Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tqti_-lHXFKeslg59bCliKCNWDs.roa
File: tqti_-lHXFKeslg59bCliKCNWDs.roa (raw, json)
Hash identifier: bGi5p9EQpwd4Mgtnm+ljgAj/nJqSwpBuSNREFOoE1Cw=
Subject key identifier: B6:AB:62:FF:E9:47:5C:52:9E:B2:58:39:F5:B0:A5:88:A0:8D:58:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CF2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tqti_-lHXFKeslg59bCliKCNWDs.roa
Signing time: Tue 09 Apr 2024 20:22:40 +0000
ROA not before: Tue 09 Apr 2024 20:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15602 (0x3cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 20:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B6AB62FFE9475C529EB25839F5B0A588A08D583B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:7d:a4:13:fd:51:2d:67:72:11:e5:8a:45:
6f:8e:ec:ce:08:47:c6:00:f3:73:1f:a8:8d:8c:cb:
e5:0d:6a:db:4e:c9:da:98:a3:ac:24:50:a5:1d:00:
d8:57:e1:9c:97:0d:53:47:ee:b2:73:f4:ef:20:e0:
0e:58:44:75:83:e4:7d:80:ba:da:24:95:75:63:28:
55:75:37:3a:2e:f0:e2:05:41:3d:eb:1c:e7:76:45:
d6:7b:d4:a7:a2:3e:04:d3:e8:24:94:70:2a:4b:aa:
ff:81:00:88:0c:16:22:b6:38:78:9a:61:f7:5f:53:
be:87:78:d7:f5:7b:11:cc:59:7e:2c:fb:b9:62:8e:
e1:37:54:5c:8a:6f:6c:8f:20:bc:92:5e:b7:5c:8c:
dc:0d:c7:89:08:39:9f:ea:c5:15:3c:57:72:64:fc:
4b:ab:d6:fe:db:3f:68:65:81:3c:57:4e:b8:d2:24:
dc:0c:19:d3:db:34:64:c3:46:4e:79:42:96:3e:89:
94:91:9b:e2:35:e9:06:ab:06:14:c5:d3:18:e0:0a:
69:34:ed:24:69:d7:c8:54:f3:d1:9e:cf:05:b1:e7:
5b:98:81:14:cc:17:2a:f3:a7:08:d0:71:53:cf:c6:
92:e6:54:06:be:29:c0:bc:11:65:c9:dc:87:4b:b8:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:62:FF:E9:47:5C:52:9E:B2:58:39:F5:B0:A5:88:A0:8D:58:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tqti_-lHXFKeslg59bCliKCNWDs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:42:3b:1b:d9:c7:2c:e1:10:5b:dc:b4:7a:1b:f8:53:61:f6:
c7:9a:7d:26:97:65:44:b1:1a:aa:54:da:3b:49:92:ce:6d:99:
0f:31:c9:2e:88:8e:db:2a:af:6f:e2:22:7f:cf:a8:58:76:95:
ee:e0:24:66:11:c3:f0:30:dc:12:92:f9:fe:94:b6:4e:0c:9e:
08:4e:46:f4:d3:9c:56:07:79:b6:a2:a5:4c:cc:f1:93:92:3d:
c3:41:eb:2e:c7:a2:97:c7:98:40:d6:92:c8:a5:af:68:4f:98:
8e:ec:9c:10:50:45:58:44:52:9e:68:fe:66:e5:82:31:dd:8d:
81:db:d1:1c:56:9c:e8:d5:92:ce:05:86:e9:de:97:48:a5:73:
e5:df:19:d1:7d:be:80:0e:c5:3a:e0:e9:9b:94:52:e0:a6:97:
4c:91:5a:4d:47:e9:e4:7a:52:8a:80:01:44:3f:96:69:41:54:
a2:21:77:60:30:e7:30:92:78:f4:f8:37:2c:60:25:aa:29:c6:
a9:86:5b:00:76:90:9e:3e:62:33:65:5a:1f:14:ec:ff:b7:92:
15:8e:c4:46:f5:7e:7a:9e:85:48:b6:1d:f1:fd:ff:8a:7f:82:
7c:32:06:31:5e:7a:c7:14:39:fd:83:ea:51:a0:0c:42:0e:e3:
a7:4e:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org