Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/m7COeG8nCFOZ5BfwbkczL0YflUg.roa
File: m7COeG8nCFOZ5BfwbkczL0YflUg.roa (raw, json)
Hash identifier: CKi5ES0QbrNT1Uz8YxrPI3KRqr0Tplu/slTlYZAw/LQ=
Subject key identifier: 9B:B0:8E:78:6F:27:08:53:99:E4:17:F0:6E:47:33:2F:46:1F:95:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 340A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m7COeG8nCFOZ5BfwbkczL0YflUg.roa
Signing time: Thu 28 Mar 2024 23:22:04 +0000
ROA not before: Thu 28 Mar 2024 23:22:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13322 (0x340a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 23:22:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9BB08E786F27085399E417F06E47332F461F9548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:3a:49:dc:7a:2d:c1:22:16:98:a4:18:f1:
64:c9:b4:b9:00:8c:ce:2e:05:cd:12:c0:d0:0e:d3:
67:0b:b7:62:dd:15:e0:8e:3b:45:e1:5c:7f:7a:91:
ed:eb:3c:f0:4f:32:d7:e9:02:e2:32:00:7b:6f:ab:
0e:87:68:64:b7:38:97:f6:85:08:46:b2:20:09:bc:
ef:27:e2:55:bb:06:93:ac:a0:11:fe:f1:70:53:d5:
e7:08:32:2b:1d:52:a7:6e:46:62:54:97:bd:b4:1c:
8a:76:de:c6:c8:80:b9:4a:e0:29:a5:78:72:ff:47:
04:ad:dd:b4:f8:9c:42:b9:19:7e:54:4c:6d:13:7b:
3a:41:64:26:d6:61:62:93:e8:4d:75:e6:76:26:66:
58:dc:94:ff:8c:0b:fd:40:7b:18:42:b1:8c:e5:fa:
f8:f3:8a:04:dd:d3:4c:cb:c8:a2:47:bf:f8:a5:29:
b6:55:be:d8:3a:07:bc:a5:dc:ff:bf:a9:a8:a1:30:
99:32:38:21:5d:9d:5e:5a:98:9b:14:aa:f3:c7:b0:
85:87:4b:c8:ea:ab:02:e7:f8:36:e7:02:f5:78:e7:
78:53:7e:56:34:29:70:3b:15:5d:50:c9:50:a7:f0:
f1:68:a5:e0:01:15:d6:41:6f:e8:70:fd:f9:7e:2a:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:8E:78:6F:27:08:53:99:E4:17:F0:6E:47:33:2F:46:1F:95:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m7COeG8nCFOZ5BfwbkczL0YflUg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:cc:7f:f4:77:fe:60:37:2b:3a:77:1a:9c:ac:f9:29:59:06:
aa:50:66:f7:03:c4:c2:39:44:d8:d6:f5:4b:eb:4e:b0:c0:c0:
1d:13:e0:1b:c6:8d:24:a9:e7:bb:58:72:7b:48:5e:37:87:34:
c7:9e:54:61:4a:38:da:fb:17:07:cc:0f:00:9d:f1:65:20:7d:
c7:c8:20:88:b7:11:43:b3:87:63:68:a2:5d:9d:4b:66:14:65:
0a:30:3b:6b:4e:b2:ed:ef:28:1e:21:1b:03:0f:ee:72:0a:97:
9a:71:5e:1d:fb:47:1d:2f:6b:91:80:ff:79:fd:82:b2:a5:7d:
d6:ca:a9:81:2d:df:dd:a6:3c:84:7b:6a:fe:f7:73:ba:a2:28:
e3:c1:6c:95:3a:13:4d:04:bb:bf:3c:86:72:b1:de:49:8b:c4:
ad:4a:18:d8:2b:bc:ae:78:8d:2e:2f:46:df:ea:71:66:5a:0b:
76:2d:77:d3:13:77:65:6b:7f:f9:f3:3b:ef:b2:b5:86:5f:69:
f7:24:f2:fd:d8:62:8e:3f:50:4f:44:40:0f:48:cf:78:e2:3e:
66:64:18:c7:d6:b2:0b:35:91:78:e2:3a:84:6a:9a:c7:f3:df:
d5:24:4f:06:62:1f:13:ee:21:67:55:c0:ea:45:55:97:27:06:
14:45:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org