Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rMF8WfI8vPgZU7tedt4VkdBhzrQ.roa
File: rMF8WfI8vPgZU7tedt4VkdBhzrQ.roa (raw, json)
Hash identifier: Y/G2y49epttO9iMkqs2DcjOEXfTfLXRMSWuvi7S9/Rw=
Subject key identifier: AC:C1:7C:59:F2:3C:BC:F8:19:53:BB:5E:76:DE:15:91:D0:61:CE:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E3E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rMF8WfI8vPgZU7tedt4VkdBhzrQ.roa
Signing time: Thu 11 Apr 2024 13:52:45 +0000
ROA not before: Thu 11 Apr 2024 13:52:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15934 (0x3e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 13:52:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ACC17C59F23CBCF81953BB5E76DE1591D061CEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:a8:28:15:a7:d0:d5:0c:80:d3:80:dc:5d:
6d:3c:7e:89:93:6f:79:e4:1c:e5:82:11:fe:40:65:
9d:3a:bd:6c:58:3b:7c:e8:87:ae:fa:53:49:b0:45:
6c:5c:98:47:0c:db:68:78:56:37:ea:7b:f6:1b:e5:
1f:ab:d3:78:79:86:1d:a3:17:39:09:9c:3e:c6:a5:
49:dc:a4:d1:af:02:f4:cb:bf:de:48:f6:c0:22:bc:
e3:4f:bc:35:80:24:cf:de:d9:a3:6a:60:97:58:28:
5f:2d:88:9f:f7:86:63:cd:f4:dd:4e:a7:91:53:19:
a1:d5:4f:61:44:50:88:c8:75:69:d2:bd:cf:7f:ac:
be:b9:6a:e9:95:ac:8f:3d:50:40:a5:d6:b8:bf:62:
63:1b:be:07:fa:da:0e:39:59:b0:8f:a1:06:e2:fa:
df:79:84:e9:3f:33:69:28:ee:a2:20:c9:47:e4:8d:
de:52:c0:31:74:d8:4a:26:f4:50:fc:5e:da:0d:07:
11:ed:45:44:6a:16:18:2c:1d:d2:ff:23:7c:28:c5:
80:03:41:ef:f6:58:f7:47:42:c3:41:cf:7f:fd:91:
5a:4b:aa:87:9f:98:f0:15:af:02:fd:cd:5f:27:35:
b4:4e:8f:3e:2e:fe:92:0f:b9:e0:93:99:48:6e:c1:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:7C:59:F2:3C:BC:F8:19:53:BB:5E:76:DE:15:91:D0:61:CE:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rMF8WfI8vPgZU7tedt4VkdBhzrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:2f:87:44:75:fa:21:c9:be:b2:f2:6f:58:fc:d7:04:86:bf:
f4:2d:4e:35:b5:a2:0a:eb:3b:e1:18:36:f3:7e:6e:fc:2d:8d:
e3:39:47:b4:c7:45:89:54:00:f6:ff:3e:ac:1e:c8:a1:b3:16:
72:84:45:ee:3e:10:6e:a0:81:16:a9:dc:8e:60:07:9f:97:1f:
a9:9e:65:f7:d4:98:e1:b3:6d:7a:52:74:62:d3:0a:e2:28:1e:
90:0f:04:fd:d4:9f:40:71:71:6c:3f:de:ad:62:24:94:29:2c:
78:c0:57:f5:31:05:d5:a9:3f:62:5a:41:70:70:9f:6c:f1:20:
fd:02:8e:97:9f:33:3a:ce:8b:35:33:06:af:b7:c8:54:23:78:
70:31:5c:11:46:44:72:5f:2b:e2:89:c6:8b:08:6f:da:69:38:
a3:fa:85:9e:97:25:2b:ea:ee:18:23:23:12:f7:75:64:1f:93:
d1:13:cb:bf:85:ed:04:21:68:18:2b:2c:83:69:7c:05:7a:b4:
28:34:44:70:a7:e7:aa:2f:86:61:b0:9e:11:77:72:ec:f1:74:
55:78:cb:c9:d0:01:f0:9c:7d:0c:43:6e:cf:f7:43:9f:bd:08:
5a:9d:b5:28:29:94:de:23:e9:b8:23:f0:48:dc:11:59:c8:70:
e6:45:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org