Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qJv_Cvmx4wg_eR11VUA8ERJpu64.roa
File: qJv_Cvmx4wg_eR11VUA8ERJpu64.roa (raw, json)
Hash identifier: IIRe2s06kmkihkmfdRrXL6BdgmQkiqDtfrOUU7WcT/k=
Subject key identifier: A8:9B:FF:0A:F9:B1:E3:08:3F:79:1D:75:55:40:3C:11:12:69:BB:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qJv_Cvmx4wg_eR11VUA8ERJpu64.roa
Signing time: Fri 10 May 2024 02:54:28 +0000
ROA not before: Fri 10 May 2024 02:54:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21414 (0x53a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 02:54:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A89BFF0AF9B1E3083F791D7555403C111269BBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:ba:e2:8d:e2:85:77:41:6d:3b:6e:72:0f:
54:14:dc:f0:37:0e:03:e3:8d:75:97:c3:95:74:f7:
20:08:52:05:3a:5a:eb:44:36:cd:06:b7:bc:a2:54:
94:78:97:a0:ff:fe:2e:21:ea:86:8e:9d:64:49:08:
f4:c3:af:f8:0b:03:f5:7e:e5:92:8f:83:80:cc:4e:
81:8b:00:76:f4:e9:39:a4:10:2e:d4:ad:16:e4:7d:
24:25:c5:e8:c6:e4:a7:cf:99:11:02:cd:a3:43:72:
e8:9b:3a:e5:64:b3:86:02:ce:21:cf:0a:e6:f1:92:
0d:c3:b0:18:b7:f0:5c:ed:59:d8:5e:10:12:b1:5a:
03:08:0a:32:7b:64:8d:a6:55:36:2d:00:17:30:df:
8f:08:79:f2:b7:90:c6:5e:7e:c0:3e:9b:8f:35:d2:
84:44:ec:bd:1f:98:6b:89:08:07:b6:e3:c0:e2:ab:
cf:73:3f:36:bf:b0:22:7a:21:6c:50:ba:77:f2:c4:
5c:ff:49:d6:ff:55:cc:54:4f:74:c3:bc:00:9e:f1:
7f:23:14:68:8c:4b:98:d4:db:33:11:c3:9a:b6:42:
e1:8a:a4:5e:7b:cc:53:44:4d:81:05:ee:e1:9c:8c:
f3:d5:f3:42:ee:33:ca:e4:0a:7b:44:9c:be:0b:94:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:FF:0A:F9:B1:E3:08:3F:79:1D:75:55:40:3C:11:12:69:BB:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qJv_Cvmx4wg_eR11VUA8ERJpu64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:6b:bf:ee:75:e2:63:79:4b:46:71:49:21:6d:59:8a:3a:e1:
11:6a:1e:77:32:a4:8a:eb:75:be:94:88:90:9b:d4:2d:60:b5:
49:2d:38:be:be:95:2c:22:94:e9:e2:e4:09:f3:05:91:e1:5b:
cb:86:57:f3:f3:0b:ca:95:cc:b2:c8:4b:4a:15:7e:91:64:36:
41:be:31:13:65:5f:7d:7c:74:ab:88:b5:53:05:98:7d:ca:77:
47:03:3d:ad:1f:a9:f2:0d:08:5a:c2:ab:1c:cf:27:f8:84:87:
d1:bf:03:39:37:fd:4c:0f:38:58:e8:2e:27:0b:94:a9:bc:a6:
55:00:63:72:a0:c5:97:f0:2c:84:fe:08:62:29:67:07:ef:3c:
9b:45:87:a3:33:c9:d7:52:75:e9:bd:a1:a4:e0:ac:3d:dc:9f:
21:60:83:a5:31:24:d4:fc:70:58:21:e9:1c:fc:77:1f:e7:51:
ac:54:c0:53:44:e0:97:b8:ad:f6:e5:1f:71:c4:e3:cf:48:53:
c0:a2:57:4d:e3:71:c2:e6:c9:1e:ca:16:f0:1b:9f:f1:5d:4a:
37:98:f2:d2:6e:ac:a9:1e:4d:9d:04:53:b9:e7:d9:e9:00:f8:
21:c8:28:00:86:cc:1e:33:3c:23:64:b4:22:f7:65:69:45:17:
65:b2:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org