Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kZp6q0oix_o1pBjsU1gS9AA8CCo.roa
File: kZp6q0oix_o1pBjsU1gS9AA8CCo.roa (raw, json)
Hash identifier: xgYHF6in2dPtY9yo6cqxf/LfufL3cqie1CHV+iBUP2o=
Subject key identifier: 91:9A:7A:AB:4A:22:C7:FA:35:A4:18:EC:53:58:12:F4:00:3C:08:2A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54DA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kZp6q0oix_o1pBjsU1gS9AA8CCo.roa
Signing time: Sat 11 May 2024 17:24:03 +0000
ROA not before: Sat 11 May 2024 17:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21722 (0x54da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 17:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=919A7AAB4A22C7FA35A418EC535812F4003C082A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:ba:ac:6f:66:3d:92:7a:d8:96:06:da:02:
0f:94:68:31:f1:e8:09:f9:b7:b5:3f:aa:fc:28:ee:
45:8a:9c:b4:4b:d0:76:ea:11:6a:49:13:32:9c:bd:
b5:bc:ac:d7:ae:1a:a7:95:6b:59:09:e7:d6:b8:83:
4b:62:12:62:c6:98:d3:ba:91:3a:20:29:60:a2:4b:
64:cc:41:80:47:87:c7:b5:51:43:27:cc:c4:bd:4b:
16:fa:c7:97:af:b0:3f:2f:54:e5:af:21:0e:07:86:
c0:5e:b3:f6:fb:5e:46:a0:e2:61:fc:62:0b:7e:c6:
f1:75:16:ca:43:38:8f:3f:15:dd:97:d3:73:55:36:
be:7c:eb:1f:a9:85:c8:64:8c:44:1e:34:63:4f:3a:
7c:5c:cf:eb:13:8e:d2:6d:15:b7:95:5f:dc:78:6b:
df:b5:6a:f7:52:01:00:b1:b2:e5:e0:54:75:9c:de:
03:7d:90:ca:a2:0b:58:4e:e6:6e:57:e1:b8:bf:f9:
b5:cc:0e:0d:89:71:4b:6e:eb:a7:3a:8a:0b:d8:76:
09:d7:ad:02:a0:45:c7:0a:a7:d3:d0:00:37:72:a0:
15:f1:94:a7:32:a3:44:dd:6f:db:bb:b9:21:84:77:
20:56:ad:af:c6:8c:8c:56:25:7c:1c:1c:44:59:36:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:7A:AB:4A:22:C7:FA:35:A4:18:EC:53:58:12:F4:00:3C:08:2A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kZp6q0oix_o1pBjsU1gS9AA8CCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:d2:f1:83:ca:93:fd:b5:40:7e:fe:4d:1a:c5:16:f4:5b:1b:
ef:ff:bf:b9:c2:e4:12:05:df:43:78:ac:31:a0:2f:2c:2d:6e:
28:e8:a7:52:01:43:fc:c9:8e:9b:f2:03:0a:32:48:80:6e:34:
70:ef:36:bd:72:89:c6:47:c5:15:ae:bf:a1:3f:b9:18:23:04:
e3:fa:e0:0e:ae:26:b9:5c:7c:90:1b:f7:3f:e0:6f:55:ed:44:
f7:c9:d2:ce:f0:48:ab:a6:1f:f7:cb:30:50:19:33:e1:63:81:
7a:2b:1e:51:5c:bf:f3:b5:a9:42:95:de:c1:1a:42:5e:ec:89:
51:22:d5:1e:84:27:02:5b:5e:27:cf:db:8b:39:aa:31:ca:6d:
18:6a:96:33:e1:6d:62:1b:c8:a6:6e:43:c8:dd:ff:03:d5:e3:
be:ff:87:a1:03:02:48:6e:01:41:51:b7:bd:bb:5f:05:d2:41:
85:fe:a4:4f:29:00:23:b6:0f:db:28:c6:02:35:fd:07:94:58:
6d:90:c1:81:6b:76:94:79:76:68:46:15:bd:b3:77:4c:38:a7:
cb:d1:63:f4:ea:27:08:37:c1:33:ce:8d:58:79:1d:3d:65:bb:
cb:9a:67:5d:b8:38:a7:c1:5d:68:e2:5d:88:b7:2a:5f:d9:6b:
4d:e0:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:43 2024 by rpki-client on console-fra.rpki-client.org