Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C_xoy21AyX6y3WEOOwPQOi813Xk.roa
File: C_xoy21AyX6y3WEOOwPQOi813Xk.roa (raw, json)
Hash identifier: KLrACDUJi8CETW3/m+oONHNg3+m+KYUsjq0Rl8vQm+s=
Subject key identifier: 0B:FC:68:CB:6D:40:C9:7E:B2:DD:61:0E:3B:03:D0:3A:2F:35:DD:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_xoy21AyX6y3WEOOwPQOi813Xk.roa
Signing time: Sun 31 Mar 2024 03:22:11 +0000
ROA not before: Sun 31 Mar 2024 03:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13738 (0x35aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 03:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BFC68CB6D40C97EB2DD610E3B03D03A2F35DD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:6f:9b:11:a7:b1:06:00:64:c4:63:34:f7:
89:8d:cd:91:7f:ad:84:60:9a:33:1c:0a:ca:c1:30:
bd:0a:ca:74:26:53:ac:a5:07:8a:88:85:fa:1a:65:
ab:d0:35:d1:e6:63:fa:55:7f:a5:93:b6:6c:77:d7:
62:fc:5e:9a:98:19:45:33:56:ec:c7:10:22:a0:09:
73:0d:a0:f8:7e:e7:22:e6:9e:0c:97:e8:8c:b1:96:
1a:8b:a6:6e:bc:d0:14:e1:0e:95:60:f7:69:67:1b:
27:6f:eb:16:f6:d2:03:7f:f5:84:70:24:10:f1:db:
aa:f0:05:85:d2:92:f3:08:93:da:e1:27:ba:45:9d:
56:3d:14:a0:d1:85:13:2d:6c:df:c2:dc:fd:05:84:
38:f9:65:22:0c:9a:0b:97:69:93:c1:c8:56:94:41:
b3:1b:f0:5b:a3:96:4a:ca:14:a9:c6:7a:bc:ad:e9:
cd:f0:82:57:93:8b:f1:09:db:4a:b2:1c:8f:d5:df:
69:cf:35:c6:87:a7:e4:31:d4:1c:e8:b2:28:e3:94:
66:52:23:de:65:bf:49:31:5d:d7:a2:1e:77:13:8d:
9b:99:f0:bc:9b:6c:69:e6:d3:f9:99:d5:f1:c6:7c:
9c:7b:c1:ac:f9:17:d8:09:a4:2b:15:f4:a0:b3:a0:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FC:68:CB:6D:40:C9:7E:B2:DD:61:0E:3B:03:D0:3A:2F:35:DD:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_xoy21AyX6y3WEOOwPQOi813Xk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:d2:22:da:5f:61:f9:b2:2b:62:63:c6:a7:45:ed:05:f3:11:
45:85:01:63:eb:07:b0:49:34:8a:5c:b5:6e:8b:8a:83:8a:37:
c6:72:0f:8f:2c:a7:fb:b4:4c:3b:ba:03:87:ae:b0:eb:bb:58:
5b:f1:63:f7:65:17:eb:e0:ff:ce:ab:4f:50:39:4b:04:04:9c:
cc:af:ac:a2:e0:d1:ce:ea:50:17:bc:dc:54:63:b1:55:44:27:
f7:78:4f:cc:01:69:38:bd:ae:4c:7f:cd:36:72:30:64:72:bf:
f0:fa:a3:2d:2d:b4:e3:7f:74:eb:70:ef:ea:a9:72:bf:af:05:
ba:4e:06:04:12:e3:27:8d:63:a8:ee:10:8a:0c:18:8d:f8:5d:
d8:f0:33:10:20:19:1a:63:d7:cc:e2:2a:c3:a9:8f:29:bd:73:
41:75:f4:b2:bf:f6:11:2b:ed:19:ed:30:65:e1:ae:cc:b2:cd:
0d:0c:52:49:e5:a3:a2:d7:37:9f:8d:1f:0a:97:02:c3:15:69:
cc:7a:57:60:e1:41:f9:a3:91:6e:bc:4b:8f:48:aa:6f:dc:3c:
92:ae:f5:a8:8f:a8:c0:80:ee:0b:d5:3c:ec:b6:87:1e:74:a9:
97:7e:62:38:f1:d3:be:38:a6:d3:3b:47:53:85:bf:16:31:b6:
04:b2:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 09:52:10 2024 by rpki-client on console.sobornost.net