Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/p13oWpQAV-8E6esF8Ii0Z3FznQo.roa
File: p13oWpQAV-8E6esF8Ii0Z3FznQo.roa (raw, json)
Hash identifier: 78cH+larnw/zjHqZNYqhl89V9XC1Hdzg2NIq7UbcEAU=
Subject key identifier: A7:5D:E8:5A:94:00:57:EF:04:E9:EB:05:F0:88:B4:67:71:73:9D:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4082
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p13oWpQAV-8E6esF8Ii0Z3FznQo.roa
Signing time: Sun 14 Apr 2024 14:22:53 +0000
ROA not before: Sun 14 Apr 2024 14:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16514 (0x4082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 14:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A75DE85A940057EF04E9EB05F088B46771739D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:16:b9:7a:b4:78:85:44:2e:1e:03:99:68:
12:38:d6:6b:9f:1a:9d:bf:31:4d:32:93:a7:68:fa:
3a:fc:54:db:ac:fc:72:f1:f7:32:bb:6d:27:f2:da:
57:54:5a:ad:5c:b2:00:e4:88:3d:5b:43:53:cb:b6:
19:ce:79:6e:98:e4:27:c9:fb:56:38:86:db:ad:1d:
bf:3a:3a:08:19:db:74:5b:df:bd:24:af:82:df:be:
3a:47:c4:ff:d5:59:48:08:e8:c3:20:e7:13:84:54:
8b:fc:2e:99:65:5f:55:09:48:e4:95:6c:2a:61:47:
db:ce:db:50:fe:40:c3:01:94:8f:72:5d:49:b7:0b:
59:99:40:b0:79:4a:e8:2a:74:ab:b3:02:de:22:9a:
25:40:c0:71:f5:15:bb:ae:40:7b:2f:4f:45:4d:1b:
8e:1a:29:83:40:f6:18:3c:a6:0c:1b:46:4f:6b:82:
97:3a:9b:35:4a:4e:99:e3:d0:d8:91:6a:50:2e:1c:
eb:f8:4b:68:a1:ed:ca:6d:b5:ea:26:dc:36:24:a7:
39:83:b1:54:ad:bb:dc:71:4d:c8:d4:bc:cd:ec:34:
ad:15:45:91:a9:b3:d0:24:76:5b:d5:67:4e:9a:9a:
9b:4e:3f:29:41:4d:2c:09:d6:0d:e3:a1:2b:fb:51:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:E8:5A:94:00:57:EF:04:E9:EB:05:F0:88:B4:67:71:73:9D:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p13oWpQAV-8E6esF8Ii0Z3FznQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:1d:06:73:4b:88:d3:ce:15:c0:d5:7a:6d:a3:72:7d:ff:41:
31:9e:06:24:b8:87:40:c8:04:49:53:b7:d1:ca:53:86:b6:01:
da:49:4c:49:87:e9:bf:63:34:27:f2:1c:1d:69:9d:57:1e:5a:
6b:dc:fa:19:ac:6e:fe:37:aa:f6:f7:bb:9e:16:ad:c0:f6:8d:
f3:ec:36:33:2f:82:89:5f:9f:a0:67:2a:88:0a:10:85:67:3d:
ba:f4:b0:14:8e:00:41:d9:40:08:f3:a8:db:d7:d0:63:23:33:
25:a7:53:d8:98:f9:fc:16:79:c0:c0:82:79:59:f2:f3:4e:e4:
d9:c1:1e:e3:e5:49:c2:ff:40:f6:2d:37:c0:50:f6:64:57:7b:
81:8b:8e:06:dc:cd:68:79:d8:7f:d7:51:c4:4a:89:67:20:2d:
00:fb:b2:01:d5:ce:90:5a:6d:39:78:71:2e:6c:88:44:32:60:
cb:7a:80:06:47:40:bf:d4:2e:e2:fd:3e:fe:de:84:ac:5a:fb:
48:87:fc:c9:f6:67:a9:60:68:88:ed:d2:0b:59:38:2a:61:40:
b5:52:14:48:65:44:17:98:f6:66:7a:9c:77:a0:f1:ff:31:c9:
91:ed:37:d4:1b:99:63:c6:c9:e7:64:b7:84:00:22:4b:74:e3:
3d:65:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:10 2024 by rpki-client on console-ams.rpki-client.org