Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mPPQr7lYFrtwQHFsVq4-rYIYsG0.roa
File: mPPQr7lYFrtwQHFsVq4-rYIYsG0.roa (raw, json)
Hash identifier: wg8+t+k6pOF4xq4xNJhdEafl2noKhdlcxl2314Qcx7s=
Subject key identifier: 98:F3:D0:AF:B9:58:16:BB:70:40:71:6C:56:AE:3E:AD:82:18:B0:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5092
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mPPQr7lYFrtwQHFsVq4-rYIYsG0.roa
Signing time: Mon 06 May 2024 00:23:49 +0000
ROA not before: Mon 06 May 2024 00:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20626 (0x5092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 00:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=98F3D0AFB95816BB7040716C56AE3EAD8218B06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:40:44:b0:18:4b:06:73:1c:53:35:89:f6:
f8:64:74:09:1f:1a:d3:48:8d:ca:52:5c:78:a0:85:
eb:a1:d8:b0:71:0b:a0:71:6f:f4:ea:d0:9c:59:a4:
23:9c:55:cf:24:6a:85:af:06:62:4d:c1:c4:de:39:
5f:1e:92:f4:b0:ff:67:94:5b:2b:df:1c:fe:2a:1e:
67:37:c6:45:2a:72:b8:95:35:9a:dc:5c:42:67:96:
5c:46:d0:a9:86:da:43:68:a7:50:4f:66:6a:1a:b3:
8b:7c:45:e8:35:3a:a9:9a:b5:ce:74:91:0c:27:cb:
08:10:bf:fd:47:0c:84:e8:da:20:bd:d3:4d:08:2b:
70:a4:aa:fd:ae:63:c6:75:16:ed:db:e1:63:7f:aa:
45:48:aa:de:93:54:96:cf:52:aa:04:11:d3:c9:23:
4e:db:50:36:a5:67:a4:ad:eb:29:30:fd:85:7b:ed:
c0:d5:b9:95:9d:61:92:e9:85:ea:0c:33:43:44:0c:
07:6d:bd:be:07:fd:d3:59:9c:6d:5c:0c:fe:d9:70:
6a:b0:f0:8e:66:ba:86:8d:f4:3e:19:91:ad:68:25:
55:3f:f4:62:5d:ea:77:b5:89:f7:a8:e8:a1:f7:0a:
46:0c:2a:b5:a2:9e:4e:0f:d7:6e:58:06:88:4f:bf:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:D0:AF:B9:58:16:BB:70:40:71:6C:56:AE:3E:AD:82:18:B0:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mPPQr7lYFrtwQHFsVq4-rYIYsG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:bc:f0:f2:24:49:b5:d4:ef:21:0b:39:a3:74:26:0e:36:fd:
d6:68:2d:1d:c7:58:94:95:9c:f7:37:de:d2:a8:9a:9a:76:60:
19:90:77:6e:78:66:f3:22:d1:35:54:c4:9a:9f:87:3f:65:92:
8a:b1:e2:30:75:c4:8e:04:57:fb:ff:82:56:6b:2a:a4:ca:fa:
52:04:7b:41:9d:31:e2:08:2b:81:8b:13:48:aa:c4:82:73:2c:
cc:60:ac:34:0e:86:03:38:f0:50:7f:50:08:db:16:10:85:e4:
e4:4b:16:9b:cd:45:87:76:b3:e1:ee:02:22:ba:21:59:8f:86:
48:c6:7b:ab:c9:64:4b:27:18:cb:64:a6:1a:73:64:2b:f5:62:
9a:fd:80:54:43:34:70:18:12:76:84:2c:4c:cc:55:a3:25:58:
11:e8:2e:08:0c:21:5e:10:14:14:a1:39:b4:87:d5:02:ae:07:
40:74:f7:2f:94:2e:58:91:92:33:50:c5:33:63:ce:fc:2e:a4:
3a:96:ae:19:bb:b9:71:be:0e:de:77:bd:c0:e8:1c:40:50:c9:
11:19:75:66:5d:e1:b0:b9:b8:20:c6:6c:70:8f:58:a4:fd:61:
ea:37:42:35:9a:90:c7:08:bc:06:c3:99:64:b1:f8:8c:3c:26:
fa:20:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org