Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/t0a97Fer0nHf7xgaWop6EAc26Mc.roa
File: t0a97Fer0nHf7xgaWop6EAc26Mc.roa (raw, json)
Hash identifier: M8COxqh6RHAxOhERB4u+hkkplQzGvO66pJaXY94ZDq4=
Subject key identifier: B7:46:BD:EC:57:AB:D2:71:DF:EF:18:1A:5A:8A:7A:10:07:36:E8:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44D6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t0a97Fer0nHf7xgaWop6EAc26Mc.roa
Signing time: Sat 20 Apr 2024 08:53:05 +0000
ROA not before: Sat 20 Apr 2024 08:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17622 (0x44d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 08:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B746BDEC57ABD271DFEF181A5A8A7A100736E8C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:47:ec:d0:04:ea:2b:6f:32:5f:3a:7c:1d:
ae:87:43:85:82:b4:68:50:82:f8:7e:d9:26:a8:b2:
d5:45:c6:bc:83:23:87:38:66:f6:13:ed:87:90:ad:
72:73:91:c8:a3:35:17:5b:4a:df:28:c2:5a:d0:16:
dd:53:ce:4d:43:d6:28:62:65:af:46:32:57:a6:61:
ab:55:81:8c:23:76:fb:29:20:dc:0d:19:ff:40:cf:
85:73:0c:2e:d2:7b:45:c3:5a:2f:80:35:b4:51:b0:
7d:d9:0c:3a:1e:65:d7:e6:6a:0b:cf:d5:ff:9c:87:
9d:cb:1a:eb:d4:8c:be:05:79:dc:cb:65:ac:13:ea:
5c:09:27:fa:1b:e2:a0:a7:a2:80:4c:6e:c9:30:64:
dc:cb:7b:dd:3c:25:62:00:77:f8:92:ac:25:f6:a4:
b0:34:fc:0c:bf:57:4f:7a:7c:a2:cb:12:ee:df:f7:
6a:ad:fb:b4:58:06:46:0b:9f:4a:63:bb:9b:3d:e5:
01:c4:46:23:91:bf:3f:c2:7f:2c:d0:98:80:67:0b:
3d:3f:fb:52:23:ca:f4:26:cd:9f:43:67:b9:a4:98:
43:9e:83:ec:80:a0:47:18:0a:a6:44:81:69:50:e8:
a3:a3:45:e9:0b:18:85:82:1b:dd:a0:87:99:24:67:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:BD:EC:57:AB:D2:71:DF:EF:18:1A:5A:8A:7A:10:07:36:E8:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t0a97Fer0nHf7xgaWop6EAc26Mc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:ee:7a:64:c2:fa:30:84:e1:fc:5f:84:ca:c8:d3:8e:5d:ee:
7d:ff:09:b7:e8:bc:1f:be:4c:05:b8:02:50:bd:42:54:ad:97:
9b:32:56:31:04:62:d1:bf:06:43:a2:31:cc:d9:fe:34:72:65:
0d:05:8f:55:27:1c:04:f4:8e:42:0c:0c:17:c8:1d:89:0a:e4:
6a:94:24:ce:e7:9b:46:ec:98:5d:81:6f:92:36:cf:6b:ce:7e:
18:ce:d7:8f:9b:9a:4b:2e:b4:e8:82:61:79:2b:7c:4c:04:e5:
ac:fb:8b:21:6c:94:a2:29:ef:d2:a7:3b:2b:64:33:f4:b0:f6:
c3:19:ec:4e:f9:e5:1c:4d:88:78:dc:15:65:70:41:33:54:77:
c8:ab:d4:87:b3:11:69:cf:cf:23:1d:86:a8:9b:85:f9:c1:a9:
59:c7:53:c2:b5:54:0b:05:5e:f2:3b:f4:5a:c7:c0:8e:ff:f3:
da:1a:a5:52:04:8a:62:4b:87:ac:f3:7b:a1:26:9e:07:2e:75:
ba:d8:4f:52:97:d5:87:9a:99:7e:25:e3:01:a0:e1:45:ab:8d:
bc:af:c2:c8:a9:6c:26:51:1e:22:61:2c:2d:8a:dd:7d:f2:28:
ee:2f:be:aa:8c:4c:67:fb:ff:5e:f3:8b:f1:35:b0:be:a2:b3:
0c:9d:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org