Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oER2a1TV7hL_gcGZnxV8MS3vreY.roa
File: oER2a1TV7hL_gcGZnxV8MS3vreY.roa (raw, json)
Hash identifier: B6CxFKSpJuCBeVrMrd56Tutpf6g+yKhKeYMckFZuPkI=
Subject key identifier: A0:44:76:6B:54:D5:EE:12:FF:81:C1:99:9F:15:7C:31:2D:EF:AD:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oER2a1TV7hL_gcGZnxV8MS3vreY.roa
Signing time: Wed 17 Apr 2024 12:52:58 +0000
ROA not before: Wed 17 Apr 2024 12:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17078 (0x42b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 12:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A044766B54D5EE12FF81C1999F157C312DEFADE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:4a:69:bf:61:cf:ab:de:ec:42:e3:51:02:
ae:e5:ef:ef:5a:01:9c:b7:ab:22:34:f6:7d:ce:43:
18:16:0e:24:9e:b8:d1:90:e2:14:12:fc:91:05:57:
1b:9b:80:d8:a6:cd:f4:5f:63:28:25:1d:9f:ae:b2:
ed:7d:d5:70:eb:f2:b6:d7:60:79:e5:d4:4d:63:32:
be:43:45:02:29:74:87:1b:55:58:a3:f3:b6:66:bb:
cd:3a:76:b0:cc:57:77:db:5c:6a:bb:ef:ac:7a:c6:
3a:f6:39:cb:96:39:88:dc:5c:28:57:e4:25:f2:c3:
9a:21:ac:eb:5b:a5:83:51:23:74:3a:24:aa:3a:dc:
ad:4e:0f:84:1a:0c:36:07:da:c4:2a:cf:5e:72:49:
ec:17:78:b2:45:46:47:5e:6b:53:34:72:86:67:42:
f1:60:3c:bb:5c:84:b8:76:b6:05:b2:83:ea:bb:d0:
96:7c:cd:d5:43:bd:3d:68:93:6f:17:36:28:b9:f7:
e6:b4:3f:68:6f:85:4f:7a:47:8a:88:e8:5a:80:11:
f2:8e:3c:b0:7f:a7:6d:23:18:90:78:2f:01:86:d6:
8f:91:04:4e:2e:5a:f1:5c:18:5b:25:f8:cd:a7:e0:
3d:c5:69:68:67:a4:b0:b0:8a:85:ce:66:1a:ea:7c:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:76:6B:54:D5:EE:12:FF:81:C1:99:9F:15:7C:31:2D:EF:AD:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oER2a1TV7hL_gcGZnxV8MS3vreY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:01:3a:09:cd:5d:13:44:45:ed:2f:89:bb:33:5b:c8:57:19:
b8:6d:a4:d3:c3:f8:9d:9e:de:8f:08:93:5d:99:77:ca:95:64:
ba:c5:6a:b5:49:5d:1d:f4:fa:87:84:6a:7b:06:cb:84:47:10:
05:b4:0d:97:ea:35:ee:6e:1a:91:0f:f5:18:fe:05:fe:0b:b1:
80:55:96:47:19:96:60:05:d8:9d:ac:1d:2a:67:1c:3e:18:47:
2b:d9:35:f4:ba:05:86:69:48:a8:db:c3:d0:7c:24:ad:3b:f4:
ec:de:d1:e3:7d:eb:1e:6b:1f:17:ec:5c:64:50:d6:06:71:f1:
60:a5:60:ce:a4:15:b7:cb:15:1b:cb:4d:0b:d7:8f:4a:fe:69:
e3:b9:a3:cb:97:f2:99:da:a4:95:bc:e7:78:76:2c:72:5c:fb:
b6:ed:59:a2:1b:83:83:45:ec:e8:db:12:b7:82:80:28:26:63:
91:cf:37:92:b0:ab:ea:7e:da:29:ad:f8:87:0e:9d:0b:58:ae:
c5:d7:e8:78:ac:96:9c:b8:3c:56:b7:5b:98:16:1e:1b:4c:89:
8c:12:25:b3:8c:87:da:96:ac:22:1c:fa:4b:2b:24:ac:27:6d:
7c:5f:33:10:41:68:94:cb:4a:21:f6:be:15:9a:35:e3:ec:ae:
4e:83:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org