Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tn6_T0ZtVC8ROgxDCP2RNOXCfTg.roa
File: tn6_T0ZtVC8ROgxDCP2RNOXCfTg.roa (raw, json)
Hash identifier: 5HHmgNMAMA+0Y67UsahJiJVCS/5WsKXGZE8r5ci5JZk=
Subject key identifier: B6:7E:BF:4F:46:6D:54:2F:11:3A:0C:43:08:FD:91:34:E5:C2:7D:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tn6_T0ZtVC8ROgxDCP2RNOXCfTg.roa
Signing time: Sun 14 Apr 2024 22:52:53 +0000
ROA not before: Sun 14 Apr 2024 22:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16582 (0x40c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 22:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B67EBF4F466D542F113A0C4308FD9134E5C27D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:2c:53:e5:cf:57:37:88:1d:52:25:8f:71:
41:51:05:0d:61:cb:8c:a9:3b:c0:d8:c2:37:d2:14:
1d:2b:23:4b:5f:f5:d0:7a:9c:00:13:d4:3f:ae:ec:
f8:03:c4:b8:1d:18:f7:6c:76:83:b2:e6:42:69:4d:
04:c9:1c:e9:5b:c8:6b:ec:02:db:98:90:7a:a7:50:
9a:6c:0f:8b:f1:e5:50:60:8f:6f:28:19:05:ed:b6:
50:3f:df:7e:a7:9a:59:dc:e3:b0:9a:9e:07:4a:76:
56:59:a0:1d:29:d8:e7:9d:63:19:f3:1e:54:c7:48:
71:5a:0b:f5:21:6f:61:c5:9f:90:a0:c3:ef:62:83:
af:1a:54:f6:8f:78:91:00:c7:69:1c:58:89:f6:38:
47:2a:a1:aa:d2:33:81:42:c8:bd:ef:be:ad:31:7f:
cb:48:08:98:ab:63:fd:f8:78:4a:2e:4c:7d:4a:22:
09:d9:a1:af:6c:1a:10:8f:eb:85:84:ff:ad:cc:c9:
49:94:e3:ec:ea:e3:ee:6b:0c:d8:38:87:e6:ee:31:
d5:02:83:4d:ba:52:16:e1:45:6a:5e:d8:24:f4:ba:
bb:3f:ec:ad:11:1c:85:91:83:66:0f:1c:16:7e:16:
b8:97:48:28:f7:c5:98:68:3b:e1:8b:f3:57:60:6d:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:BF:4F:46:6D:54:2F:11:3A:0C:43:08:FD:91:34:E5:C2:7D:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tn6_T0ZtVC8ROgxDCP2RNOXCfTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:f8:8f:0d:cd:3d:36:76:64:56:fd:44:79:8c:21:52:c7:6a:
14:df:de:a3:be:5f:75:94:3f:0a:61:60:78:48:e5:83:96:7b:
0e:ef:28:31:0c:99:10:b7:e7:4a:16:de:cb:85:2b:5f:f5:35:
91:9c:80:78:01:3d:38:ca:dd:6b:c7:09:fe:ec:e7:df:68:94:
17:be:b2:f8:c1:52:13:94:af:ac:20:1b:35:2a:a0:13:0b:b3:
04:7b:7b:aa:2d:08:9c:d2:c3:1c:d7:ac:14:e9:97:f6:59:3f:
79:01:31:a5:b0:e0:26:b4:42:41:8c:35:ee:ac:d1:2b:c5:07:
d8:87:36:d8:90:fe:4f:87:0b:46:56:10:41:ba:f0:f3:8d:b9:
9c:f4:f0:77:1e:5b:c4:92:5d:66:f6:f1:09:33:5f:b1:fc:45:
0b:91:f3:06:49:e2:a4:59:2b:91:80:1e:25:a4:24:63:d1:ce:
15:e5:24:1e:8c:b0:5b:c8:45:a1:4f:c8:0b:14:44:23:fb:37:
f0:c5:5a:59:6a:87:a7:6e:aa:03:48:3f:1f:9f:33:18:e4:05:
6f:b6:a0:c0:26:16:5a:f0:01:c6:16:d0:e3:30:c5:9d:70:21:
a7:30:37:14:11:ea:26:32:5b:1a:4e:dc:ff:78:19:cf:a8:4b:
59:fc:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:15 2024 by rpki-client on console-ams.rpki-client.org