Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v21RAeG0t1DHa2Us99OevdWka-k.roa
File: v21RAeG0t1DHa2Us99OevdWka-k.roa (raw, json)
Hash identifier: CoYQ7O+lmndJgHdwesgzE75J8U5MGM4zcwesIDHSv+s=
Subject key identifier: BF:6D:51:01:E1:B4:B7:50:C7:6B:65:2C:F7:D3:9E:BD:D5:A4:6B:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4866
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v21RAeG0t1DHa2Us99OevdWka-k.roa
Signing time: Thu 25 Apr 2024 02:53:19 +0000
ROA not before: Thu 25 Apr 2024 02:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18534 (0x4866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 02:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF6D5101E1B4B750C76B652CF7D39EBDD5A46BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:27:17:ab:7e:f9:6f:0b:ab:b0:16:a0:60:
4e:4d:19:df:e9:81:70:65:2e:a1:c0:7d:4d:55:41:
52:33:bb:e3:a8:ed:79:e2:26:91:32:5f:13:1e:5b:
a8:59:29:85:5a:3b:da:b5:69:59:c6:03:7b:ef:e7:
7e:38:08:fc:e4:c1:e8:50:c4:a1:e5:72:f1:38:fc:
fa:7f:f5:89:3a:e2:d0:c4:09:d9:23:63:2a:a8:70:
a4:6d:ac:c1:0b:36:79:01:04:3b:22:e3:31:95:86:
e6:a7:ad:c1:09:e1:25:1e:cd:d0:84:a2:a9:81:6b:
a0:93:4b:f6:5c:53:f7:6c:2f:31:be:3e:4a:64:80:
e8:8b:49:32:b5:2b:db:f7:b5:7b:5d:66:2e:5f:3b:
ca:31:4b:44:e5:07:ce:a8:b9:af:b0:3f:b5:c0:6e:
94:29:02:1c:0b:4f:b5:ce:ea:d8:47:3a:2b:67:cc:
99:89:cf:68:ac:74:74:7a:76:05:70:d7:b4:61:d9:
78:0d:15:30:89:29:9b:ad:05:00:db:a7:fd:79:bf:
eb:66:3a:14:25:58:d4:fb:25:0b:94:1f:71:f4:f1:
6b:5e:98:b3:2a:16:02:c2:30:12:6e:0c:aa:3e:92:
0a:c7:a4:fa:bb:5a:8c:8e:8d:a2:69:c0:1e:05:b0:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:51:01:E1:B4:B7:50:C7:6B:65:2C:F7:D3:9E:BD:D5:A4:6B:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v21RAeG0t1DHa2Us99OevdWka-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:80:c5:1b:77:98:b8:f9:14:65:bd:32:47:92:af:de:37:70:
84:ac:09:2d:c0:69:74:95:c6:b3:7f:00:1a:ab:15:12:ae:5f:
43:c0:b4:4f:b5:85:4f:99:ea:9e:dc:f2:7f:61:49:2d:4f:26:
9a:b2:c6:39:14:a6:4a:38:16:83:4b:7d:ba:ef:04:8b:c2:aa:
f3:41:27:32:7f:d3:e5:97:6c:68:f5:3b:85:ec:79:5f:73:93:
8c:14:9c:a5:af:31:9d:df:2e:49:51:26:27:76:f5:b9:6c:6d:
8d:77:27:2c:ef:2b:65:2a:5b:8d:c2:08:3e:e4:44:2f:a7:84:
60:3f:53:92:1d:32:ef:ad:83:06:57:07:f3:9a:6e:af:3c:8a:
a9:c7:fb:21:26:30:e7:c7:d5:eb:42:15:1c:e4:60:f4:91:9b:
8f:7c:2f:45:e6:d0:fa:0c:60:f4:c7:37:18:df:92:ce:fb:d5:
14:aa:95:dd:e4:27:39:b3:a3:92:35:9e:0b:79:f9:75:f3:43:
eb:da:80:5d:df:3d:4f:6f:d5:30:e0:ac:22:e3:85:bf:da:bd:
f4:13:a8:9e:07:92:51:bc:a6:1a:0a:01:07:01:ff:b2:50:4a:
27:b2:f6:60:20:fb:a4:3a:c2:33:dd:bf:99:0b:a6:70:a9:5b:
3d:ba:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org