ad:32:7a:70:81:b3:8e:26:94:c1:
64:1b:ae:02:7a:fb:ee:44:1d:20:d2:bf:1c:00:7a:3c:d5:2f:
00:2c:a6:59:21:6f:5e:d3:22:39:a0:c6:4d:87:81:bc:f2:bf:
af:26:5d:e3:25:f8:c9:94:d0:3d:82:45:31:52:75:8a:67:d6:
af:e8:e3:1d:04:45:0c:f0:9d:0e:71:2b:da:b9:8b:61:43:d9:
29:85:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org