Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yIYNNUMKMSosdGa-8T4F3AxBcls.roa
File: yIYNNUMKMSosdGa-8T4F3AxBcls.roa (raw, json)
Hash identifier: bcXZ6bO7LzcN8BJn0/hNm8b4CzJCMiQ92Yu3kXAt1HU=
Subject key identifier: C8:86:0D:35:43:0A:31:2A:2C:74:66:BE:F1:3E:05:DC:0C:41:72:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 402A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yIYNNUMKMSosdGa-8T4F3AxBcls.roa
Signing time: Sun 14 Apr 2024 03:22:52 +0000
ROA not before: Sun 14 Apr 2024 03:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16426 (0x402a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 03:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C8860D35430A312A2C7466BEF13E05DC0C41725B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:75:9d:cc:18:e0:58:d6:00:85:30:7a:cd:e3:
c7:79:1c:91:96:16:fe:8a:5e:0f:d4:42:85:4a:0e:
30:ff:a2:68:86:df:16:d2:c9:2b:7e:53:a6:25:9f:
32:0d:13:e8:57:10:27:03:67:fa:46:ab:c1:65:9d:
d0:53:da:63:b8:bc:64:da:c1:30:55:87:72:f3:02:
a3:70:07:44:21:3c:c4:1b:82:69:ca:b2:c3:4d:30:
6e:8f:4a:b0:cb:31:32:bb:e5:ac:f6:cd:b3:3c:49:
89:c8:2a:dd:c0:31:ca:4b:f9:c7:06:5d:97:b5:2a:
7a:32:89:7d:d4:84:bf:8f:42:00:5e:02:65:70:07:
d4:de:67:23:b1:fa:3c:d0:96:c3:05:45:ce:ec:16:
2b:6f:6c:19:dd:cf:f6:60:8e:7f:49:cc:68:44:2d:
f0:f2:31:bd:ae:dd:bb:c6:c4:78:36:5f:a0:52:93:
4b:ab:03:2a:ab:e8:06:79:2b:5e:51:1e:12:cf:55:
2b:3b:f0:3a:dc:38:0a:73:be:f3:af:55:9c:ec:7d:
65:28:d2:94:22:50:2a:e5:ee:e3:3f:9b:8f:31:df:
0f:ed:d2:89:72:e2:24:f3:43:29:3f:b8:f0:2f:47:
0b:c8:6a:c4:ef:b5:b3:5b:41:71:fd:65:26:4d:ed:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:0D:35:43:0A:31:2A:2C:74:66:BE:F1:3E:05:DC:0C:41:72:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yIYNNUMKMSosdGa-8T4F3AxBcls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:fd:53:a7:c5:17:fd:3e:39:34:35:73:62:84:5d:4d:df:41:
c4:06:25:7a:50:c8:62:fc:c5:c6:80:d0:ae:72:11:af:24:99:
06:b1:48:ba:8f:0d:cf:3d:0b:78:14:c3:a5:54:8a:dd:f4:26:
90:1d:0f:74:b5:d2:49:82:68:3d:df:db:a7:dc:74:86:ba:e9:
1f:7c:ba:16:ab:5e:67:31:ec:95:45:2a:57:a3:31:a2:e6:a0:
1b:61:8d:83:b9:07:49:1d:b5:07:4c:72:3a:c0:20:16:e6:2e:
88:3f:07:d0:1e:5a:76:21:cb:f3:db:dc:06:a0:b6:ba:24:f9:
f7:40:7b:2c:28:4e:cd:a6:28:49:cd:46:ea:3a:50:21:32:98:
da:67:34:30:d7:3f:39:e2:48:41:3b:62:25:ca:31:49:98:ec:
75:92:56:f0:7a:6e:e3:67:0a:9f:48:cf:17:d0:92:f7:da:ae:
07:14:41:e2:62:36:01:01:2f:1f:be:9c:e2:bb:4f:16:e1:77:
17:90:65:be:b3:76:51:f1:86:8c:f6:aa:9f:3d:f0:82:19:e5:
97:f0:f8:89:38:aa:ab:f7:0d:4f:3b:19:20:e6:dd:e1:9f:b2:
26:36:ff:55:71:70:98:e7:24:57:e1:8d:2d:e3:db:20:44:0f:
be:7d:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org