Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lezSeJJRIj3WYAv5ZFizrZfnm4c.roa
File: lezSeJJRIj3WYAv5ZFizrZfnm4c.roa (raw, json)
Hash identifier: 7unCSobQOHjMM+PWdo7hXuL2Ux58jy6M4aDb+OGVTfo=
Subject key identifier: 95:EC:D2:78:92:51:22:3D:D6:60:0B:F9:64:58:B3:AD:97:E7:9B:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 576A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lezSeJJRIj3WYAv5ZFizrZfnm4c.roa
Signing time: Wed 15 May 2024 03:24:34 +0000
ROA not before: Wed 15 May 2024 03:24:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22378 (0x576a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 03:24:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=95ECD2789251223DD6600BF96458B3AD97E79B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:ad:72:2e:65:86:d6:0a:33:6a:b2:0c:9c:
ce:8d:d1:5c:5f:d6:d0:06:3a:da:a9:8e:cb:1b:31:
d0:dc:1b:13:b0:03:99:91:f0:47:04:5e:42:5d:cc:
55:92:0d:a3:42:6c:4c:e8:3d:26:4c:79:eb:e5:22:
0f:b8:4d:f3:33:40:de:19:24:cf:a9:fc:66:77:0b:
af:fd:6b:f9:e5:96:46:3f:37:65:7f:76:25:ee:50:
76:96:78:8d:fc:fd:bb:41:c8:59:2b:3a:56:1c:37:
cc:f1:e0:39:bd:50:c8:e0:c4:45:3b:f1:c7:96:09:
4d:2a:91:71:5c:b1:30:93:96:cc:f4:43:c2:0d:ac:
ce:fd:c5:8f:8a:9d:c4:88:7b:20:9a:01:c7:5e:8a:
0d:c1:63:71:ce:58:5c:c6:68:3f:60:f4:a4:4e:8d:
28:9a:f8:8b:40:76:f0:e4:27:a3:d6:33:d1:e6:cd:
b1:bd:85:56:81:b3:49:45:4e:58:c3:95:00:62:92:
38:f5:92:94:e1:f3:74:80:e5:1e:5d:92:4d:fd:a6:
c6:d3:3e:73:07:80:96:22:99:32:6a:16:f7:a9:53:
40:44:b4:49:e6:29:7a:e2:58:75:11:d3:1c:5e:ac:
6b:94:19:bd:8d:cc:1b:fe:49:9c:bf:3d:80:d2:97:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:D2:78:92:51:22:3D:D6:60:0B:F9:64:58:B3:AD:97:E7:9B:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lezSeJJRIj3WYAv5ZFizrZfnm4c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:a8:c6:f8:0d:39:d6:8e:49:a8:9d:1c:f8:a4:e2:6c:8f:7a:
10:3b:92:8c:5f:d3:fe:5f:e9:c7:5c:89:07:2d:0c:7b:3d:ad:
63:aa:0c:b9:7f:39:80:a1:df:41:ad:4e:69:43:bc:11:a3:3b:
3f:73:58:68:ef:e2:cd:c8:69:53:ad:a7:5a:7e:4c:bc:ed:15:
be:ea:8d:a1:67:6c:e7:ed:e6:f4:85:b3:d1:e0:ca:6c:b0:ee:
53:6d:18:5c:1b:62:ac:17:3f:2f:87:df:eb:22:4a:a3:dc:2f:
35:1c:bf:d4:6d:9f:26:24:05:a5:ac:92:7d:69:11:3b:34:b9:
3c:b2:48:d6:a1:03:cd:42:a5:18:91:ba:a6:0f:3d:ee:1f:48:
cf:07:c3:80:0d:e8:63:88:77:9d:e5:5d:d1:b8:7f:67:fe:31:
c5:f3:a2:9a:1c:2d:59:bb:65:02:6f:be:d7:9c:d6:28:ba:87:
f4:05:7b:2f:da:91:3f:63:3e:a7:fd:79:0b:f0:c5:19:13:32:
b7:ac:47:aa:9f:bb:eb:56:2f:04:28:ad:4b:3b:59:63:24:1f:
66:41:74:c3:49:c7:5d:66:68:38:96:d2:a3:92:02:b0:39:c6:
24:db:c2:c2:23:19:f9:eb:54:87:c3:09:8d:8c:86:81:0c:cd:
10:27:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org