Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qyIFYq2j0SHtHSDj1sXgihLoJCI.roa
File: qyIFYq2j0SHtHSDj1sXgihLoJCI.roa (raw, json)
Hash identifier: F1l2iuUbLrM0vf5E9AJFIWACvfe0vhwsGQZ7+pSR0fE=
Subject key identifier: AB:22:05:62:AD:A3:D1:21:ED:1D:20:E3:D6:C5:E0:8A:12:E8:24:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3952
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qyIFYq2j0SHtHSDj1sXgihLoJCI.roa
Signing time: Fri 05 Apr 2024 00:22:24 +0000
ROA not before: Fri 05 Apr 2024 00:22:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14674 (0x3952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 00:22:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AB220562ADA3D121ED1D20E3D6C5E08A12E82422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:a6:fb:2b:a3:12:5b:92:7e:ad:33:96:8a:
96:06:3a:84:61:0e:13:fc:0f:bd:56:b0:52:72:58:
5e:ef:bf:6a:b8:cb:28:64:d1:80:57:b4:a5:eb:3b:
b7:33:e2:17:56:a9:ba:1a:bd:90:db:6c:71:98:4d:
7b:00:d2:1b:24:fc:f7:bf:06:ef:d1:95:45:36:e8:
01:ae:06:30:60:50:90:9e:95:c2:49:47:72:60:dc:
42:6c:0a:f2:4a:d2:18:80:39:ca:9a:a0:2d:14:e2:
83:72:b2:27:e9:f9:c7:c0:b0:55:40:86:ac:be:7a:
32:96:85:9c:c6:9e:cb:26:13:c9:e6:73:bd:db:f9:
9c:c9:20:58:6f:9d:44:90:0d:aa:4f:77:e2:89:b3:
e0:68:81:b0:9f:ef:dd:62:aa:30:7b:85:5e:ae:d4:
03:c6:af:da:e4:67:1a:3c:db:09:71:59:bf:80:50:
0d:64:5a:33:48:64:55:94:71:9a:3f:05:e3:89:83:
b5:24:09:39:31:2e:1c:a2:b5:18:f7:cc:70:43:a9:
0a:f7:14:32:d6:25:2e:3a:12:0c:62:92:0a:1d:d9:
63:65:8e:54:fb:62:13:d5:b3:92:8c:de:2d:26:c4:
1c:fa:35:fd:5d:0c:02:5a:2e:34:a7:81:a9:7a:17:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:22:05:62:AD:A3:D1:21:ED:1D:20:E3:D6:C5:E0:8A:12:E8:24:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qyIFYq2j0SHtHSDj1sXgihLoJCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:f9:c4:70:fa:27:20:0e:0d:cf:bf:92:4c:bb:68:b8:80:5c:
e4:c7:af:7d:8c:48:24:3e:78:ad:13:f6:e5:e6:76:d7:07:9d:
7c:7c:cd:98:22:31:c6:6a:e0:39:f4:0d:fd:4a:15:2c:b9:bc:
ad:61:dc:60:a9:dd:82:11:5b:6b:52:22:ab:1a:14:87:48:a8:
21:b6:ee:35:ac:65:93:92:72:31:56:5b:eb:b9:58:d3:30:6c:
98:d8:02:9a:29:8f:7a:70:6f:96:1e:26:a0:35:d8:0d:40:90:
6d:ef:71:5d:85:cb:9c:4e:fd:b6:aa:ff:e7:bd:c3:0e:0e:55:
6a:b1:68:84:e8:12:c0:b0:97:8f:c2:96:9e:35:3f:a6:3f:10:
e3:4d:64:b2:a7:09:e9:e9:be:eb:27:bd:d2:e6:b8:83:9b:7a:
a6:7f:a5:ee:51:4c:8b:9c:de:6e:0b:bc:2c:bf:4a:59:f8:08:
76:3a:1c:80:a9:f2:79:d9:b6:0c:4c:aa:36:58:37:9b:bc:46:
1a:b1:2f:d3:6f:96:42:df:24:ce:4e:3c:68:54:a0:ba:e5:44:
59:e5:1f:91:82:b2:84:8c:14:5b:59:43:24:38:38:20:3d:57:
ba:fb:ce:45:dd:2e:b4:4d:82:c9:d0:77:af:6f:94:c5:83:ce:
db:19:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:13 2024 by rpki-client on console-ams.rpki-client.org