Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5Ms8tXMLPvh4-cgqFW7dn3eUTWM.roa
File: 5Ms8tXMLPvh4-cgqFW7dn3eUTWM.roa (raw, json)
Hash identifier: up59EeGCs4w3P15FUcFFXiTQnmfHUPpuBwDLVsK+hPc=
Subject key identifier: E4:CB:3C:B5:73:0B:3E:F8:78:F9:C8:2A:15:6E:DD:9F:77:94:4D:63
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 498A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5Ms8tXMLPvh4-cgqFW7dn3eUTWM.roa
Signing time: Fri 26 Apr 2024 15:23:22 +0000
ROA not before: Fri 26 Apr 2024 15:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18826 (0x498a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 15:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E4CB3CB5730B3EF878F9C82A156EDD9F77944D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:f9:ab:cd:85:c2:65:eb:e0:6b:b7:fd:47:
f2:ed:63:ca:05:de:fe:de:ae:95:50:02:98:c7:85:
b2:aa:e4:42:24:98:ef:66:1c:9b:e0:0f:02:1b:df:
16:04:5a:32:94:4c:1a:60:18:43:93:83:3c:2a:76:
10:07:7b:2e:cd:30:e8:d9:df:3e:7d:ab:e1:fd:1e:
38:7f:be:e6:7c:91:79:0e:12:e5:e0:70:0c:dd:5b:
4c:7a:c6:38:c1:17:9d:bf:bf:c5:5d:ae:5a:90:7b:
be:30:22:37:c2:1a:04:37:3e:d6:8a:75:c0:8c:f1:
ef:ae:44:87:14:a3:50:45:a6:03:af:ab:cb:f4:23:
26:a2:b8:f5:52:fa:6e:86:2b:f7:93:ae:9d:af:05:
30:2a:38:b9:91:91:c2:a1:b2:ad:0d:f7:fe:49:48:
ea:10:05:6b:bf:51:be:fb:e7:d1:d8:9d:7e:d7:ae:
d3:7a:2d:99:08:50:7a:4c:d8:60:b0:ad:ba:2f:17:
7e:aa:cd:c5:0b:5f:9d:e5:80:50:29:49:5a:0b:e4:
39:ab:2d:45:ef:2c:93:fa:a7:88:ed:c0:9f:7a:b7:
3b:5e:fb:32:ff:8c:a8:fe:ea:66:a6:f3:aa:8f:4c:
ad:77:77:0c:a5:70:78:6e:dd:5c:cc:3e:cc:68:60:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:3C:B5:73:0B:3E:F8:78:F9:C8:2A:15:6E:DD:9F:77:94:4D:63
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5Ms8tXMLPvh4-cgqFW7dn3eUTWM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:54:eb:93:40:bb:4f:13:71:91:aa:c7:87:79:71:07:64:dd:
bb:16:bd:78:96:dc:96:92:f5:6c:84:48:27:7e:b9:12:77:b1:
26:29:ff:29:09:45:32:0d:c5:f5:f0:0c:80:ae:a5:17:70:55:
fc:23:3e:39:9e:db:0a:82:29:f8:34:09:fe:84:ad:bd:36:90:
bf:bc:77:15:a5:ca:c8:9c:4b:6a:cc:7c:88:35:05:ef:ed:c0:
fc:e3:9c:d7:87:45:29:3c:97:31:f6:58:ee:ea:b3:b6:18:27:
c2:9e:ee:fe:f6:e0:50:82:d9:f7:e0:f7:26:9e:e9:c9:b2:88:
af:89:b4:16:da:cc:85:78:41:a8:1e:a0:9b:4e:86:5a:2d:92:
68:cc:63:9a:24:1a:1f:0c:db:3c:3c:2c:51:ee:21:e8:99:32:
88:72:53:dc:87:64:a0:b3:d8:83:4d:b6:60:c8:ea:5f:92:0d:
9e:b5:09:58:2e:62:e3:8c:f5:96:db:54:1b:c0:fc:fe:7e:04:
cb:84:8e:50:be:0e:ae:4a:c3:46:bc:7b:b1:1f:5b:a4:ab:55:
6b:39:8d:6f:0c:66:e8:dd:dc:0b:a2:66:e8:ad:4a:18:40:12:
25:d0:1b:86:a8:d5:e3:64:ad:58:a1:d7:8e:cd:cb:2c:fc:aa:
b5:68:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 22:47:19 2024 by rpki-client on console.sobornost.net