Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xclZqj63wBld36J2Hod1UhJIKeY.roa
File: xclZqj63wBld36J2Hod1UhJIKeY.roa (raw, json)
Hash identifier: VtnfyYdG7JALZTiijGyzBnENORNkNhsdIoT5/PP+x2U=
Subject key identifier: C5:C9:59:AA:3E:B7:C0:19:5D:DF:A2:76:1E:87:75:52:12:48:29:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xclZqj63wBld36J2Hod1UhJIKeY.roa
Signing time: Sat 20 Apr 2024 06:53:09 +0000
ROA not before: Sat 20 Apr 2024 06:53:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17606 (0x44c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 06:53:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C5C959AA3EB7C0195DDFA2761E877552124829E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:d6:6e:a5:46:f7:40:48:87:52:c3:47:38:
27:6f:fc:a4:8f:05:e4:6c:37:28:f2:dd:b6:a3:22:
b7:b0:b5:7c:30:1b:03:cb:55:cd:c7:62:7f:5e:38:
de:86:b4:26:16:4a:85:5f:b2:da:71:2c:c8:b8:5d:
99:41:37:1f:ec:3b:50:21:7e:6d:2b:9e:fa:e0:2d:
0a:d1:c5:78:40:a0:a0:7f:f7:81:7c:dc:22:1a:55:
b4:14:52:77:bf:84:1c:dc:43:b4:25:b0:0d:56:91:
da:12:1b:98:e1:0a:63:df:8e:21:3d:04:d9:15:1c:
82:6a:75:95:bb:5b:0f:89:a2:50:66:7f:32:9f:9d:
f6:ec:87:3c:dd:ce:84:0e:cb:f0:24:b6:54:04:b3:
4b:ff:ce:c7:09:8e:31:88:f2:c4:3e:2e:6c:b7:8c:
08:d5:a8:33:b9:82:29:69:6e:ab:56:b8:c9:03:75:
b8:60:e6:29:44:7e:07:24:da:e6:fe:44:33:f2:7e:
ad:48:de:32:7d:28:30:96:0c:18:fd:4d:50:b7:78:
09:a1:9f:84:e1:10:f3:d7:28:d9:86:4f:79:98:4a:
88:31:29:41:51:97:9b:a9:96:3f:ae:a2:7f:e3:24:
83:af:4a:19:02:33:af:50:72:20:39:e0:7f:8b:cd:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:59:AA:3E:B7:C0:19:5D:DF:A2:76:1E:87:75:52:12:48:29:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xclZqj63wBld36J2Hod1UhJIKeY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:23:4a:10:9a:a7:43:dc:72:6e:bc:48:4f:ff:6e:b0:78:1d:
76:1b:81:2f:87:cf:e5:9d:9e:c1:67:91:8c:24:f5:94:c2:2c:
99:3e:f5:92:2d:e6:9a:29:ed:bf:d4:b4:ab:0d:29:8a:0e:36:
08:60:28:03:8e:a6:43:b9:3d:2e:04:9d:2e:fb:23:cf:da:31:
7a:bd:b7:b0:d2:b8:56:58:7d:ab:c6:bf:f6:41:82:7e:5b:62:
30:45:e2:9e:1f:04:3f:d2:25:6d:ac:c3:bc:31:8a:2e:3b:4d:
4d:c1:99:5f:ec:6b:d0:d2:c0:76:8e:12:2d:05:65:97:a7:ff:
8c:de:a4:c5:5d:62:bd:c5:86:3e:b0:ae:5f:14:9d:b1:27:f4:
fb:15:a5:f2:be:87:38:98:13:c0:5f:e8:31:7b:71:50:8e:95:
c7:ae:22:34:9c:dc:de:d5:b2:8e:52:3d:d9:a8:80:c9:06:52:
27:ef:63:7d:20:f0:01:be:af:6e:5b:4f:9c:2c:0a:34:26:9b:
69:4c:37:6e:08:ca:62:06:a6:8b:c6:57:d7:16:15:3f:d6:4a:
97:eb:d1:a0:c0:ce:d7:8b:33:90:1e:61:64:bd:aa:1a:d7:03:
d0:a1:bf:b2:b1:d6:b7:a2:ac:e8:d2:f8:35:a5:0c:13:c4:ce:
13:da:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org