Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wAQsaOUcW8ADSX0PfKS2jMFdf8k.roa
File: wAQsaOUcW8ADSX0PfKS2jMFdf8k.roa (raw, json)
Hash identifier: pyy0JMw560fSDDToL3tFGNW5D/Cmc9teiccsOhYeaJI=
Subject key identifier: C0:04:2C:68:E5:1C:5B:C0:03:49:7D:0F:7C:A4:B6:8C:C1:5D:7F:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C0E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wAQsaOUcW8ADSX0PfKS2jMFdf8k.roa
Signing time: Mon 29 Apr 2024 23:53:31 +0000
ROA not before: Mon 29 Apr 2024 23:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19470 (0x4c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 23:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0042C68E51C5BC003497D0F7CA4B68CC15D7FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:90:e5:9e:f7:fc:dc:61:84:1d:62:01:0c:
5d:15:b4:ea:78:6a:3a:a3:85:b5:85:3b:d0:3c:83:
b6:d7:fb:26:ca:4d:47:6a:2e:e4:01:be:a6:d4:ad:
5e:a2:8e:4b:0f:12:b4:57:56:3d:45:4d:81:45:6e:
da:03:05:ff:7e:50:79:db:d0:37:61:ea:1a:3d:3f:
57:bb:a1:31:be:93:2d:f5:e7:87:09:13:ba:ec:83:
48:1b:66:cc:10:b5:f8:4f:ed:4a:19:c1:f2:fb:e1:
fb:cb:ec:69:f8:8f:8e:3e:1a:33:b2:ae:40:d4:44:
ab:8c:ac:4b:29:45:07:0a:b2:be:ba:dc:a3:42:b9:
eb:67:8f:c6:65:57:d8:f2:13:65:8e:ec:ef:a3:bd:
7a:4b:f3:29:10:be:88:07:cd:3f:4d:14:e8:d4:bf:
1e:48:46:47:ce:e0:fc:11:c3:09:79:23:31:f3:e1:
49:e3:b6:be:ca:9f:3c:1e:97:02:a2:fc:3f:c9:41:
b6:fe:34:14:22:7b:9b:e3:b7:08:7a:5c:21:8e:d6:
a5:2c:d3:1b:13:db:ae:7c:c4:97:e3:5c:e2:50:f6:
f1:15:cf:ca:dd:74:79:4c:c6:ef:c0:1e:8b:db:fe:
46:a5:3d:75:38:d8:63:df:39:11:5d:d4:9d:cd:2a:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:2C:68:E5:1C:5B:C0:03:49:7D:0F:7C:A4:B6:8C:C1:5D:7F:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wAQsaOUcW8ADSX0PfKS2jMFdf8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:ec:b3:7f:76:47:71:fe:ad:cf:93:d3:c2:bb:43:2a:55:6d:
26:bb:23:99:e4:cd:bb:0a:d0:58:82:33:aa:1d:8c:e6:54:2e:
f8:0c:55:4c:77:32:8f:87:e9:95:b5:cb:2b:68:f2:d1:9e:d9:
0f:37:0a:fc:ae:ef:81:9c:06:fb:99:a3:15:a4:45:19:8a:a1:
ce:06:82:35:77:ac:f6:bd:b8:ef:c1:de:2a:37:6c:37:ef:f6:
23:20:6d:d0:65:56:3f:3e:e2:8a:c2:d3:27:46:41:b7:4a:10:
00:2a:74:61:85:84:ff:c1:81:91:9e:8a:68:4a:a4:7b:08:eb:
2c:ad:5c:80:0d:62:81:fa:f8:fa:72:48:f6:ab:7b:e7:0c:13:
28:7b:bc:fc:81:98:4b:85:84:21:72:f2:db:44:b0:29:98:ea:
43:8f:29:05:cf:0a:9b:0c:e0:4d:67:a4:ca:9f:c4:7c:75:b4:
30:33:64:56:79:65:6c:a9:02:5f:d8:97:0d:7e:a1:2a:40:00:
da:dc:91:d2:1c:b9:aa:2e:c9:8f:89:9c:54:cf:05:41:29:f6:
b1:d6:15:15:18:86:ad:1e:26:02:d2:a1:33:71:09:c1:12:8e:
bb:61:d0:02:02:79:ff:6a:16:b6:ea:70:42:b4:27:ad:95:49:
43:e4:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org