Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4mOKGh__Vqmgaa44ggd86BfHZ1k.roa
File: 4mOKGh__Vqmgaa44ggd86BfHZ1k.roa (raw, json)
Hash identifier: klrt/F1A9k3ik673RQdx8ElYeITSzOrFm7Y1LZjzev8=
Subject key identifier: E2:63:8A:1A:1F:FF:56:A9:A0:69:AE:38:82:07:7C:E8:17:C7:67:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41E6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4mOKGh__Vqmgaa44ggd86BfHZ1k.roa
Signing time: Tue 16 Apr 2024 10:52:56 +0000
ROA not before: Tue 16 Apr 2024 10:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16870 (0x41e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 10:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E2638A1A1FFF56A9A069AE3882077CE817C76759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:49:0b:b5:00:28:7b:26:cc:08:ac:36:5f:
b2:18:48:74:49:c6:7d:e2:e6:b9:3a:ed:74:3d:54:
f4:4e:83:ef:9c:49:ec:85:85:62:a9:49:96:e8:1f:
48:ec:17:a3:62:d5:20:f1:53:2b:1d:69:8e:92:01:
21:1d:4c:f4:6d:12:28:a1:20:b2:4e:b2:bb:30:76:
3c:ca:23:4b:c4:2b:28:ca:b8:3a:90:27:1c:9f:cb:
65:2c:ec:00:6d:a6:ef:4f:9f:73:1e:c5:71:a7:5f:
4d:d5:55:6d:01:88:f2:0d:d5:39:4c:c8:6b:61:3f:
e5:4d:d8:f0:3f:00:48:9e:77:b9:d4:3d:da:06:a8:
a7:1f:ec:f6:e6:d0:50:07:5c:22:45:ac:a7:43:69:
dd:b8:31:4a:cc:22:a7:29:a7:60:87:cd:be:45:1d:
36:6e:3e:46:cc:4b:6e:d4:be:6d:f7:3d:8f:7d:9c:
3e:f4:a4:32:d5:d8:99:93:17:71:48:86:a6:53:19:
76:33:e9:4c:71:84:9e:f8:89:f6:be:f7:16:ba:56:
94:1c:56:64:62:cb:45:eb:e5:36:f7:4f:0c:55:e8:
cd:33:81:a0:2c:2a:cd:9c:60:73:b4:09:2c:99:0e:
14:2d:20:60:90:b2:08:0d:d3:c3:71:b0:ff:7c:0d:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:8A:1A:1F:FF:56:A9:A0:69:AE:38:82:07:7C:E8:17:C7:67:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4mOKGh__Vqmgaa44ggd86BfHZ1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:5b:22:00:06:c1:b6:16:b6:aa:40:bf:e1:51:7e:df:77:da:
30:11:e3:df:cb:9f:c7:5d:04:c1:a3:13:88:7d:88:fb:99:9a:
3d:d8:ad:e4:d0:f2:a9:8a:35:fb:b9:b3:44:cf:7d:4e:0f:5e:
f3:a5:bf:ac:08:a6:9d:8e:de:4c:3c:21:4b:ad:61:fb:5c:9c:
98:f3:40:8c:25:3f:de:93:5b:e1:b6:8c:e2:68:34:53:30:e9:
84:86:a2:e8:cb:ae:e0:ef:e8:63:bc:04:1e:d3:e2:5f:45:bb:
d2:06:6b:3f:3e:7e:e6:e1:5d:ac:f0:03:f9:96:ae:3b:a6:96:
1a:1f:89:14:9c:1c:83:d8:c4:25:3b:a1:56:bf:d6:41:9e:03:
a2:56:8e:2e:f1:38:0d:88:57:9c:da:89:ff:a4:fd:80:48:68:
89:7d:43:63:99:e2:73:19:bf:c5:88:e9:4f:24:2c:1c:f9:9d:
c4:0c:dd:46:c7:43:fc:72:32:2a:e1:82:b1:97:1e:bb:b4:d8:
5d:fd:e3:a7:6b:26:06:2b:13:f7:bb:f2:be:50:b4:63:68:67:
d0:f7:15:b6:f9:3e:cf:fe:43:fa:88:6b:c9:ca:71:df:aa:7b:
f1:04:ee:c1:f6:4f:b8:70:1a:51:13:55:b5:cc:e6:a4:7b:f8:
a7:1c:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:59:07 2024 by rpki-client on console.sobornost.net