Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uUq2xrJVCu-TzBuUyiQ9dl_8r-w.roa
File: uUq2xrJVCu-TzBuUyiQ9dl_8r-w.roa (raw, json)
Hash identifier: zrRxTnMIC+p8Ur8gGAklUf5ds/DVAHgw4/qM3X85Q7k=
Subject key identifier: B9:4A:B6:C6:B2:55:0A:EF:93:CC:1B:94:CA:24:3D:76:5F:FC:AF:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 422E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uUq2xrJVCu-TzBuUyiQ9dl_8r-w.roa
Signing time: Tue 16 Apr 2024 19:53:04 +0000
ROA not before: Tue 16 Apr 2024 19:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16942 (0x422e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 19:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B94AB6C6B2550AEF93CC1B94CA243D765FFCAFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:31:79:95:5e:ef:8b:07:60:24:1c:57:9f:
ad:4d:55:f2:29:8c:0f:43:6e:0e:ae:07:b8:98:ed:
25:20:05:a0:89:c4:75:b9:5c:59:ee:b3:45:c8:48:
0d:ce:d7:ad:a3:98:8a:f6:a5:38:43:79:56:8e:86:
c4:22:fc:cb:18:c8:5c:d5:89:b6:2c:10:d2:5a:42:
49:31:fc:2e:9b:33:13:e6:8a:58:c0:7d:bb:4b:53:
2d:69:82:cc:4d:0d:c7:d0:78:df:41:d8:5b:c1:fc:
44:6a:b4:48:0f:a6:47:75:8c:9d:a4:33:d1:cf:91:
45:71:81:06:89:f6:0a:d3:e7:8b:6c:a0:d8:30:36:
08:08:e3:5e:3d:64:2f:ac:c5:15:a2:b6:ce:1f:4c:
6c:fc:36:37:0c:55:cf:14:c1:fc:ed:e1:61:fc:d1:
ff:f9:d2:f9:ea:bd:d2:8f:52:77:58:0b:0f:f8:a2:
d8:a6:89:c5:4c:14:b5:48:dc:e0:2a:36:9e:e6:6b:
f1:14:62:38:f7:bf:33:42:0a:17:64:3e:52:79:5d:
4f:87:9c:11:02:0d:ab:4f:f3:e0:c8:ae:e1:5d:8d:
2b:7a:5e:b2:34:fa:3f:3b:03:0b:a2:18:6b:a0:20:
80:ed:c7:b0:86:cb:6d:5d:bb:59:62:02:6a:04:de:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:B6:C6:B2:55:0A:EF:93:CC:1B:94:CA:24:3D:76:5F:FC:AF:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uUq2xrJVCu-TzBuUyiQ9dl_8r-w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:74:f9:47:26:72:a7:eb:96:7e:10:fb:b1:ee:ff:f9:b6:51:
38:3d:e4:05:c5:2f:b7:29:86:0e:3c:7b:6c:6f:bc:e5:28:b0:
66:73:37:9c:08:ca:e4:d6:07:29:af:12:14:64:b4:75:3e:02:
b4:dd:9f:e5:1b:e4:43:1d:e7:ab:00:d6:73:30:4b:b1:dc:da:
fe:c5:93:c3:5b:03:43:6c:91:b3:bf:0f:a8:80:2e:cf:03:8b:
a6:a2:de:15:a0:5a:1c:9c:a5:b6:00:58:8d:78:63:fd:bb:17:
70:a7:dd:38:07:d4:3a:4e:5d:30:c2:8d:b9:e0:3d:76:8d:27:
78:30:92:c6:44:bf:d4:04:12:4d:19:28:f5:29:f2:c9:0c:f2:
7e:19:32:fb:21:6e:21:59:00:a0:4d:26:8b:72:aa:bc:ba:82:
1d:b4:7f:3a:78:03:34:93:8b:21:4d:77:6a:d9:ab:2b:e2:cd:
27:e1:8b:4b:27:52:bc:63:cb:25:b8:35:25:4a:3b:33:39:c6:
75:15:dd:8d:80:2c:8d:3a:ef:c5:31:fc:4d:44:9a:09:15:fd:
e9:a3:7c:92:0d:3c:e2:4e:ce:e0:c3:41:99:a1:ef:a9:29:18:
2f:a3:d5:40:55:eb:b0:2e:c4:d9:67:80:63:49:08:60:f4:3b:
8a:94:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org