Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pHO2yNBjgn9X1y4D-p2Iuv_Au0o.roa
File: pHO2yNBjgn9X1y4D-p2Iuv_Au0o.roa (raw, json)
Hash identifier: eD7wdaQFICd0pO3ndqQrrCQ3mjkBJaZoeIewcEkYjNo=
Subject key identifier: A4:73:B6:C8:D0:63:82:7F:57:D7:2E:03:FA:9D:88:BA:FF:C0:BB:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52DA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pHO2yNBjgn9X1y4D-p2Iuv_Au0o.roa
Signing time: Thu 09 May 2024 01:23:56 +0000
ROA not before: Thu 09 May 2024 01:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21210 (0x52da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 01:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A473B6C8D063827F57D72E03FA9D88BAFFC0BB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:25:09:76:c8:e8:bd:1d:1b:78:de:c4:4b:
45:89:6f:17:a0:29:2a:4e:0f:63:9c:2c:4e:d1:d0:
6b:8d:dd:c2:72:9f:04:76:8f:4b:85:7a:6c:1b:5a:
5b:8d:c3:ae:a2:a2:67:f1:3e:a4:85:60:73:97:0b:
b8:b5:1c:52:91:bf:7c:d6:57:7c:47:89:80:c6:12:
67:b0:52:2f:1d:12:37:d2:4e:52:cd:08:e8:dc:f0:
8b:fa:a5:ae:e8:c4:f0:2b:cf:64:10:e5:1f:60:81:
69:81:d1:2c:d6:91:b6:86:e5:99:c3:96:f9:20:ad:
eb:21:a7:32:5b:71:ac:1e:bb:d5:2f:86:64:33:a3:
dc:02:4e:e3:8d:05:6d:bb:c3:14:4b:1f:22:00:a8:
62:a3:0a:0a:aa:b8:e7:3d:1e:fe:fb:b2:5c:fb:98:
94:eb:26:cd:45:43:75:12:0d:ca:17:50:4e:ac:d8:
18:87:5f:df:17:d7:c1:99:17:d7:c5:d7:56:be:4c:
65:c7:61:45:75:f5:0c:95:3c:5b:ff:87:be:f7:47:
2d:ae:9c:7e:f5:dc:94:37:a9:a3:a0:55:72:68:b9:
b7:8d:6c:03:38:b7:ea:4c:bb:ba:b5:16:af:50:ed:
ca:b5:64:28:b1:8b:de:68:5d:45:b4:df:2f:d2:51:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:B6:C8:D0:63:82:7F:57:D7:2E:03:FA:9D:88:BA:FF:C0:BB:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pHO2yNBjgn9X1y4D-p2Iuv_Au0o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:82:f1:32:d5:83:8a:1e:14:96:a3:31:7d:a4:e6:0a:7e:92:
db:4c:19:25:b9:02:c3:72:fd:8d:eb:a3:0f:84:d6:95:cf:a7:
ea:09:4a:0c:30:36:b5:b9:ce:75:62:88:69:7c:8a:cf:ba:e9:
fa:73:0f:62:b9:3a:ce:7a:bb:b9:01:f0:4e:12:ad:a6:73:ce:
ba:d0:1f:8b:1d:63:4f:24:33:bd:d3:6f:b3:0d:c5:64:33:77:
42:bb:a3:ab:5c:7a:9b:56:8c:20:0b:16:96:81:04:c0:98:7c:
6a:86:9d:ec:f1:8c:2c:68:63:76:47:ae:5a:eb:f0:22:17:80:
9f:07:2e:ff:bd:1c:4a:4f:64:d8:7f:b7:e9:84:e2:49:8c:85:
b7:b9:cb:54:0f:a3:14:ad:2e:55:e2:be:0a:e5:c7:1a:2d:1d:
36:1c:0e:5a:62:51:02:78:90:7e:6a:5d:6d:40:6b:77:6b:9a:
75:f8:93:e0:9e:ee:ed:cc:8d:93:0a:68:b6:2a:13:8f:74:aa:
84:de:75:37:d5:43:9f:ff:88:f8:90:da:b5:42:05:61:61:ed:
cf:39:f9:d4:39:ff:d4:f9:33:3c:8f:b1:fe:00:30:20:c0:00:
f9:13:a8:c2:d0:ce:4c:84:3f:55:67:76:ff:d5:37:65:62:f5:
31:3a:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org