Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SXA2-ZGLXneVDUiU5Dv8bsfcwv4.roa
File: SXA2-ZGLXneVDUiU5Dv8bsfcwv4.roa (raw, json)
Hash identifier: zs2rgub/ZuiFTHxH2bFf5uAGy2RNDxREqWCBEPVVk4M=
Subject key identifier: 49:70:36:F9:91:8B:5E:77:95:0D:48:94:E4:3B:FC:6E:C7:DC:C2:FE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41F6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SXA2-ZGLXneVDUiU5Dv8bsfcwv4.roa
Signing time: Tue 16 Apr 2024 12:52:58 +0000
ROA not before: Tue 16 Apr 2024 12:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16886 (0x41f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 12:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=497036F9918B5E77950D4894E43BFC6EC7DCC2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:7e:8d:14:69:ce:c2:1b:11:84:90:8f:c7:
76:b8:6f:6d:66:7e:69:61:d1:f4:40:36:e9:0b:05:
73:51:1e:1a:ce:cb:48:6c:71:e1:81:d7:00:6d:61:
e6:38:a3:87:7b:f0:1f:05:8d:1d:e0:4b:4c:3c:c2:
0b:74:53:f9:2e:50:df:04:75:e7:1e:57:52:d2:da:
73:73:0a:d0:18:80:ff:f6:5f:dc:f0:25:76:5b:fe:
19:e8:d6:e6:29:68:05:5a:b0:53:87:b6:27:42:5d:
43:af:09:b3:eb:3d:7a:66:5b:c7:b4:2b:dd:8d:96:
b7:1e:01:5d:2b:63:7b:29:4a:b1:d9:82:f7:28:9a:
e7:45:c6:a0:a8:4a:d7:8c:63:cd:22:83:17:de:d2:
6b:1f:5a:2e:1d:96:c9:ce:5f:50:e1:ad:c5:49:20:
64:68:c7:dc:d6:c5:f4:90:c1:9b:c8:43:d3:87:67:
b3:d8:ec:00:66:ff:13:38:f0:9e:ae:7d:b0:9b:79:
59:09:19:a5:0c:00:55:f0:b7:c3:73:fc:ef:dc:97:
10:71:d6:10:97:46:55:06:20:ae:81:2e:c4:bb:2a:
76:7d:46:5e:9d:75:b0:52:98:36:1b:01:db:25:77:
42:1d:d7:a6:f8:4d:f0:e5:ca:83:4a:6e:bc:3c:d0:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:36:F9:91:8B:5E:77:95:0D:48:94:E4:3B:FC:6E:C7:DC:C2:FE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SXA2-ZGLXneVDUiU5Dv8bsfcwv4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:bf:e3:f5:cd:0b:26:db:49:71:c5:cc:e0:9f:76:fe:6c:21:
cd:2c:5a:97:9d:70:17:c8:e2:74:b6:1c:e5:60:8f:3a:ad:e9:
cc:3c:bf:b9:f3:76:80:82:5a:09:35:93:09:cf:ac:ba:a9:52:
7c:82:a2:99:18:81:3c:23:cd:32:71:25:e6:aa:91:e9:77:66:
0d:4d:d8:95:05:dc:6d:ef:e6:92:9d:64:09:8f:a4:8c:33:74:
ae:75:c2:6d:51:43:bb:65:4d:65:69:81:c8:8e:c3:47:e2:f9:
42:d5:6e:84:61:f8:3a:20:27:03:39:6e:5f:6d:d3:38:c4:89:
0f:f7:19:18:64:61:94:0e:15:90:11:c9:0a:91:2a:97:be:1d:
95:40:57:74:95:c0:11:3d:c7:24:10:91:79:93:14:0f:af:55:
6f:ba:e9:fb:04:be:9d:57:11:3c:13:4c:05:19:7d:62:da:59:
d3:84:d9:2a:f5:ec:28:9a:53:e6:c1:86:0d:f4:14:9e:e8:3d:
ca:ef:5c:31:e1:e7:2a:8c:54:60:38:a8:fc:29:db:a9:86:38:
25:de:89:32:d4:5b:8d:43:02:9b:f4:94:bc:3f:be:98:90:02:
64:41:c8:15:da:d1:d3:46:cb:eb:4b:cf:e2:51:33:15:ba:97:
d4:6c:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:57:01 2024 by rpki-client on console.sobornost.net