Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wOYA2BZWXlU2CvnM3ckRJSer3Ik.roa
File: wOYA2BZWXlU2CvnM3ckRJSer3Ik.roa (raw, json)
Hash identifier: W11VUQhnS/Tmrix6+UvGtruQhHvxxyAfrUjqms0efKg=
Subject key identifier: C0:E6:00:D8:16:56:5E:55:36:0A:F9:CC:DD:C9:11:25:27:AB:DC:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5086
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wOYA2BZWXlU2CvnM3ckRJSer3Ik.roa
Signing time: Sun 05 May 2024 22:53:49 +0000
ROA not before: Sun 05 May 2024 22:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20614 (0x5086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 22:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0E600D816565E55360AF9CCDDC9112527ABDC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:86:ce:b4:e5:90:0a:6c:64:9f:d2:aa:4c:
40:71:30:6e:4c:19:32:54:8e:c5:fd:ca:bc:69:d9:
4b:c8:c4:c9:73:7a:3f:93:70:70:ca:e9:ed:0b:98:
d7:e3:e7:07:cc:f7:3a:31:4a:c4:10:50:ae:90:04:
a4:3b:14:cf:d8:c4:10:79:54:46:bc:2c:c0:2f:be:
0b:e6:56:cb:6c:6d:c5:27:29:50:88:e5:6c:72:d1:
b6:ec:7e:36:55:a1:20:91:ea:8d:5d:68:9d:6c:31:
e7:59:47:90:c4:9b:f3:60:b5:6f:7e:47:99:da:02:
37:26:ac:6d:10:68:63:95:ce:f9:9a:88:e3:44:19:
80:04:f8:38:3c:ef:58:3d:3c:e3:fe:26:c6:75:e3:
2b:ac:4d:83:d8:0a:9f:e3:c6:fe:c9:c7:1c:ec:95:
56:21:92:d6:e0:9b:8d:ad:7b:77:b0:c9:1b:13:8e:
ac:bd:02:09:9b:82:70:ee:b4:95:47:3b:51:c6:db:
b4:9b:46:11:e6:90:f7:04:0c:74:c5:d0:e5:13:15:
33:75:9b:99:b7:c7:3a:32:52:87:9d:b4:41:8d:81:
f2:7b:fa:88:2b:61:d8:ce:a6:73:8f:d4:04:41:1d:
07:fa:7c:f0:a1:3d:e7:b6:02:9f:9d:4a:ee:e6:88:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:00:D8:16:56:5E:55:36:0A:F9:CC:DD:C9:11:25:27:AB:DC:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wOYA2BZWXlU2CvnM3ckRJSer3Ik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:2f:81:6c:5e:85:9f:95:6a:b1:30:49:c6:11:ab:d8:53:e7:
34:4b:78:7e:89:73:c9:8a:40:e8:09:c9:e2:5d:ba:22:36:9b:
48:be:17:b4:ce:64:cc:98:9c:19:e0:cc:b1:68:26:c2:3c:40:
9c:05:35:9d:8c:ce:7d:64:4d:87:d6:51:3b:6b:69:ed:eb:f0:
76:4f:7e:a3:46:87:4e:b3:da:37:ee:b3:c8:f7:c3:48:83:63:
d3:56:1b:06:aa:12:bf:36:f8:18:f4:62:88:47:89:3c:77:8b:
51:cc:46:17:18:5c:60:5c:53:e5:e7:01:2b:da:66:be:69:bf:
34:c0:ae:b5:ff:e5:1c:4f:02:cb:c1:d9:a2:13:eb:47:a0:50:
c4:1e:52:df:24:e6:ff:44:9f:31:98:d9:c1:f2:58:bc:54:17:
50:4c:c0:46:c0:10:7b:b2:8a:34:56:05:c4:d2:b0:f6:46:6f:
be:5e:7b:f4:98:9f:ef:a1:c1:7c:c2:f2:65:8c:40:f1:11:4c:
5f:ad:8a:c0:b2:14:1a:5e:95:40:a1:89:56:d5:20:9a:f4:31:
9f:28:0c:ec:a0:04:04:10:74:be:1d:c6:52:7b:c3:65:3b:c5:
49:d8:bd:b2:84:0d:86:85:7a:4e:a9:1b:7c:c1:56:26:f7:19:
ea:af:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org