Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lFDdXbgE0VvzbPXAIwnhJtwCDoU.roa
File: lFDdXbgE0VvzbPXAIwnhJtwCDoU.roa (raw, json)
Hash identifier: VUJ4MVb/UB8qCe+GGXyWWtC6Zi3ekvg+NgGIC5xoR/g=
Subject key identifier: 94:50:DD:5D:B8:04:D1:5B:F3:6C:F5:C0:23:09:E1:26:DC:02:0E:85
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3662
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lFDdXbgE0VvzbPXAIwnhJtwCDoU.roa
Signing time: Mon 01 Apr 2024 02:22:38 +0000
ROA not before: Mon 01 Apr 2024 02:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13922 (0x3662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 02:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9450DD5DB804D15BF36CF5C02309E126DC020E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:45:bd:46:3b:e3:c4:6a:95:75:96:79:e0:
fd:13:a9:d9:d9:98:6a:fd:f2:49:bf:39:57:f2:66:
f0:f5:da:a6:96:44:85:cb:11:b0:8d:18:5d:ba:64:
c8:b2:93:ba:fd:6f:0f:56:80:58:ee:bd:6f:08:ca:
e1:b5:51:46:8e:7d:83:1d:71:30:6e:91:5e:02:21:
54:75:1b:4c:7c:02:98:24:f6:e7:99:7b:c1:ab:39:
2b:10:40:c8:8c:8f:88:a5:22:4e:c5:75:b9:8a:ac:
ed:c7:ba:46:ba:5a:fe:06:5c:b5:1c:25:3f:57:31:
ea:90:7d:9e:0e:60:74:7b:26:8a:17:da:d1:a2:50:
1b:44:1b:2d:8c:4d:08:d8:6c:f5:50:f0:39:64:ad:
55:e0:0f:b3:03:4f:5d:48:4a:64:2a:e8:86:8b:60:
24:36:a8:25:c8:31:c1:68:6f:bc:21:98:57:73:50:
b6:31:22:13:3f:15:a4:54:32:71:c7:9f:35:7e:38:
55:94:77:35:e5:9b:d4:33:91:d1:42:2d:ae:51:14:
19:b8:10:b4:7c:7b:1f:d8:20:57:b4:92:ff:ab:08:
7f:12:5e:c8:27:09:4d:1d:14:5b:81:30:c2:c8:ab:
1b:93:13:c0:b0:03:e4:81:a6:5d:a3:d9:ac:61:57:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:DD:5D:B8:04:D1:5B:F3:6C:F5:C0:23:09:E1:26:DC:02:0E:85
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lFDdXbgE0VvzbPXAIwnhJtwCDoU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:76:0d:a9:3b:03:36:ac:7a:c8:a6:26:ed:c8:99:fc:35:a9:
ff:24:ad:84:27:65:ea:c5:26:c1:c3:6d:34:30:6a:05:d5:cd:
e3:5d:ea:3f:ac:e3:da:14:a0:ed:ad:17:e2:0b:ce:1c:3c:f3:
71:63:db:00:34:8e:93:67:ce:08:47:a0:37:83:ca:f0:74:9e:
20:93:ce:ef:90:45:20:f4:01:70:7c:97:1e:39:5b:e7:c2:aa:
c2:3b:22:b4:d1:84:81:8c:a3:1c:be:95:9e:66:64:54:a3:2d:
b9:2a:b1:39:4a:1e:7d:0b:f4:73:12:53:53:ee:1d:df:5b:6a:
56:79:84:0b:d0:57:44:a2:81:28:7c:28:ab:08:d0:45:91:66:
fe:4f:73:6d:e8:d4:d3:69:b1:56:27:a2:ec:54:f3:f4:8e:97:
c3:eb:1d:38:d8:3f:04:8c:0a:5f:b1:c6:5b:96:15:8e:40:27:
af:05:e9:f3:64:34:cb:2e:ad:71:01:3a:1f:21:c2:d1:75:39:
3b:4c:9a:00:62:a1:59:2c:99:93:b7:a1:7d:2e:14:94:1f:bb:
0c:ea:89:d9:08:74:6e:43:a1:dc:7f:96:75:3d:14:ad:db:14:
25:79:7b:59:a6:c1:39:03:0f:7d:a5:95:91:08:dc:6f:ed:2f:
b9:e6:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:06 2024 by rpki-client on console-ams.rpki-client.org