Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kKm_HhyQ1Vkfh7vN0VzUA9Y__wk.roa
File: kKm_HhyQ1Vkfh7vN0VzUA9Y__wk.roa (raw, json)
Hash identifier: NT2VqTsSMYTclcYCA13329djk4kz4cG8A6IPQEBmhaE=
Subject key identifier: 90:A9:BF:1E:1C:90:D5:59:1F:87:BB:CD:D1:5C:D4:03:D6:3F:FF:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 570E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kKm_HhyQ1Vkfh7vN0VzUA9Y__wk.roa
Signing time: Tue 14 May 2024 15:54:10 +0000
ROA not before: Tue 14 May 2024 15:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22286 (0x570e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 15:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=90A9BF1E1C90D5591F87BBCDD15CD403D63FFF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:98:2b:89:ab:3e:57:a7:b3:61:11:eb:62:
f6:9d:16:8a:bb:be:b2:c3:09:65:08:ee:5c:82:e8:
e7:43:92:fb:72:2a:dc:e7:48:e0:82:4b:2e:44:7d:
35:ae:23:9c:3c:e2:50:3b:f5:ad:4c:2f:ba:a7:b3:
3d:a3:fa:fd:04:26:55:9d:0f:93:30:83:db:65:38:
8e:89:f3:1f:bf:24:12:43:23:de:fe:f5:b0:31:20:
5d:91:a5:6d:09:6e:bb:ef:b7:15:8c:9c:25:79:de:
bc:fc:2f:e6:96:28:f1:73:6a:92:44:35:69:46:9c:
a6:e6:e5:2a:6b:5e:5d:e2:90:40:03:cf:e2:b8:af:
4f:70:74:aa:76:ce:c7:3a:24:0f:69:c6:9a:3b:1a:
79:e6:34:b0:d4:f4:40:32:f9:8f:64:d1:09:29:24:
db:3c:cf:54:02:47:fc:15:6e:df:db:bd:38:71:bb:
98:d4:0b:21:1d:6a:33:8b:f2:33:95:9a:e6:ce:0c:
4c:46:7e:b6:0c:74:ce:e9:e3:bc:f8:84:f6:6e:7c:
eb:7d:12:18:b8:09:5b:8d:40:db:8b:08:dc:44:8e:
ce:1b:5c:b7:ea:39:fc:a4:59:27:43:56:37:dc:cf:
16:5a:d6:89:3e:e9:03:5e:d2:b8:c1:9f:1c:cf:0c:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A9:BF:1E:1C:90:D5:59:1F:87:BB:CD:D1:5C:D4:03:D6:3F:FF:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kKm_HhyQ1Vkfh7vN0VzUA9Y__wk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:6f:2d:bc:fb:e7:79:3f:8e:32:69:61:da:e8:de:cc:e1:3b:
b5:00:00:57:92:0a:42:6e:a7:5d:9c:42:84:17:4d:b4:fb:6b:
ae:00:8d:a6:cb:5f:50:83:9d:95:c0:4f:10:7a:0c:61:58:e4:
4f:b0:1b:48:74:04:57:1c:36:d5:5d:26:6f:49:2f:32:ae:05:
52:69:4c:97:7b:6e:d0:57:64:a7:5b:26:ad:5f:f1:ad:bc:0e:
9d:5f:d6:d1:28:bd:ae:65:70:75:2a:12:cf:6f:11:49:f0:64:
dc:c4:70:ac:6d:e8:be:ba:51:04:59:3f:a2:a0:a5:36:41:97:
e2:c2:a8:60:74:6b:27:8b:0a:5c:50:1e:06:19:72:ad:ab:ac:
e5:77:be:d6:e5:c2:07:d1:a6:9e:bb:c9:bd:a2:32:fa:98:37:
a0:dd:92:18:63:49:ff:37:ac:7c:90:3b:04:be:83:0b:82:27:
99:ee:89:a9:0c:1b:74:35:27:7c:f7:eb:fc:06:1e:b4:59:f2:
e1:75:6a:fb:22:9e:9e:49:7d:b9:eb:69:ae:5d:8b:b9:e8:7e:
f3:73:33:5c:06:ec:26:8a:3b:e1:e3:4d:80:aa:20:00:8b:0d:
36:7c:be:cb:ad:3a:4c:92:38:8a:4a:a6:bb:9e:7a:59:07:de:
90:16:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 10:51:34 2024 by rpki-client on console.sobornost.net