Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/m2auba4-TpOLHjvfgM67div79nQ.roa
File: m2auba4-TpOLHjvfgM67div79nQ.roa (raw, json)
Hash identifier: eEtHqa7FWIbP6iUTIotQIkNexH5Whtj6lshlz3EjqMQ=
Subject key identifier: 9B:66:AE:6D:AE:3E:4E:93:8B:1E:3B:DF:80:CE:BB:76:2B:FB:F6:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m2auba4-TpOLHjvfgM67div79nQ.roa
Signing time: Sat 11 May 2024 21:54:09 +0000
ROA not before: Sat 11 May 2024 21:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21758 (0x54fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 21:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B66AE6DAE3E4E938B1E3BDF80CEBB762BFBF674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:72:4b:48:1f:5a:ca:3b:f4:4f:63:dc:3c:
22:50:83:10:0c:06:35:28:10:94:53:34:05:ee:fa:
5f:87:c9:94:1c:5a:c9:60:26:1a:00:5c:93:3c:8b:
e8:94:44:50:5e:4d:48:ef:0e:1f:8a:9b:08:62:bc:
e7:3a:78:b0:63:25:bd:a4:52:2f:41:88:b6:33:52:
ca:e4:d9:26:ac:e7:76:79:6e:99:ad:e1:08:1d:e8:
d7:e5:8d:1c:7d:aa:62:33:ba:cd:1c:d4:39:1e:0d:
87:81:13:0b:4b:2b:38:62:75:10:08:f8:3b:fe:92:
58:58:86:6d:09:7e:bb:4c:7a:ba:99:70:06:f2:68:
2d:e3:4a:14:e9:e0:75:56:85:9a:50:06:72:44:8b:
37:21:4c:84:46:69:cb:ea:a7:11:7f:5f:7f:de:a5:
08:7a:21:7e:b8:1e:23:62:2a:ae:c6:d6:09:fc:5e:
81:7f:93:7c:25:2f:47:bf:d8:c4:96:69:63:71:a9:
2b:40:b8:c8:9f:10:8c:ec:53:8e:00:07:26:0c:87:
cf:82:69:cc:f0:d1:40:12:73:c0:df:2b:96:5b:af:
34:e8:db:d7:6a:e7:6c:97:bf:fb:aa:0d:7c:e6:bb:
0e:8f:39:3b:5d:ce:df:5f:5f:91:3f:5b:df:01:c3:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:AE:6D:AE:3E:4E:93:8B:1E:3B:DF:80:CE:BB:76:2B:FB:F6:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m2auba4-TpOLHjvfgM67div79nQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:b7:8e:a9:2d:7c:03:a3:52:3d:9a:78:1d:30:0b:32:a7:01:
45:d4:eb:93:2b:0c:6a:12:c1:11:58:5d:fb:5b:5a:10:45:1c:
14:48:43:9f:d5:97:05:8e:50:96:17:11:9d:58:ff:ec:e8:f2:
6e:ef:19:50:d9:91:5f:e0:3f:80:ed:28:d9:fa:92:d9:12:06:
c4:c9:f7:7b:18:3e:c6:f7:b6:52:a2:e9:2d:fd:1d:2d:da:3c:
e1:d3:12:dd:94:94:da:c1:7a:dc:22:62:78:cc:72:f9:37:04:
1d:d0:88:c0:77:91:6f:e4:56:b9:44:17:a0:a0:c4:52:f3:12:
1e:ec:91:a6:a8:c8:ef:a9:da:3b:63:56:ea:62:6c:07:18:f9:
fe:a1:84:f5:42:a8:06:6a:0c:19:3b:40:57:0a:2b:bb:1f:b8:
1f:3a:5d:85:b2:d7:a5:d4:65:f4:11:15:01:1b:b7:66:01:06:
be:fa:de:be:c5:1c:5b:3d:a2:57:88:c5:00:92:10:bb:6e:30:
28:76:83:48:6a:d1:42:f8:4f:30:06:d7:f0:ef:3d:0e:9a:85:
75:4b:73:83:fd:32:1f:51:37:d7:c0:99:3a:be:31:e9:38:5d:
f3:3c:ec:b3:aa:99:98:dc:a4:1d:5c:67:dd:68:42:13:92:9d:
b4:4f:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org