Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sZWnuAFASDvS6awdZTLNVOkvdLs.roa
File: sZWnuAFASDvS6awdZTLNVOkvdLs.roa (raw, json)
Hash identifier: O2tE6aj6IUnQOurv6VO3FOesk6cyzyH4ITG41H87Dso=
Subject key identifier: B1:95:A7:B8:01:40:48:3B:D2:E9:AC:1D:65:32:CD:54:E9:2F:74:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F96
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sZWnuAFASDvS6awdZTLNVOkvdLs.roa
Signing time: Sat 04 May 2024 16:53:54 +0000
ROA not before: Sat 04 May 2024 16:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20374 (0x4f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 16:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B195A7B80140483BD2E9AC1D6532CD54E92F74BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:16:9d:f7:be:aa:a4:c4:de:89:5d:58:61:
f9:83:1d:60:87:f7:83:4e:5b:be:71:49:21:30:d9:
80:55:c8:f7:3b:d9:b5:24:54:a9:28:07:1a:23:b0:
a1:e6:8c:12:30:e6:08:25:27:dd:94:74:52:47:99:
50:67:61:01:fa:00:f3:1a:69:fe:32:08:74:46:bd:
75:aa:bc:d1:91:7f:73:a3:b9:29:4b:af:ba:59:21:
2f:e2:13:56:b6:76:2c:f1:ab:f9:0f:85:f2:3e:de:
8a:3a:72:19:e9:2d:69:41:16:9d:d3:f7:e1:37:e1:
43:77:cd:67:9e:5a:fd:a1:9b:c0:d9:51:ee:a8:75:
9e:25:59:51:f7:a0:14:cc:5a:a7:47:1a:49:1a:d7:
18:7c:92:37:59:06:64:da:8e:82:72:6b:d2:d7:38:
c5:1b:64:ff:46:5e:66:2d:47:73:1c:f9:47:1f:e3:
e9:9c:36:9b:73:f3:8a:fd:2c:ba:26:94:a5:43:85:
3d:f0:ee:51:22:35:be:7f:d8:ee:cc:da:44:4d:7b:
76:cb:91:2d:aa:a2:e6:fe:f0:af:56:ee:28:fb:56:
3d:c3:e5:5f:0b:b5:f9:b5:a2:32:de:51:61:0f:de:
e7:50:c3:72:8a:75:b1:76:8b:58:63:3f:b9:73:9c:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:95:A7:B8:01:40:48:3B:D2:E9:AC:1D:65:32:CD:54:E9:2F:74:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sZWnuAFASDvS6awdZTLNVOkvdLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:45:ce:4b:72:fa:1d:46:eb:e9:73:e5:9c:50:11:d7:dd:de:
45:01:e7:4d:1e:3e:9e:f6:29:27:04:b0:d3:15:20:e2:b8:63:
45:f2:58:ea:ba:1a:38:ca:1e:41:ae:b2:65:d8:0b:67:63:ba:
83:08:e3:ba:fc:9c:c3:cf:ab:3e:df:b6:c2:44:cb:87:ce:52:
ba:64:34:75:bb:0c:0f:a3:7f:56:ef:4b:38:9f:e0:3f:21:6e:
e5:94:dc:4e:d8:df:94:7d:99:3e:a3:3b:b6:75:6c:f5:a9:d0:
d0:e7:c5:9b:56:c7:c5:ef:50:4e:2d:14:73:d5:fa:9a:fc:47:
21:16:4d:9c:1f:e4:ad:be:83:b8:03:78:0a:de:b0:68:76:e0:
3e:31:71:7a:4f:54:9e:b3:a9:7e:61:65:40:b8:0f:3a:52:7f:
df:bc:53:e8:83:0e:9b:8f:f6:40:4c:5b:ee:86:5a:a6:2b:d7:
90:13:2b:36:13:df:ed:a7:b1:ae:00:77:e6:99:b3:18:82:88:
62:32:67:ad:1a:40:08:39:36:64:ce:71:98:f5:81:81:6f:0e:
10:9e:a4:2a:09:42:69:a7:da:b7:b2:c5:f6:63:8a:de:fc:5e:
6b:2a:7a:95:ca:dc:19:4e:17:80:53:2c:ed:53:43:b7:88:cd:
8e:8b:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org