Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/m5t8-Nynb1ZCm6BFNE6U_lWJl0M.roa
File: m5t8-Nynb1ZCm6BFNE6U_lWJl0M.roa (raw, json)
Hash identifier: HckRfwZYBBqgCSU9/kuCoqbBwN/fi8M5kqpNqyniWgs=
Subject key identifier: 9B:9B:7C:F8:DC:A7:6F:56:42:9B:A0:45:34:4E:94:FE:55:89:97:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3666
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m5t8-Nynb1ZCm6BFNE6U_lWJl0M.roa
Signing time: Mon 01 Apr 2024 02:52:09 +0000
ROA not before: Mon 01 Apr 2024 02:52:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13926 (0x3666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 02:52:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B9B7CF8DCA76F56429BA045344E94FE55899743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:10:e6:24:74:63:18:63:a6:12:f2:39:f1:
ff:3b:4e:49:14:03:0a:6f:4f:12:51:7e:a7:c1:1e:
77:1e:7f:fa:76:d2:a5:0f:ef:71:fe:cc:f2:84:98:
cd:2a:23:f4:6e:da:b3:df:34:ad:2f:3f:01:64:64:
82:6b:25:7d:b1:41:a5:a5:f7:43:a6:d0:24:06:6b:
a7:fa:17:ba:ce:53:74:d5:c2:4b:fa:1b:44:f0:7a:
56:76:d1:4c:63:98:79:07:d6:42:e2:ed:a9:ab:a7:
a8:b3:51:f9:c4:8e:9c:dc:83:87:9f:da:5f:3d:77:
95:55:8e:ad:45:2f:48:91:79:77:3a:a2:5e:13:fd:
17:ed:9b:4a:1e:84:5e:a0:33:06:74:a5:f1:b4:76:
e8:a8:ee:c9:56:75:3f:7e:81:d8:80:6a:52:0f:ef:
89:c4:36:48:39:b2:0c:54:f1:ae:fe:9a:94:39:12:
35:66:93:9e:5e:43:11:40:47:75:7c:1a:df:3c:1c:
33:c5:c8:d5:ea:de:35:ef:34:bb:8a:4f:27:d4:ad:
41:d5:57:88:0b:0c:c5:83:8d:bf:50:5a:ab:eb:e2:
c0:f4:fa:11:e9:c1:1b:25:c1:e1:9c:c9:66:72:0e:
f4:0c:28:ca:ba:6a:19:a9:9e:ad:7f:12:3b:8b:ab:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:7C:F8:DC:A7:6F:56:42:9B:A0:45:34:4E:94:FE:55:89:97:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m5t8-Nynb1ZCm6BFNE6U_lWJl0M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:e6:75:97:a6:80:64:58:0c:f9:f2:c7:0e:e3:26:b7:49:6f:
0a:e2:a4:5e:b1:21:46:69:12:32:fb:ff:84:ff:ea:13:ee:ce:
39:1c:e9:01:b6:c4:0d:3a:9e:68:b9:ba:1a:f8:37:bb:ff:7e:
18:bc:5e:04:cb:08:df:37:73:65:00:18:3a:40:b5:fb:1e:a1:
1f:4e:2e:ed:84:ea:83:ef:9a:fb:06:bd:2a:14:a0:d4:7d:f6:
c9:51:01:7e:6f:ca:43:8a:af:3d:66:4c:14:f1:78:cb:5a:0a:
74:1c:63:ad:c7:04:5c:9e:6e:47:25:8c:9e:17:5f:46:cb:a6:
a4:d0:e0:7b:ac:6b:27:28:b5:20:e7:a7:1e:dd:05:8a:1f:49:
8f:82:cb:70:ba:6b:e9:3d:32:60:56:fd:cd:47:ad:ce:02:8a:
d8:21:45:d9:dd:2d:23:0b:1f:3f:65:68:87:a0:61:cc:15:a8:
f9:6f:c9:5d:6b:c6:50:36:04:77:6c:d8:21:e3:67:29:0d:ba:
fc:9b:f4:ad:87:9a:7d:02:b0:d6:a8:99:d2:fa:01:4b:0c:79:
02:e2:ee:5d:23:f2:64:a8:44:37:e2:9a:c7:40:0c:47:8a:25:
bf:97:19:eb:36:8e:f0:60:c4:c1:bc:2b:7a:56:10:0d:a2:27:
74:b0:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org