Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/z2CEKGIBSzHms7D90pqXHX2FZP8.roa
File: z2CEKGIBSzHms7D90pqXHX2FZP8.roa (raw, json)
Hash identifier: ggcoDYLspAPBxEb4919OjbR/tq53iR1CgOtb931qZAg=
Subject key identifier: CF:60:84:28:62:01:4B:31:E6:B3:B0:FD:D2:9A:97:1D:7D:85:64:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5712
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z2CEKGIBSzHms7D90pqXHX2FZP8.roa
Signing time: Tue 14 May 2024 16:24:14 +0000
ROA not before: Tue 14 May 2024 16:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22290 (0x5712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 16:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CF60842862014B31E6B3B0FDD29A971D7D8564FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:23:52:2d:66:02:d2:0d:53:eb:0f:cf:d0:
ef:24:32:23:29:22:87:33:19:0b:2c:02:50:78:e9:
10:90:11:81:da:ae:bc:2c:44:e9:38:60:cb:5c:78:
80:b0:b6:8e:be:59:ce:6c:68:6d:1a:95:94:62:a1:
f2:68:aa:58:e2:e1:30:9d:20:0c:68:24:01:2a:b8:
4f:91:67:35:96:3c:09:8b:86:bf:dd:a5:33:08:41:
25:90:dc:cc:77:16:71:3c:7f:38:f5:76:7b:df:59:
8e:95:65:68:03:a7:de:ea:8e:ab:ab:65:30:8d:53:
50:5a:ca:f3:26:ac:6b:95:89:76:55:b7:c6:8c:2e:
09:f4:18:d0:e5:c4:2a:f7:81:34:01:1f:a2:69:cf:
50:4d:a0:32:19:6f:9a:79:97:4d:bc:ab:1d:75:12:
cf:bc:91:70:da:64:3e:dd:cf:a3:8c:73:ea:53:8f:
33:30:fa:44:f2:b3:55:9d:4d:42:c7:ef:fa:be:d7:
48:1f:0c:3a:33:cf:5d:9a:b9:0c:6b:94:2e:b6:a2:
98:ed:c5:c8:5d:dc:c4:3c:95:3c:17:3d:de:93:c5:
ab:7b:26:83:86:8b:ad:7b:d8:3c:dd:c7:68:28:9c:
35:7b:35:26:a7:1c:b0:ba:b5:37:10:c2:7b:10:bc:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:84:28:62:01:4B:31:E6:B3:B0:FD:D2:9A:97:1D:7D:85:64:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z2CEKGIBSzHms7D90pqXHX2FZP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:11:3e:3f:5b:57:04:2f:af:9c:03:e4:77:87:ca:62:bb:bf:
37:41:05:a5:3f:37:c4:4f:ad:ca:21:bb:a0:4a:fd:56:36:1e:
49:49:26:56:dc:06:85:93:e9:14:11:c1:07:df:3d:75:8a:e1:
7a:82:8d:f1:cc:4a:11:13:14:b0:e7:0c:d3:92:e2:09:fe:e1:
73:3d:10:fb:6c:85:04:a1:5f:85:45:89:03:36:a1:5c:12:21:
17:83:80:c0:46:21:f9:b7:34:8d:62:73:b8:82:51:66:c8:69:
6d:2d:16:5a:3b:c1:14:86:32:02:98:75:25:67:0a:5c:09:f3:
29:50:c1:eb:63:e5:c4:63:52:d6:74:37:ae:ed:7e:5e:cd:b5:
97:82:b3:73:9c:61:ff:02:d0:5b:a8:2b:e5:f0:de:11:24:8d:
cd:36:6a:ee:41:24:52:2a:22:61:31:37:89:f3:ca:55:79:98:
f4:ad:d8:c6:11:d4:ac:4f:79:8b:50:34:31:69:a0:8b:cc:dd:
3f:c1:e5:76:d5:c5:8f:66:65:00:b9:9e:5a:0d:b5:7d:0e:ff:
89:9d:9f:f6:34:85:55:6e:33:75:db:d8:d0:8f:7e:33:58:fa:
77:46:b6:65:c5:15:99:df:ed:82:b4:7e:92:f3:12:48:4f:45:
aa:c4:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org