Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LhGBuQAXfSAqs-i2ipUbUUAIiy0.roa
File: LhGBuQAXfSAqs-i2ipUbUUAIiy0.roa (raw, json)
Hash identifier: IHTOn2jEDD5iGcMaucOTVNlPrQXkjQC36L91eJ443sc=
Subject key identifier: 2E:11:81:B9:00:17:7D:20:2A:B3:E8:B6:8A:95:1B:51:40:08:8B:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 45A2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LhGBuQAXfSAqs-i2ipUbUUAIiy0.roa
Signing time: Sun 21 Apr 2024 10:23:06 +0000
ROA not before: Sun 21 Apr 2024 10:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17826 (0x45a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 10:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2E1181B900177D202AB3E8B68A951B5140088B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:40:74:fc:71:3a:e9:58:13:ae:c0:5c:25:
8d:5a:37:92:a1:69:c8:03:9b:12:7c:14:ab:8d:9b:
ea:b4:48:6a:fa:f1:2c:5a:89:8a:1a:6d:98:92:76:
bf:83:b8:b2:27:3b:86:45:86:12:a5:28:77:81:cd:
24:46:b0:29:14:47:67:d1:50:af:6b:46:f5:52:2b:
46:8f:26:36:29:da:7e:0b:8c:7e:5b:c7:50:6f:e6:
95:79:2a:0a:41:da:73:8d:01:1f:38:51:f8:6c:76:
c9:20:32:59:cd:5c:ed:80:31:da:45:7d:5c:46:4e:
98:05:75:a2:ed:e3:7a:64:df:f1:72:75:a6:98:ea:
66:1a:cb:dc:51:7e:b7:bc:84:ed:c4:9f:4e:60:75:
b9:8f:22:65:ec:ac:12:48:06:90:b2:34:bb:68:a1:
f5:07:26:af:53:b1:87:da:5b:fc:17:8d:93:14:f1:
09:11:ba:43:e8:10:b1:d9:db:81:c2:49:f2:e6:a2:
9b:f7:fc:3b:6a:f9:f4:14:1e:a2:5d:22:fc:7b:ee:
40:f8:dd:73:ce:04:53:74:e8:4e:d8:b1:65:aa:22:
79:2d:3f:08:69:80:fe:56:08:68:1a:d3:d6:bf:58:
62:0b:50:b0:4e:57:97:a6:5f:a5:98:be:09:04:3c:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:81:B9:00:17:7D:20:2A:B3:E8:B6:8A:95:1B:51:40:08:8B:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LhGBuQAXfSAqs-i2ipUbUUAIiy0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:6c:3f:1f:97:fe:38:d9:d6:a9:c2:b3:55:ee:ff:e3:41:da:
87:5d:e8:75:30:19:5a:0d:4f:d6:2f:4d:6d:f4:34:04:2f:8d:
12:d3:17:ba:5d:b8:86:bd:26:31:4f:0b:17:17:f2:45:54:44:
45:95:7d:69:36:1e:68:ba:1e:4c:0b:2e:dd:82:a9:99:d9:81:
aa:6e:5e:92:64:2e:ab:92:4c:0a:e5:72:32:bc:8e:98:9f:bc:
28:9c:7a:d7:2b:f0:51:da:64:57:61:07:42:32:20:cc:9b:46:
8a:6d:ca:41:34:96:ce:55:7f:92:97:ed:64:89:43:76:86:3c:
8f:2e:72:45:f6:2d:cf:a3:03:dd:9c:90:1f:be:34:7e:23:1e:
89:4d:39:17:de:1a:b5:84:7d:75:1f:f9:69:14:ed:d7:e2:3a:
37:72:8a:a4:c3:fb:ec:68:f9:d7:ad:15:de:71:b1:6d:99:ef:
48:d0:db:f0:cb:6c:dc:65:be:1f:2a:fa:2a:de:a0:ea:38:4e:
22:7c:14:c0:80:9e:cc:4d:22:16:08:52:60:9d:27:70:39:a2:
36:99:19:52:f8:04:f3:86:f7:2c:82:2c:a3:e0:fe:e6:1d:74:
a1:ca:a9:cd:1b:a0:87:19:33:9f:d0:c2:65:a6:98:64:2e:49:
f1:f5:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 17:47:07 2024 by rpki-client on console.sobornost.net