Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Xt1xrMimLG3PQUtKm1kP_yXSFNY.roa
File: Xt1xrMimLG3PQUtKm1kP_yXSFNY.roa (raw, json)
Hash identifier: pUlQ+TxP+O9c02zx+GolDKv74wHumqLi6mf9rpvgQ+U=
Subject key identifier: 5E:DD:71:AC:C8:A6:2C:6D:CF:41:4B:4A:9B:59:0F:FF:25:D2:14:D6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42AA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xt1xrMimLG3PQUtKm1kP_yXSFNY.roa
Signing time: Wed 17 Apr 2024 11:22:59 +0000
ROA not before: Wed 17 Apr 2024 11:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17066 (0x42aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 11:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5EDD71ACC8A62C6DCF414B4A9B590FFF25D214D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:38:57:80:9e:cc:8f:99:55:f5:64:3c:e0:ec:
5e:80:44:71:9c:a4:54:eb:77:f9:37:ba:d5:6d:65:
8b:47:97:cf:c5:1c:22:ff:de:b3:21:9c:fe:ee:33:
bd:1e:7f:e7:5d:0c:db:1f:7b:13:96:03:b3:bc:6d:
ca:91:0e:4a:2f:0f:0d:98:d4:62:43:a9:72:08:05:
4c:f6:94:cc:e1:38:b6:01:bb:92:4a:25:0f:d4:e3:
c2:de:5d:14:ff:38:24:2f:d2:77:f0:2b:ef:24:64:
72:3b:c8:b6:cd:30:cb:b6:ff:fd:cd:c2:84:8b:c8:
2f:b1:6c:d8:23:6f:8a:40:e7:bb:01:f5:2c:34:41:
51:2a:9f:c7:74:64:81:a9:c7:3b:06:f9:cb:7c:d9:
6b:61:94:fc:eb:22:9a:3a:20:92:de:70:73:3c:78:
94:5f:83:18:1d:cd:2c:70:69:95:b6:eb:c0:15:a1:
95:bc:ef:d2:fb:51:48:dc:13:7b:f9:a9:90:d1:86:
01:22:2a:8f:e4:3d:9e:fc:49:ba:e4:46:70:a5:e4:
34:44:92:ce:ed:01:5f:d6:0c:15:b7:68:6a:f5:04:
53:2b:70:eb:98:28:ac:cc:2d:3b:8c:2d:77:03:cb:
6e:99:3f:97:7e:5d:65:d5:59:96:87:81:73:69:a2:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:71:AC:C8:A6:2C:6D:CF:41:4B:4A:9B:59:0F:FF:25:D2:14:D6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xt1xrMimLG3PQUtKm1kP_yXSFNY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:3c:6f:82:4c:3f:bf:35:51:59:ca:ce:7b:b5:1c:0a:35:3c:
05:4b:07:67:1f:cf:9c:78:02:fa:1c:a8:09:96:12:61:54:6f:
f9:34:1e:ba:e0:4c:0f:9d:4b:bd:26:e8:14:15:d5:7d:c1:1b:
d9:5e:0e:e4:95:a2:5b:81:9d:ef:a9:f1:14:ed:11:39:ae:0b:
6b:bf:e0:36:7c:6a:ee:94:23:64:fa:a4:e7:6c:4d:92:5f:00:
2d:65:73:f5:6f:de:ef:39:39:92:0d:34:ed:bc:3d:4f:4a:57:
38:17:18:7e:ec:dd:cd:7a:3d:0d:98:f7:8b:9d:91:9a:14:19:
0f:d9:36:c2:d6:18:ef:b6:fb:44:e3:6a:4f:16:94:0a:f9:c4:
9a:b0:7e:03:04:28:43:e6:22:41:39:2c:5f:41:46:ea:3b:34:
0e:fd:9d:51:31:2b:3a:e8:c5:61:ac:14:f8:63:35:13:23:f2:
a9:93:54:4f:57:c6:47:4c:09:37:50:36:e1:57:a5:bf:8e:34:
00:3d:81:12:fe:75:be:ed:8e:34:2e:8d:40:dd:22:94:4c:26:
d7:80:84:5c:13:cb:68:f2:29:b5:e9:41:9d:a0:7e:dc:46:34:
5c:40:e8:78:b1:f9:03:e0:c2:50:d1:50:a2:5f:f9:ba:56:c1:
91:ea:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:49:38 2024 by rpki-client on console.sobornost.net