Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sB4OdBFUADbEj-W_ipdxVBhxuwc.roa
File: sB4OdBFUADbEj-W_ipdxVBhxuwc.roa (raw, json)
Hash identifier: dKuqe6/TMK9uwBEKCTSBaV+JixXgz0bjh1QEBo3zNmg=
Subject key identifier: B0:1E:0E:74:11:54:00:36:C4:8F:E5:BF:8A:97:71:54:18:71:BB:07
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5742
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sB4OdBFUADbEj-W_ipdxVBhxuwc.roa
Signing time: Tue 14 May 2024 22:24:34 +0000
ROA not before: Tue 14 May 2024 22:24:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22338 (0x5742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 22:24:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B01E0E7411540036C48FE5BF8A9771541871BB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:bc:0e:61:71:0f:8a:03:f3:3a:44:d8:73:
37:fe:ba:35:91:05:fd:f6:b6:d4:0b:3b:50:82:99:
f3:c3:05:13:af:d8:72:4a:1d:07:8c:4a:8d:8f:a6:
a5:9f:04:a4:72:d3:5a:98:4d:f2:83:6e:8e:cf:1e:
48:78:2a:b1:76:fe:21:77:b2:dc:8a:5f:d3:00:38:
74:86:59:a2:32:99:69:16:90:79:27:92:dd:d2:5d:
32:1c:48:67:ce:98:46:ba:55:29:1b:50:85:c9:74:
53:12:e1:9d:d7:ab:f2:6d:9b:4f:ca:f8:15:05:d8:
44:57:35:85:37:03:ec:02:ad:aa:2d:24:c0:fc:a7:
ad:16:aa:53:1b:39:6d:d3:87:47:e7:2d:9e:cd:a8:
2b:4f:40:fd:6f:85:38:98:1a:c6:b9:fe:37:4d:be:
d6:f0:10:38:6d:69:9c:e3:26:ee:f6:ae:a6:15:8b:
dc:8e:34:85:1b:03:34:2d:17:08:17:77:a7:2f:0c:
4a:9f:0e:d0:46:c2:df:ae:54:b6:39:fe:9e:57:a9:
93:fa:d1:2c:68:18:4c:93:ed:a2:ca:a8:fc:e3:41:
f0:2f:30:b7:65:f4:f0:9e:b0:43:bd:31:d0:4d:bf:
0e:b5:cb:8f:eb:e7:21:55:a1:b1:6d:31:a1:5f:c6:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:0E:74:11:54:00:36:C4:8F:E5:BF:8A:97:71:54:18:71:BB:07
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sB4OdBFUADbEj-W_ipdxVBhxuwc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:dc:7f:3a:dc:61:b1:b8:fa:39:7c:b9:af:6d:f0:90:45:01:
18:6f:09:d6:f3:c9:93:9b:a5:e8:5e:a5:82:36:a8:17:4d:49:
c8:40:4e:a9:68:ed:97:e5:19:2f:24:f7:10:e5:bf:dd:9c:2c:
f0:01:33:bc:a5:b7:38:c0:eb:df:15:5c:14:ef:60:89:b9:25:
87:b2:5f:d7:43:b6:11:e0:39:a2:5d:ac:3e:93:a1:18:18:63:
4c:66:42:31:99:71:0f:26:aa:20:12:61:7a:46:4c:e9:51:77:
31:05:a1:87:86:4f:86:83:f9:45:de:36:27:28:03:05:b9:04:
26:9f:c8:15:a2:8c:ba:cc:a0:58:40:87:c5:68:d4:91:db:f6:
f9:f7:9a:81:13:36:4e:50:1d:1e:90:43:fc:32:5e:eb:d7:05:
5d:f1:64:b7:ed:fd:88:ed:b7:9b:b9:da:98:82:34:7d:2e:d7:
a4:63:5a:63:cc:48:18:02:18:7c:96:54:b5:56:c3:d3:10:f0:
1e:72:e4:39:17:ea:79:04:1f:b4:5c:1d:77:15:97:38:f5:90:
b3:3f:ef:c6:4b:59:31:61:fd:2b:10:b3:79:55:bf:53:0c:69:
3b:39:c0:11:41:6e:af:ad:e8:ec:09:4e:a3:6e:95:b1:3d:73:
53:64:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org