Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l2-6c7I4GqUO1SchS84gmuoKWDE.roa
File: l2-6c7I4GqUO1SchS84gmuoKWDE.roa (raw, json)
Hash identifier: ZD8qfUQd8W2oaHhog/8vBo9ixRcsRuO7zuL8v6NZbZY=
Subject key identifier: 97:6F:BA:73:B2:38:1A:A5:0E:D5:27:21:4B:CE:20:9A:EA:0A:58:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B76
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l2-6c7I4GqUO1SchS84gmuoKWDE.roa
Signing time: Mon 29 Apr 2024 04:53:30 +0000
ROA not before: Mon 29 Apr 2024 04:53:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19318 (0x4b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 04:53:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=976FBA73B2381AA50ED527214BCE209AEA0A5831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:fe:55:79:68:e3:bc:bc:83:3e:4e:5e:20:
af:c7:94:ce:88:9f:45:34:9c:fa:c8:70:0c:a1:9b:
c8:8e:b6:55:af:fa:d0:7d:0c:25:66:d5:a1:ff:7d:
d3:b4:57:e2:c4:02:d9:7c:e4:c1:30:36:e1:15:1e:
84:63:d0:98:46:b1:69:4f:ba:e3:86:a9:28:36:2a:
0d:f9:5a:88:a8:92:ee:6d:59:20:da:60:3a:39:5a:
35:20:01:cb:f2:5d:79:9e:19:4b:f8:b1:2e:f8:1a:
20:8f:33:ce:1a:01:fe:d1:b7:dd:bc:9c:bc:e6:e7:
bf:79:54:aa:11:d2:21:0f:8c:90:74:4a:fb:f2:26:
b7:7a:3a:68:d9:86:2a:f5:d8:a0:7e:87:d8:2b:76:
e8:f6:65:9a:e0:92:d1:bd:13:93:1d:43:c7:a5:6f:
1d:42:37:10:2f:73:49:f6:89:11:a1:20:76:13:4d:
25:7c:20:4b:03:32:0b:db:9a:29:cc:e7:e9:34:9c:
36:a4:a4:21:32:26:97:d9:55:d3:a6:a5:0f:cb:11:
f6:10:08:3b:35:fc:d2:90:21:20:b7:07:4c:3e:30:
28:5a:27:1b:51:91:dc:d3:cb:8d:fd:85:d4:89:79:
45:c3:1f:8c:7d:51:cf:6b:1a:d6:62:70:80:fe:3e:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:BA:73:B2:38:1A:A5:0E:D5:27:21:4B:CE:20:9A:EA:0A:58:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l2-6c7I4GqUO1SchS84gmuoKWDE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:eb:cf:5b:45:b8:0e:71:02:99:91:ef:a6:34:56:21:92:9e:
d8:61:ae:03:a5:39:18:4e:b5:aa:29:c4:46:de:10:94:bb:5d:
07:6c:39:ab:af:53:05:43:53:47:d3:9c:49:65:d4:20:ca:52:
c7:26:e8:be:2b:1f:75:e5:8b:76:ea:7e:3c:a2:db:17:c1:e3:
8e:a3:42:b8:21:db:e3:d8:13:c9:62:05:6f:f2:07:60:26:aa:
d8:e2:a5:b2:e0:af:86:6f:dc:d5:d8:98:c7:3e:a8:0e:f8:23:
0b:a7:42:1c:93:b7:20:fe:99:ad:16:7a:1f:28:05:91:06:81:
a0:13:79:36:75:dc:f2:59:96:47:bb:ab:b7:ec:44:95:ec:b8:
90:fe:09:24:b7:78:59:12:03:57:ec:d1:11:e5:32:7e:f5:b9:
ed:4d:49:45:2f:62:11:0e:41:e4:34:bb:72:27:39:6a:77:29:
ef:b0:0b:79:33:78:04:83:70:5a:49:f6:e7:44:78:c5:c1:91:
9a:51:f3:7a:cd:61:66:73:87:17:8c:a7:36:7b:35:68:70:dd:
84:a1:b1:0c:72:fa:98:db:ac:83:d3:9a:62:60:85:32:db:e1:
36:1b:a1:79:5c:4c:8c:49:1a:47:4f:45:94:77:d3:15:57:ef:
75:2c:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org