Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pk6cKU_oNjjwEWIwf436rnbmXUM.roa
File: pk6cKU_oNjjwEWIwf436rnbmXUM.roa (raw, json)
Hash identifier: yBdWHo5HwMpalTUcdxaFlkTGHSq6dvHfB1Px6PoHiKU=
Subject key identifier: A6:4E:9C:29:4F:E8:36:38:F0:11:62:30:7F:8D:FA:AE:76:E6:5D:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5782
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pk6cKU_oNjjwEWIwf436rnbmXUM.roa
Signing time: Wed 15 May 2024 06:24:17 +0000
ROA not before: Wed 15 May 2024 06:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22402 (0x5782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 06:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A64E9C294FE83638F01162307F8DFAAE76E65D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:9c:7e:66:1d:13:de:ce:9b:15:d5:6f:80:
3f:19:ee:a7:4b:5c:d9:bf:df:ef:c6:71:24:7d:35:
12:49:56:e3:c5:88:a2:a0:2d:08:42:be:27:c3:de:
17:48:6c:39:53:16:95:18:6e:8e:e1:55:ae:65:35:
bb:28:26:3d:37:6c:e2:2f:b1:1a:84:0b:9f:81:c3:
cc:10:51:a3:23:0c:a3:88:40:b0:d9:0b:c7:9c:9a:
7e:52:7f:c1:41:28:f1:27:3c:40:2f:a9:7a:4d:55:
e7:a6:00:44:cf:ac:e9:4c:31:9f:51:12:87:8b:11:
5c:2e:70:08:01:b9:09:15:00:1a:cd:cf:dc:98:59:
47:69:e3:ef:91:b1:88:fd:be:1c:18:00:f7:7f:b0:
a5:76:6a:45:c0:7d:3f:d1:a0:10:51:a3:7c:e8:ef:
2b:13:fb:ba:67:68:90:d4:29:26:c1:94:53:7a:a4:
3c:18:31:d8:c1:ee:bd:37:94:9d:d5:b9:5a:a5:33:
2b:ba:5e:06:1e:94:72:f2:22:a3:f2:b5:7e:da:da:
24:81:03:96:4a:af:0b:92:18:0c:f0:06:df:38:c0:
33:27:b9:da:58:a5:0a:20:a3:bd:17:31:9d:ec:fd:
5e:65:5a:ae:03:c7:6a:f9:1b:cc:e3:1c:5d:d2:6f:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:9C:29:4F:E8:36:38:F0:11:62:30:7F:8D:FA:AE:76:E6:5D:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pk6cKU_oNjjwEWIwf436rnbmXUM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:38:64:73:ca:1e:cf:fa:d4:49:56:8c:d6:16:2b:54:1b:22:
2c:71:66:03:ba:46:6e:37:ee:87:9d:30:8e:ed:2f:f0:85:cc:
00:22:64:c7:51:7a:f0:ae:79:a9:72:ad:5d:0e:3c:7f:13:a6:
37:32:90:33:7d:cd:b2:51:8d:c4:7c:25:30:f4:66:f9:ff:1d:
17:da:7c:ec:a2:43:cb:e1:19:70:c5:fa:9b:9f:6f:2f:ee:37:
af:23:4f:04:6d:06:28:3e:3a:24:44:e6:9a:ca:ad:33:46:b9:
57:cb:36:d3:b2:47:8d:b3:ea:26:e5:58:67:2f:21:44:c2:83:
98:3f:4c:59:e1:fe:ae:c6:22:b7:50:29:9c:c4:5e:9b:f6:d1:
a8:cd:b8:43:43:75:4e:f7:d7:a8:f6:cf:53:ee:ae:fa:9a:20:
17:20:48:78:b4:89:24:9b:a6:c2:27:c4:c5:d5:63:e2:be:c8:
12:30:75:12:2c:37:d7:7c:9c:2a:33:a2:61:10:75:b3:99:76:
22:1f:54:ff:17:ad:42:db:b4:ad:1b:2b:0b:9e:08:5f:26:43:
a0:87:e9:a3:13:c0:cd:f9:c5:55:21:f7:9c:c5:36:e8:3f:05:
58:62:f0:d1:28:3c:5f:4f:71:ad:24:22:88:5f:5b:a2:5e:ce:
94:a4:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org