Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nC2feT2U4gObMwH3Gt08Sk0ItRM.roa
File: nC2feT2U4gObMwH3Gt08Sk0ItRM.roa (raw, json)
Hash identifier: /EZpp91ax4tP4YvlspQ2RtmPhkA79XhtX9u19xMRpEE=
Subject key identifier: 9C:2D:9F:79:3D:94:E2:03:9B:33:01:F7:1A:DD:3C:4A:4D:08:B5:13
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3672
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nC2feT2U4gObMwH3Gt08Sk0ItRM.roa
Signing time: Mon 01 Apr 2024 04:22:17 +0000
ROA not before: Mon 01 Apr 2024 04:22:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13938 (0x3672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 04:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C2D9F793D94E2039B3301F71ADD3C4A4D08B513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:42:3e:29:81:4c:f9:4e:d3:48:c3:99:18:
d6:47:65:0a:c6:aa:4c:10:87:e0:af:3b:dd:18:04:
fb:5c:01:6c:6f:d2:d4:bd:0f:1e:39:ba:05:64:85:
20:41:63:a4:95:7b:b9:3c:c0:be:83:7f:73:5a:22:
39:80:fc:01:c4:ff:3b:5a:3d:d5:47:9e:b9:0d:3c:
05:90:3b:b4:e4:ad:de:e8:25:e4:83:6e:be:dc:48:
24:45:a9:06:8f:ba:ca:ec:c2:86:09:c5:d5:08:a1:
07:48:4f:46:30:60:82:f5:ee:db:03:74:5b:80:74:
af:ac:32:0b:71:d0:35:82:6a:06:55:dc:38:e0:17:
8a:92:90:b4:f0:87:bf:4c:c9:14:cb:fa:39:74:b4:
1b:3b:de:5f:d0:23:2d:7f:3a:60:51:04:5e:2b:fa:
76:ea:dc:9d:c8:ab:a8:79:1a:26:ef:2a:19:ee:df:
91:81:9f:93:eb:e9:14:8b:46:bc:f6:5c:7f:f1:7a:
2e:ad:20:a7:82:57:9a:5c:f2:3b:11:0f:43:c1:1f:
dd:33:a2:a5:83:e4:e3:4f:06:21:1e:bd:81:65:c9:
7d:42:be:69:31:eb:94:15:da:dd:82:bc:d3:67:4c:
9f:c5:6e:a6:06:05:19:8b:c5:7b:4e:ca:b6:f2:63:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:9F:79:3D:94:E2:03:9B:33:01:F7:1A:DD:3C:4A:4D:08:B5:13
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nC2feT2U4gObMwH3Gt08Sk0ItRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:be:d5:59:1b:8d:1e:a4:09:d3:8f:ee:99:56:64:e8:cc:16:
d7:d9:2c:fd:1b:bb:f3:60:4b:f2:d7:e3:93:3c:58:54:3f:d9:
0d:76:5e:3c:1e:49:aa:d3:33:bf:bd:40:4e:b5:e3:b1:57:9a:
43:15:74:44:43:af:f0:f8:8d:95:8e:d5:ba:d3:6d:82:55:8b:
d5:31:26:82:20:7b:63:c9:94:7f:74:db:b8:b8:27:b5:48:86:
8c:4d:e1:2e:ea:d7:71:93:d2:df:5b:36:65:eb:56:33:e7:9d:
56:ba:a9:4b:6b:b3:b3:f4:74:b3:b0:03:7b:3d:72:0a:fc:6a:
42:dc:aa:08:ac:fd:16:fd:f0:c0:e0:ba:94:76:d8:6b:e5:0c:
f9:86:e4:c5:96:79:4c:41:c1:8b:69:f8:d4:b5:ba:20:d0:cf:
c9:60:fc:5d:05:ba:b4:f0:b4:f0:4f:de:90:8a:75:54:1a:14:
ea:55:9e:89:51:61:86:d0:22:33:14:03:9d:26:ba:9a:01:96:
81:a0:de:11:ce:ef:c9:95:ee:aa:04:1d:6e:94:01:d6:c2:5f:
f7:06:9c:34:6a:f0:96:e2:36:d6:3b:69:6f:82:9e:23:ab:8e:
9e:ba:fe:54:70:36:d3:68:15:c5:96:27:ca:ec:85:5a:51:f4:
8a:10:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org