Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sqg-SlTkl__xJgtJ0E7fP_s-99g.roa
File: sqg-SlTkl__xJgtJ0E7fP_s-99g.roa (raw, json)
Hash identifier: Wooc4YQfJuoSCrRdKtBf3svyQWpS18bRKCeNa75l2vU=
Subject key identifier: B2:A8:3E:4A:54:E4:97:FF:F1:26:0B:49:D0:4E:DF:3F:FB:3E:F7:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sqg-SlTkl__xJgtJ0E7fP_s-99g.roa
Signing time: Fri 12 Apr 2024 09:52:51 +0000
ROA not before: Fri 12 Apr 2024 09:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16094 (0x3ede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 09:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B2A83E4A54E497FFF1260B49D04EDF3FFB3EF7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:b1:c5:7e:8b:ad:da:54:e9:bd:38:6f:90:
d3:41:6b:03:66:71:cb:b4:cc:a5:e2:59:3d:ed:fe:
ab:c3:d1:68:a9:6a:0e:2f:26:bd:46:96:cf:d1:8d:
39:d1:81:02:ea:84:20:a9:ea:6c:b5:76:5a:a7:77:
e7:01:2e:e3:90:1d:be:77:ca:ba:0b:23:68:17:43:
e1:db:f1:5d:7b:72:04:df:00:8d:b4:a0:4f:fd:90:
dc:7a:d1:55:7b:9f:b9:33:f1:8b:2a:20:7a:0b:91:
09:5f:fb:a4:ca:4f:02:97:09:4d:24:b6:13:3c:52:
0c:82:bb:a2:b8:7e:fe:5d:11:f1:a4:79:55:19:0c:
8a:90:2e:31:28:9a:55:1e:c3:0a:de:a7:f2:4c:27:
2b:07:28:31:8e:80:3d:0b:75:64:85:6c:7d:3c:ab:
db:f8:aa:10:01:ae:25:2a:44:2d:13:cf:c3:12:5e:
40:5a:96:ea:e4:ef:95:2c:c4:51:3f:dd:1f:da:e9:
97:38:e5:b1:22:84:16:af:9b:21:10:c9:33:fb:b9:
6b:98:ab:52:ba:a1:3b:bd:38:84:c5:74:5a:66:68:
2f:37:39:f3:07:2b:23:d9:46:5b:d1:0e:15:e2:ba:
e0:39:0e:31:6c:aa:c8:4a:58:31:53:c9:77:a8:cf:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:3E:4A:54:E4:97:FF:F1:26:0B:49:D0:4E:DF:3F:FB:3E:F7:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sqg-SlTkl__xJgtJ0E7fP_s-99g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:ab:a2:dd:d5:26:89:01:12:85:d2:31:fa:7a:bf:01:bd:02:
40:a1:f4:63:4f:a4:ec:a8:04:27:8a:bd:c7:49:a3:01:a7:87:
52:ae:80:75:6f:62:a5:86:f4:88:05:5e:42:3b:1b:21:3d:d9:
5a:97:7c:27:35:dd:3d:73:ee:eb:b6:32:9c:34:ce:1b:de:c5:
3b:be:4b:d4:c8:38:ab:fa:0c:6e:39:0e:d6:34:97:2b:50:56:
8f:4b:83:66:94:7a:44:d2:5e:78:56:dc:ad:74:7e:c2:46:dc:
6e:9b:20:b6:e2:8b:03:06:ca:d6:2e:e6:39:7a:d3:e6:c7:6b:
cf:5a:b1:bd:e1:ef:79:84:88:44:9d:e8:62:54:f1:29:7c:c3:
e4:77:01:ce:9d:fe:4d:bb:c3:aa:6b:03:63:bb:42:37:ab:2f:
4c:bd:b8:96:cb:5f:cd:fb:e7:47:a8:9b:6d:b5:98:fb:e4:0e:
e8:a9:d8:86:09:fc:f3:29:df:15:39:3e:8a:b2:f5:53:74:76:
d4:21:c6:25:cf:37:61:b9:cc:e7:0e:8d:33:be:15:9b:4a:a2:
ea:ca:d2:9c:62:00:6e:29:c1:e8:bb:2e:05:51:61:2a:9c:66:
8d:38:c9:8b:39:28:13:7c:f1:1a:a1:33:9c:8a:14:b1:df:96:
2b:97:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org