Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nF102qu2lmDq0wy8sI9h3QQqH1E.roa
File: nF102qu2lmDq0wy8sI9h3QQqH1E.roa (raw, json)
Hash identifier: 4a+YDq1j5CCaziLyr5nouHR9jVSKJmnhjS8iRVWz+Sc=
Subject key identifier: 9C:5D:74:DA:AB:B6:96:60:EA:D3:0C:BC:B0:8F:61:DD:04:2A:1F:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nF102qu2lmDq0wy8sI9h3QQqH1E.roa
Signing time: Sat 30 Mar 2024 04:22:07 +0000
ROA not before: Sat 30 Mar 2024 04:22:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13554 (0x34f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 04:22:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C5D74DAABB69660EAD30CBCB08F61DD042A1F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:3b:ac:30:18:63:8f:2a:19:fd:9e:d1:aa:
b8:67:84:7a:03:ea:e1:b6:8d:0f:4e:1c:e5:3a:68:
8f:36:46:74:7d:84:db:29:0e:38:48:a5:f8:6a:88:
13:57:fe:61:9b:58:0b:7f:ad:5c:eb:0f:2f:2c:23:
cf:1b:f2:83:f8:76:0b:91:6f:b4:32:e2:e9:e5:62:
b5:51:38:88:e6:b0:a5:6f:3e:52:ac:9b:f0:71:6f:
43:7c:0f:b8:9c:16:e9:ab:ea:a9:73:b9:c6:b1:4a:
10:d2:38:d5:02:e3:c0:17:39:61:58:ac:f8:eb:db:
c9:b7:6c:d8:ff:a8:ed:ff:c3:0d:aa:db:ba:c5:cb:
40:ac:4e:2b:a5:53:66:20:22:9c:95:d6:80:28:c2:
97:c4:31:47:46:89:35:cd:64:96:d8:5a:48:ac:35:
85:84:8f:16:db:6a:4f:93:c8:78:e4:3d:b7:3b:ab:
ba:df:7b:ad:9d:e1:b0:82:94:4f:05:e8:59:a3:de:
da:ec:f5:dd:69:b6:01:6c:90:f9:bb:df:2d:b4:59:
3a:2d:75:05:28:d9:87:79:b8:b1:84:42:be:27:9e:
dd:e0:fe:34:f5:81:c1:2e:50:22:62:61:6b:ef:cd:
53:dc:b8:81:75:f1:dd:3a:a0:7a:a8:e6:d6:0e:01:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:74:DA:AB:B6:96:60:EA:D3:0C:BC:B0:8F:61:DD:04:2A:1F:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nF102qu2lmDq0wy8sI9h3QQqH1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:3c:39:bc:7c:1c:56:e5:ba:ea:6e:51:59:67:51:03:e4:78:
a0:52:1f:a8:ed:ea:ff:76:ed:3b:7c:4a:ea:0e:5b:b2:3a:d9:
ea:0b:91:3b:39:b9:e1:9d:6b:7f:80:e0:ad:9e:01:9b:f5:c3:
7b:ef:f9:7a:80:16:6d:0b:7d:e4:e7:2e:12:35:55:3c:29:64:
b8:0b:85:34:9c:2a:7b:d9:0c:1e:0f:ed:71:da:30:72:9f:2f:
a2:44:56:ca:f4:78:7a:79:53:f2:cf:53:3f:45:44:55:cc:cd:
66:a7:ca:af:d3:b5:98:24:72:62:95:61:39:88:82:5d:79:83:
58:25:a4:82:0e:a6:b3:51:4b:ab:bc:c8:00:8b:2a:0a:99:fc:
55:46:28:d7:00:bf:94:95:91:60:81:cd:d7:24:bf:bb:fa:50:
3a:b6:b6:40:b4:9b:f9:28:be:9c:d2:9b:f9:cd:62:98:cb:83:
16:1d:5b:9b:54:57:39:f2:04:c7:5d:e8:2c:a2:84:b7:ae:a5:
74:c6:2d:75:d8:14:2a:7c:47:c3:a1:ef:24:46:fe:48:dd:78:
3a:51:88:fa:d9:26:7f:92:07:6b:b9:81:c9:ce:bd:2f:02:6e:
66:2c:b9:08:5b:6d:53:f7:fc:ad:8e:42:fb:1a:5d:07:41:eb:
23:79:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org