Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r6D4RWfZJJ_vvkyTk-frkmp1h38.roa
File: r6D4RWfZJJ_vvkyTk-frkmp1h38.roa (raw, json)
Hash identifier: 4PHNa6u8ZnrfGc0Hlp5qfksV+Dg9ofoLrymRXLCeWCw=
Subject key identifier: AF:A0:F8:45:67:D9:24:9F:EF:BE:4C:93:93:E7:EB:92:6A:75:87:7F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4322
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r6D4RWfZJJ_vvkyTk-frkmp1h38.roa
Signing time: Thu 18 Apr 2024 02:22:58 +0000
ROA not before: Thu 18 Apr 2024 02:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17186 (0x4322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 02:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AFA0F84567D9249FEFBE4C9393E7EB926A75877F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:3d:f7:db:e5:e5:6d:b2:95:ee:32:d6:31:
48:95:f5:44:6b:4e:43:41:f2:ae:b8:b1:22:01:35:
71:b6:a6:d9:2e:8a:49:ee:a0:cd:80:d2:80:cb:e7:
9c:cb:e3:6e:84:5b:ed:5f:b4:0c:64:43:53:86:10:
1f:c5:32:4a:3b:e9:69:81:20:30:49:e2:be:9b:5e:
a2:21:6f:89:ee:6b:26:72:ca:58:b4:c2:09:95:3f:
b8:44:b7:b6:17:b1:95:59:fa:3f:ac:d3:29:24:81:
70:88:01:69:42:e2:7a:49:06:9d:8d:80:90:c3:73:
75:21:60:63:52:14:50:eb:8c:8d:8c:9a:d8:da:10:
74:d0:55:1f:5d:ad:9b:e2:29:3e:92:82:16:b2:b6:
e6:25:8d:20:f9:d1:53:90:f8:ea:62:ed:62:cb:f9:
29:16:fa:80:87:97:5a:a7:fb:67:1b:51:4d:03:b8:
02:ef:52:f8:8a:f0:02:dc:aa:2f:8f:f9:54:3e:91:
27:d5:6e:6e:d7:78:40:1b:88:94:07:08:2b:f8:3b:
d2:04:c7:9d:09:0d:db:fc:4d:25:58:08:95:6b:57:
4b:42:98:45:26:95:09:97:cb:0c:cc:70:ee:f6:32:
6e:0e:f4:0f:78:43:52:79:0b:2c:db:54:cc:ef:42:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:F8:45:67:D9:24:9F:EF:BE:4C:93:93:E7:EB:92:6A:75:87:7F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r6D4RWfZJJ_vvkyTk-frkmp1h38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:d9:df:2a:88:4f:0a:e0:04:a1:b3:0a:a8:75:af:ab:58:f0:
7f:30:1f:ec:c7:4e:00:3e:61:68:76:ef:86:14:b4:9c:04:72:
ee:06:c9:5d:09:86:8b:ac:1d:66:94:ad:11:53:e2:84:57:52:
e9:90:c6:ad:56:1f:3b:65:b9:52:07:22:02:9b:2d:90:2d:28:
ca:50:cd:23:3f:60:25:4c:ff:2e:92:76:af:3a:86:47:3f:38:
71:c9:44:67:c3:54:26:c0:da:bc:9d:cc:31:bc:38:97:e2:a7:
b2:2a:d3:f8:3c:44:ac:3b:6d:ad:46:b4:20:ec:43:a3:0c:d9:
ac:cd:59:97:04:35:2d:de:8b:5c:74:09:66:cd:29:52:8f:17:
e5:4c:e2:b3:55:f8:35:13:a9:28:82:33:a1:52:6f:b2:52:f8:
16:8a:56:f7:19:68:ba:dc:08:b0:50:45:60:56:2a:56:64:d8:
2e:c3:96:30:9a:62:31:c7:78:16:04:14:22:92:53:41:8f:90:
0b:f7:1f:d7:31:7c:7d:17:52:f6:c9:97:a2:e9:23:eb:a9:d5:
45:bf:32:82:4d:ff:d5:a7:94:63:96:7c:f9:90:17:5b:7b:76:
46:33:aa:99:c7:de:a4:2a:c5:b9:f8:73:c5:43:01:19:17:d1:
c8:ce:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org