Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jaZcu8r7SjYZE1OKwfAwcNxauos.roa
File: jaZcu8r7SjYZE1OKwfAwcNxauos.roa (raw, json)
Hash identifier: W9jHGWklQ2yHxjvsvqjBg4BPESaak2uHYjI+hihJyAI=
Subject key identifier: 8D:A6:5C:BB:CA:FB:4A:36:19:13:53:8A:C1:F0:30:70:DC:5A:BA:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jaZcu8r7SjYZE1OKwfAwcNxauos.roa
Signing time: Thu 04 Apr 2024 05:52:24 +0000
ROA not before: Thu 04 Apr 2024 05:52:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14526 (0x38be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 05:52:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8DA65CBBCAFB4A361913538AC1F03070DC5ABA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:d9:46:5f:0a:a3:19:b1:9a:9e:57:cd:f3:
85:c4:47:8d:52:f2:8e:3f:c1:55:5a:db:d7:c9:71:
57:10:f6:06:11:71:80:b1:9e:f2:aa:02:9f:6c:fa:
14:f8:ef:7e:16:48:31:f8:bb:cd:dc:03:4b:79:d1:
9d:93:d5:63:96:ec:f9:b4:e1:5d:f1:9f:f4:b8:62:
2a:de:52:2e:22:7c:7c:30:06:b7:e0:63:2b:37:5a:
d1:86:a5:33:52:52:59:a2:ed:97:67:bd:d2:c9:81:
21:0d:f5:98:b8:e9:06:1f:d1:8e:25:d4:ee:d9:3c:
0d:da:59:2a:dc:29:86:06:a1:c6:60:d8:11:42:10:
35:80:73:6e:0c:33:e0:68:44:7b:4f:3e:a9:d6:ca:
03:60:22:6a:81:f4:14:00:3c:b9:e3:c7:70:a4:3d:
54:f2:0a:26:00:03:6f:a0:6a:57:19:aa:68:83:f6:
db:0d:e4:f7:02:61:cf:d0:84:2b:df:19:95:b5:c3:
a6:65:26:56:aa:d2:c9:fe:cc:c1:38:9b:12:6c:77:
0d:21:f5:58:bd:dc:1d:6e:24:f1:d4:bb:8c:95:52:
ef:19:1d:c0:db:2b:39:51:7e:3d:59:bd:43:c0:1d:
67:6d:fd:e3:c7:8c:ff:3f:e6:af:cf:c5:62:05:27:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:5C:BB:CA:FB:4A:36:19:13:53:8A:C1:F0:30:70:DC:5A:BA:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jaZcu8r7SjYZE1OKwfAwcNxauos.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:13:77:9b:f4:6b:98:d7:d3:e2:77:65:f5:f5:f7:5a:c5:cd:
b6:d0:4a:57:f2:ec:77:2e:3b:6a:c7:34:ff:f8:b2:49:44:09:
89:35:5d:07:e8:c5:81:ed:0e:9c:2b:f9:4a:24:2c:62:68:e0:
43:37:8e:b3:29:82:9d:64:33:7e:7d:12:ca:c4:66:a7:42:04:
4a:3c:99:71:42:fa:2b:8b:0e:7e:7d:8e:62:2b:bd:f1:f9:a2:
79:b2:0e:d8:69:34:8f:a6:47:6b:f7:8e:2f:5b:4d:bb:d3:0d:
aa:60:30:8d:1a:c4:53:24:5b:c4:96:cc:6b:b0:2c:7a:75:69:
e2:39:42:f7:76:59:a8:5e:06:e6:62:cf:64:db:b3:ea:db:12:
18:51:2d:51:5a:16:b5:6d:9e:32:b4:b4:73:25:cb:7c:ea:97:
67:0e:29:ea:5d:c8:2c:66:42:9a:19:c2:5e:48:c3:3f:21:b2:
5e:1c:4f:f6:93:34:5a:73:e5:c5:95:e1:7d:1d:16:2c:ca:f8:
5b:93:0c:b0:96:82:4a:6d:62:72:69:04:4d:6a:51:6d:b8:62:
24:1f:5e:89:61:f3:ca:52:6b:d7:ed:4f:b2:6e:1d:41:41:7e:
cf:5f:b1:e3:15:97:1f:91:8b:80:ea:03:57:85:e3:6a:02:f8:
b2:68:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 12:50:09 2024 by rpki-client on console.sobornost.net