Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1tH2oQzyMjmBjktEmGi8lCK4KWs.roa
File: 1tH2oQzyMjmBjktEmGi8lCK4KWs.roa (raw, json)
Hash identifier: cR1njCX25NQK8rQJMtmzIdQ5Jod3kF4xTGvuNUUy5kc=
Subject key identifier: D6:D1:F6:A1:0C:F2:32:39:81:8E:4B:44:98:68:BC:94:22:B8:29:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 328A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1tH2oQzyMjmBjktEmGi8lCK4KWs.roa
Signing time: Wed 27 Mar 2024 07:11:50 +0000
ROA not before: Wed 27 Mar 2024 07:11:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12938 (0x328a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 07:11:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6D1F6A10CF23239818E4B449868BC9422B8296B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:38:8c:07:8f:d0:4c:ca:cb:0b:71:2a:23:
d9:89:c5:cd:02:be:45:df:54:98:ac:99:41:0a:39:
7e:3d:ae:ac:a9:ae:65:eb:d2:92:04:32:8d:52:fc:
9e:a3:33:e0:a0:1a:fa:62:d2:1b:3f:e6:97:46:ed:
4f:08:88:9a:48:c9:c8:5e:5f:c3:af:e4:55:00:1c:
56:e8:f9:db:d6:92:8a:b5:df:6a:7d:50:82:5b:0a:
48:be:b8:7b:16:a8:5d:8e:07:7e:bd:04:f1:3e:15:
a6:59:86:50:ff:1c:15:0a:78:d0:cd:bb:5f:82:95:
62:83:db:96:07:46:33:f0:0e:f2:65:f0:4c:73:96:
71:ca:5a:7f:45:5f:e0:99:77:00:03:b9:15:c5:71:
c3:20:27:34:d7:c3:c4:53:cb:8d:31:9a:65:a8:d1:
21:88:d1:0e:67:51:79:55:37:ac:9c:44:59:ba:8f:
fe:7e:53:f2:a3:2e:aa:72:16:aa:94:13:62:20:24:
53:b8:c1:64:35:8c:48:94:2e:47:d5:3d:b3:63:5c:
d3:ad:6b:09:b1:de:9a:de:c3:c2:b4:00:1b:2c:c8:
59:2d:79:78:6b:ba:8c:45:85:6b:21:ef:50:4f:c0:
af:2c:b5:46:6a:86:84:50:2e:b8:64:23:e6:db:d6:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D1:F6:A1:0C:F2:32:39:81:8E:4B:44:98:68:BC:94:22:B8:29:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1tH2oQzyMjmBjktEmGi8lCK4KWs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:bb:13:44:51:dc:31:20:7b:eb:8a:14:1c:c3:31:27:f1:7c:
36:49:30:3d:ee:3d:25:ee:56:5b:be:17:bf:37:d0:40:9b:90:
eb:4a:07:d2:07:4d:6a:ee:4c:df:38:4e:54:8a:76:4f:f9:90:
25:02:9f:a8:bd:06:e1:7b:f7:49:bc:83:56:20:41:0f:a5:c3:
d1:af:a0:12:3d:e4:f7:46:39:f5:ad:dc:c5:92:7e:ae:dc:aa:
47:2e:7f:bd:aa:31:fd:0b:63:95:7d:c9:dc:70:76:c0:91:0d:
2f:2d:f2:23:96:4d:f9:a6:52:72:19:59:e8:d9:c5:0e:93:a8:
f4:a9:80:57:49:d1:02:cf:2c:ac:5e:b1:44:35:7b:a8:9f:eb:
9e:be:28:61:35:51:09:e0:0c:3a:61:56:92:e0:d8:16:c3:c7:
a4:49:95:35:8a:fd:14:c6:f8:1d:45:9b:f3:c0:3c:66:0c:ce:
a3:0e:7a:cb:2f:dd:c3:ff:f2:f2:84:b4:91:8c:c5:c1:bc:84:
95:3f:ce:52:c9:80:08:a0:a8:63:2a:7a:1c:59:b2:b1:be:24:
25:65:ef:d2:82:97:9c:76:99:33:7a:52:8e:d7:d7:f5:01:b6:
9d:d3:5e:03:7f:05:de:37:1d:40:25:49:de:69:c8:47:4e:f4:
ea:ad:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 13:23:28 2024 by rpki-client on console.sobornost.net