Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ugL9OG1f7hPjEh1wgwJZU7Sfu-0.roa
File: ugL9OG1f7hPjEh1wgwJZU7Sfu-0.roa (raw, json)
Hash identifier: xefgS6iE1OSYqCiSfsmTGchBZqf18WWdUPLGekJuFxg=
Subject key identifier: BA:02:FD:38:6D:5F:EE:13:E3:12:1D:70:83:02:59:53:B4:9F:BB:ED
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 533E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ugL9OG1f7hPjEh1wgwJZU7Sfu-0.roa
Signing time: Thu 09 May 2024 13:53:58 +0000
ROA not before: Thu 09 May 2024 13:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21310 (0x533e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 13:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA02FD386D5FEE13E3121D7083025953B49FBBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:84:88:d7:11:0b:8a:d7:85:b5:bc:be:82:
7a:10:c1:ad:4e:d2:8e:0e:3e:9d:2b:a4:3a:b0:82:
51:c2:ee:5f:32:08:52:d1:fd:f9:90:fa:ea:cf:8b:
b4:46:c7:68:79:da:6f:64:d2:30:af:08:7f:09:46:
f2:11:f2:a5:c3:ba:ad:88:76:45:62:83:c5:27:0c:
24:ee:b8:6b:05:bc:c9:2c:f2:ed:22:1f:43:2d:af:
5f:9e:ed:f6:cd:bc:f5:d5:06:a3:2b:81:10:c7:22:
e6:37:5d:e8:db:73:58:c9:a7:00:7c:18:fd:14:fb:
44:65:d6:4a:ab:b0:56:0f:6b:9d:3e:8b:88:03:49:
30:0e:0f:99:29:7c:25:8c:d7:af:a9:8c:15:7d:f8:
58:24:31:6d:48:33:88:f4:2a:0f:1e:e1:c8:29:3f:
cf:be:a6:0b:ce:e6:ec:2d:e8:9d:c8:f7:0d:e8:e0:
de:e8:70:03:32:22:55:e9:0f:12:ca:49:d8:5a:ff:
50:da:53:c6:d7:8d:d8:b7:16:aa:99:0b:b6:09:1c:
08:69:0f:13:4a:ab:e9:57:8b:18:e9:7e:94:55:82:
55:e8:de:33:7c:c7:cc:51:65:9c:30:33:67:7c:27:
5c:fd:20:f9:e6:e0:79:ba:6f:fa:e7:99:a3:fc:4b:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:FD:38:6D:5F:EE:13:E3:12:1D:70:83:02:59:53:B4:9F:BB:ED
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ugL9OG1f7hPjEh1wgwJZU7Sfu-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:1c:f2:80:6d:8e:b8:d9:47:3d:5a:f2:14:d0:1d:81:b5:b3:
fc:eb:93:16:fb:85:a2:a9:36:ed:5f:f3:62:19:2c:9d:ad:cc:
97:cf:3d:26:8b:e9:6f:95:8d:47:3a:41:54:d1:23:5a:a7:18:
51:1f:b6:11:81:19:48:3d:ab:0e:1d:05:b4:a8:bf:d9:46:49:
af:36:cb:22:1c:77:0a:5b:ca:8f:e1:ee:7a:6d:aa:83:16:f5:
2b:f1:e2:86:bf:6e:d2:3a:f8:97:da:74:05:21:c1:8c:6a:d6:
d2:21:95:b0:75:ac:bd:61:52:94:6f:98:eb:ff:30:28:96:99:
c1:4b:05:89:81:ff:4a:f9:f1:29:60:1b:16:09:d4:31:b2:bb:
c3:f6:e1:17:c4:d7:9b:69:5f:d0:79:b4:c9:b4:c7:85:06:a3:
4a:98:00:d5:ea:b8:a6:17:e5:7b:11:a0:31:b0:f5:04:31:78:
b6:80:28:e7:0d:1c:99:f8:57:80:ab:bc:ec:7f:ba:2d:8e:33:
5f:6d:70:7a:6b:e8:7f:87:e5:51:72:53:71:8f:5a:ff:ef:52:
0f:d9:5a:c1:e9:c4:f2:16:63:0e:1d:3e:df:f0:f2:1e:4c:d2:
e3:1b:39:2f:96:ff:50:26:86:15:ed:01:50:33:3d:e6:76:2a:
45:84:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org