Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6EN_KeWB11_QARSdeKg4ojoW2Kk.roa
File: 6EN_KeWB11_QARSdeKg4ojoW2Kk.roa (raw, json)
Hash identifier: GiQg/7lg85jjrNPPyf8My5w277y7Itc4ZWVcOGjPI/U=
Subject key identifier: E8:43:7F:29:E5:81:D7:5F:D0:01:14:9D:78:A8:38:A2:3A:16:D8:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6EN_KeWB11_QARSdeKg4ojoW2Kk.roa
Signing time: Sun 14 Apr 2024 19:22:54 +0000
ROA not before: Sun 14 Apr 2024 19:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16554 (0x40aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 19:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8437F29E581D75FD001149D78A838A23A16D8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:8d:64:f4:42:36:8a:ce:02:cd:ac:3b:79:
4c:d0:1a:b5:33:50:5f:e4:c6:d2:5c:ff:6f:5e:3d:
62:e9:e4:e2:1a:8a:87:99:2d:12:8f:74:b4:38:51:
73:66:a7:1d:ec:27:5b:4c:81:db:e7:7b:1a:22:1f:
90:74:87:36:5f:ed:65:87:90:22:76:be:87:d5:5f:
a8:06:a8:71:40:6b:06:cb:1e:d8:76:87:a1:4f:80:
42:4e:65:9f:46:e7:63:0e:de:65:a3:4b:cb:a6:48:
03:45:2f:a7:06:33:2a:41:6a:39:2b:b9:b1:8b:dd:
92:ff:67:67:fb:f4:41:3f:35:2f:cc:6d:1b:76:1d:
f4:ed:30:04:9b:68:5f:2f:c1:b2:7b:27:79:a4:2a:
a8:25:e5:37:b6:ef:e6:20:18:d8:ea:d5:5e:22:fa:
00:f5:fb:2e:99:84:a2:33:77:d4:36:35:0e:47:9d:
1d:3f:03:3d:a7:78:74:da:38:6c:8e:79:5a:1e:c4:
a3:e4:02:b2:99:9f:90:b5:a3:c3:c6:1c:70:e6:a2:
30:cf:20:cf:56:6b:8b:82:43:73:91:ba:23:91:35:
86:e1:42:c3:e2:17:3e:7f:59:66:c4:61:0f:88:04:
7f:69:38:0a:a1:3a:a1:b1:a8:f6:6e:55:70:e1:5f:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:7F:29:E5:81:D7:5F:D0:01:14:9D:78:A8:38:A2:3A:16:D8:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6EN_KeWB11_QARSdeKg4ojoW2Kk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:02:8a:f3:b4:cf:09:30:c6:1a:0d:69:a0:ed:92:e4:1b:64:
94:21:c8:09:41:e6:fa:8c:2a:a5:0b:2b:28:c2:2f:fa:fd:29:
4e:6f:cf:be:3d:fc:b2:7a:ed:3b:5d:e7:e0:34:19:2b:97:54:
ad:0e:5d:6f:c0:9a:26:8b:a1:ca:64:ec:24:81:78:9b:9e:de:
16:66:ec:6c:d5:58:c9:fd:6d:dd:d7:e6:e2:3e:86:cc:a7:b0:
46:21:94:be:5a:ff:1e:5a:5f:97:99:35:9d:30:8f:a6:a2:17:
c8:ca:33:e4:64:6c:2f:c0:c1:95:a8:91:60:73:97:f2:b9:5d:
94:af:50:63:6b:8d:1b:9a:ce:08:cb:53:f0:a7:c0:a8:a4:40:
ff:b2:96:3e:3f:01:88:f4:1f:03:48:1e:98:7b:f6:b5:6c:4a:
b9:2f:b9:2b:91:2e:8a:e0:f6:24:9f:3a:46:56:2a:51:06:07:
1a:79:80:1a:77:b9:41:69:a9:64:82:c0:23:38:60:3d:ab:2c:
a1:09:05:3e:1c:6c:89:08:2d:87:ea:35:34:e6:61:e5:c6:6d:
0b:32:f8:37:a6:ce:5b:dd:8b:08:7f:26:52:ce:1e:94:1f:92:
a1:74:2b:e8:a0:83:73:21:25:22:ba:68:42:71:51:7d:bc:c9:
c3:6d:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 04:51:05 2024 by rpki-client on console.sobornost.net