Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lltEP_JHXIszz_gqxnrfi9NGOT4.roa
File: lltEP_JHXIszz_gqxnrfi9NGOT4.roa (raw, json)
Hash identifier: uCSqbEs60UjTU/AJjnaM9luSX8PWJN3WxwmovFHBqzk=
Subject key identifier: 96:5B:44:3F:F2:47:5C:8B:33:CF:F8:2A:C6:7A:DF:8B:D3:46:39:3E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B4A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lltEP_JHXIszz_gqxnrfi9NGOT4.roa
Signing time: Sun 07 Apr 2024 15:22:32 +0000
ROA not before: Sun 07 Apr 2024 15:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15178 (0x3b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 15:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=965B443FF2475C8B33CFF82AC67ADF8BD346393E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:a2:2a:7d:a6:3c:91:83:33:5a:c1:7a:5e:
d4:d9:65:c6:75:12:68:0f:60:99:ea:7f:3c:a5:bc:
44:be:4f:30:52:d6:a2:9d:7c:e6:bf:83:04:e9:cd:
47:f0:28:a5:76:52:6e:cb:bc:b6:91:94:46:4d:bf:
0c:c4:52:3f:2c:23:75:4a:08:cc:95:4c:a6:d6:07:
74:c9:77:4d:bb:31:cf:72:15:d6:b3:77:25:07:56:
39:44:45:a6:5d:12:8f:e5:d0:33:1c:84:47:f3:0e:
23:de:0d:d7:0a:15:16:4b:30:b4:66:66:3f:a6:af:
d0:50:bd:03:98:cf:21:9d:9c:d6:f4:5a:fb:87:3e:
4a:ac:fc:e3:23:dc:7a:cb:7e:95:73:99:5c:cc:51:
68:9c:89:0b:e3:b2:65:91:c0:9c:e7:ae:ef:f7:e0:
44:9b:e7:48:a5:6e:ee:0d:a5:a7:cc:bd:52:6d:e1:
31:21:e5:9e:73:f2:fe:f8:59:a7:c1:c4:6f:a7:80:
7a:c9:73:b6:8e:69:df:d1:43:bf:56:98:1e:12:ae:
41:6a:e5:ee:f8:73:f7:6c:8b:83:1e:67:3d:ed:2c:
f3:f1:4e:d0:49:c3:48:7a:b6:51:38:16:82:6e:c1:
eb:f6:ec:52:a6:a3:ce:82:d3:9d:d7:ed:af:84:f8:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:44:3F:F2:47:5C:8B:33:CF:F8:2A:C6:7A:DF:8B:D3:46:39:3E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lltEP_JHXIszz_gqxnrfi9NGOT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:68:cd:5c:08:2b:e5:34:5b:67:3b:21:00:d9:68:d4:28:0e:
63:b1:b1:40:c0:01:c7:73:54:eb:05:7c:ed:14:46:07:c3:dd:
c6:cc:46:22:91:ad:0d:8d:c5:9e:96:d6:80:d7:0d:fd:d3:24:
1e:ce:fe:d1:cf:5d:1a:28:cd:b2:56:a2:6d:57:40:43:85:ff:
69:7c:f9:c8:21:62:64:fe:15:46:85:6c:b3:40:c0:70:aa:cb:
6b:cc:92:8f:dd:35:40:37:f2:31:93:dc:c1:57:11:0f:44:54:
f8:39:df:2a:5c:2c:53:69:b2:76:cb:c5:c1:3f:0c:b7:15:59:
2c:24:32:75:54:25:1b:8a:69:21:30:8b:52:2d:35:96:26:33:
40:a0:17:33:ca:db:fe:cf:7c:72:e8:94:5f:3a:ac:a4:0b:28:
d3:f5:45:f3:f3:4a:8a:c2:08:71:94:3c:5d:51:e9:e2:ec:72:
62:25:96:49:1a:c9:5c:d5:39:cc:4f:b5:17:db:8c:b0:f4:2c:
5f:08:c7:e4:b5:98:2c:39:e4:9d:7d:1a:57:bb:20:0b:c2:30:
55:a4:af:3e:c4:d1:21:b8:51:e7:d6:3c:17:d7:10:68:c4:98:
90:07:52:bd:29:b3:14:45:72:14:3f:32:58:0b:8a:c4:ec:56:
10:6e:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org