Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xEBgsatz6qEX5cSgYJbaT1P_FEM.roa
File: xEBgsatz6qEX5cSgYJbaT1P_FEM.roa (raw, json)
Hash identifier: 9OQ45Sm6qlZld7AGgT4DuE7+gnwIQpowoFb9fmtKXqw=
Subject key identifier: C4:40:60:B1:AB:73:EA:A1:17:E5:C4:A0:60:96:DA:4F:53:FF:14:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4776
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xEBgsatz6qEX5cSgYJbaT1P_FEM.roa
Signing time: Tue 23 Apr 2024 20:53:30 +0000
ROA not before: Tue 23 Apr 2024 20:53:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18294 (0x4776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 20:53:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C44060B1AB73EAA117E5C4A06096DA4F53FF1443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:38:4b:ab:fe:7d:15:2c:be:fb:f4:18:f1:
a1:a0:d2:c5:82:66:11:3b:ff:9c:45:45:a1:c8:32:
19:f6:37:0b:d4:3d:a3:4f:15:c0:d9:31:83:9c:05:
ae:5b:c8:a6:11:ed:b4:55:25:77:ea:7c:bb:e7:66:
79:9e:be:b5:eb:c9:fb:c0:43:cb:b3:30:f6:50:8c:
44:22:34:fd:89:d2:8c:92:43:76:d7:9c:4d:0a:5e:
37:c4:7d:9b:1d:da:7f:7a:37:45:b8:93:38:e5:b1:
c9:12:9f:75:11:62:10:30:ce:4f:ab:9b:a6:b2:4c:
04:ac:e4:7e:c8:01:be:99:76:6e:66:23:c1:a5:7c:
08:64:c9:6a:b8:34:31:6e:24:52:d7:9e:34:fa:63:
aa:fc:b3:c1:f0:01:f1:49:dc:34:09:d4:2c:81:ae:
c2:22:47:73:c7:06:68:cb:06:7a:09:b6:bf:0b:7e:
b7:19:e5:3a:d0:de:ac:22:78:95:ac:50:25:05:a0:
71:e1:e8:e7:f4:96:29:81:88:b3:2e:46:de:ea:86:
f3:3a:2d:f5:ce:95:7f:8f:55:e6:8b:42:6c:33:74:
d2:38:86:36:b2:f3:88:1c:76:63:f8:bb:66:a2:1f:
df:ac:4d:f6:50:3e:11:d5:94:93:18:55:d4:0d:5a:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:60:B1:AB:73:EA:A1:17:E5:C4:A0:60:96:DA:4F:53:FF:14:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xEBgsatz6qEX5cSgYJbaT1P_FEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:33:fe:ba:b4:5a:9d:7e:55:27:23:52:91:a0:b4:98:c8:3f:
a2:dc:6e:ce:8a:22:37:79:20:fb:df:e2:90:fe:50:a9:7a:4d:
5c:17:5c:a9:81:6e:ef:cd:fe:88:76:28:3b:cb:2c:23:ac:23:
d2:cd:0e:d7:24:03:fa:4b:0c:1b:9d:34:65:95:82:fa:de:2d:
64:ce:33:de:3f:44:72:9e:00:f2:e3:7a:f6:f0:cf:90:34:ed:
d2:96:44:85:68:0a:5a:d1:44:34:94:f1:51:3c:9e:85:b1:0b:
04:17:1b:d1:08:d3:1c:7c:78:48:2f:9f:f6:de:41:23:2e:40:
c7:79:57:e2:33:eb:3d:02:3f:7b:57:62:c6:ab:44:fd:45:b2:
84:60:91:6e:f9:1c:ed:f9:88:34:2f:fc:b4:7e:a9:b2:95:61:
da:97:55:fb:5b:8e:f6:13:9e:dc:5c:07:b7:c3:ec:d3:38:4d:
7a:b5:20:f7:ab:1b:81:6b:48:85:9b:d9:74:8f:83:6e:d3:55:
17:c1:d3:15:48:08:60:b5:48:dd:84:ae:12:69:36:b3:69:ed:
4c:b5:3a:7b:83:11:88:13:2b:2c:62:c5:c0:83:ea:81:d0:70:
4f:79:02:2f:25:ee:92:0a:63:ae:05:4c:51:a1:2e:00:ef:2b:
07:1d:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org