Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iKeMOtL7jud9ckEVD8t0PI1z8Eg.roa
File: iKeMOtL7jud9ckEVD8t0PI1z8Eg.roa (raw, json)
Hash identifier: HCoMKVVeRrbq03kPH78ZZFzpv9YW4au0IUiNy2p8EhE=
Subject key identifier: 88:A7:8C:3A:D2:FB:8E:E7:7D:72:41:15:0F:CB:74:3C:8D:73:F0:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3316
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iKeMOtL7jud9ckEVD8t0PI1z8Eg.roa
Signing time: Wed 27 Mar 2024 16:52:11 +0000
ROA not before: Wed 27 Mar 2024 16:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13078 (0x3316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 16:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88A78C3AD2FB8EE77D7241150FCB743C8D73F048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:af:bf:bf:4d:99:94:63:29:0e:6f:3f:dd:
36:3e:73:f9:4a:b0:6a:68:c9:24:70:14:52:ca:71:
f4:50:e8:63:e3:42:d5:7f:98:0c:e9:94:f5:ef:20:
5d:30:d4:f8:d0:a2:70:ca:55:7d:06:65:e1:3d:13:
3c:87:5d:4c:b8:c6:22:bd:32:ab:00:85:61:b7:48:
1b:61:d9:80:d6:fb:67:2d:3f:2e:74:09:f2:cd:06:
29:99:f9:a8:69:c4:ac:6c:18:d0:7c:58:1e:e8:58:
01:b9:4d:2d:fb:f2:d4:10:d6:b4:b7:31:bd:1a:fb:
3f:a5:b5:34:54:47:36:e6:d9:c8:b8:e0:dc:41:8d:
79:3e:34:7d:88:ed:ff:98:b0:f0:7f:8b:28:c7:47:
a6:48:46:0f:d2:d1:3c:66:16:2e:3f:cc:13:48:9c:
3c:96:4a:ac:57:cf:76:43:65:4a:e5:25:fa:67:a7:
5b:8f:6a:39:97:5e:a0:df:46:81:69:19:0d:8c:83:
94:2c:d0:f5:b7:f5:9e:66:1d:e5:3e:6f:6c:9c:03:
2b:03:9c:a7:4e:05:40:6b:01:19:3f:7e:76:e8:43:
db:b0:8b:55:7d:fc:91:aa:97:5e:4e:29:21:5c:30:
a1:b3:c2:eb:a9:60:2f:65:57:60:9f:fc:af:71:92:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:8C:3A:D2:FB:8E:E7:7D:72:41:15:0F:CB:74:3C:8D:73:F0:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iKeMOtL7jud9ckEVD8t0PI1z8Eg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:46:97:b8:17:69:08:7e:33:ad:98:1c:6c:3b:3b:81:93:7c:
fa:ca:06:d8:f9:df:ed:c0:11:5b:57:be:15:b0:88:75:89:aa:
4b:1a:04:b9:38:66:8e:4c:64:ef:69:4e:b5:64:b0:b7:94:52:
72:42:6f:5c:a4:13:70:fb:0c:70:17:fc:9e:e1:20:68:05:90:
95:fd:7a:34:63:26:f3:8e:c2:68:1f:3c:93:3c:00:a6:ab:41:
65:31:6c:52:21:12:96:ca:6a:b2:70:63:b1:5a:9b:b5:da:93:
15:93:f0:25:be:8e:6e:88:98:26:06:0a:e9:5c:7e:85:3f:39:
ed:20:09:01:4f:54:10:7e:4a:ad:22:61:8e:0d:b7:5e:1e:77:
f8:e2:49:64:07:a1:dd:dc:3d:8d:60:86:09:d2:bf:a9:ca:77:
b8:be:40:c1:f8:d5:9b:dd:7f:b1:7b:af:da:d6:a0:e2:2a:06:
4c:11:40:14:5b:c5:6c:46:92:68:ae:32:40:5a:93:66:ec:86:
03:c5:3c:0f:4b:5f:3d:dc:4e:bf:94:e4:35:4f:dd:7f:19:04:
0e:c7:08:e6:db:08:24:29:00:0e:2d:6b:08:1d:d3:a9:b1:06:
78:7b:4f:27:94:4a:97:5f:26:e2:c4:99:f1:18:6f:a9:a4:e3:
d9:dc:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:44:25 2024 by rpki-client on console.sobornost.net