Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qEvyXBqINuXebM0bRHjylMa_sVM.roa
File: qEvyXBqINuXebM0bRHjylMa_sVM.roa (raw, json)
Hash identifier: 9dsxp/oD7IjhAKH9SpFQhygWY3O3R9t+8Rjxqo3DNTU=
Subject key identifier: A8:4B:F2:5C:1A:88:36:E5:DE:6C:CD:1B:44:78:F2:94:C6:BF:B1:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 450E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qEvyXBqINuXebM0bRHjylMa_sVM.roa
Signing time: Sat 20 Apr 2024 15:53:05 +0000
ROA not before: Sat 20 Apr 2024 15:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17678 (0x450e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 15:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A84BF25C1A8836E5DE6CCD1B4478F294C6BFB153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:5f:f9:2f:e4:15:29:04:78:37:e9:81:4c:
fb:70:1a:3d:24:e3:d4:1a:b4:56:c2:10:ee:80:27:
0b:e1:7d:93:65:72:5d:b6:d0:c3:2d:1c:b1:4f:2a:
df:da:f2:ea:83:99:9b:a8:5d:4a:76:95:77:a7:ae:
31:e7:4b:de:f7:a3:a6:6b:7c:e6:a4:c5:41:cb:67:
8e:29:d9:cf:d5:88:72:da:d0:6e:bd:f1:69:bd:91:
03:74:e0:2b:10:80:98:eb:fb:ec:55:29:15:24:e1:
3e:b1:69:99:2e:0f:dc:f7:3f:61:a7:23:a1:a4:ce:
7f:7f:46:aa:99:8a:ae:09:ab:75:35:e6:f1:5e:fd:
ad:02:b9:ad:27:2d:d2:bf:0b:72:c3:c4:71:8f:27:
95:44:a0:5b:51:ad:10:fd:08:37:47:58:29:a1:d4:
85:50:53:52:00:65:74:38:09:99:5c:5f:91:50:ab:
98:1b:3b:09:24:e1:52:33:fd:5f:c9:a8:7f:76:02:
3d:36:c3:6a:0b:de:94:f5:3a:f5:27:00:73:3b:92:
9d:2b:17:84:a1:5b:41:a1:c8:e1:e5:55:ee:e1:06:
d4:05:db:fd:e0:0a:69:2f:33:1c:47:e7:e2:b3:a4:
54:7e:4e:0a:ae:41:eb:53:85:18:21:0b:fb:22:a7:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:F2:5C:1A:88:36:E5:DE:6C:CD:1B:44:78:F2:94:C6:BF:B1:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qEvyXBqINuXebM0bRHjylMa_sVM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:52:a9:7b:e8:5c:83:f6:b4:08:d5:3a:7b:af:ca:2d:9d:1b:
03:16:e9:b0:42:59:e5:d7:af:6a:3c:53:56:5c:e9:53:77:ad:
2b:f5:20:8b:13:99:82:b3:44:5a:ef:65:91:24:f3:f9:33:06:
1a:19:8f:a1:6e:4c:0c:b3:38:65:1d:ae:8a:72:03:17:1b:2b:
a4:25:7b:26:ca:aa:3f:fd:54:11:2c:66:1c:12:2c:9f:d4:fe:
c8:be:07:76:d8:77:f3:4a:be:ac:e3:c6:9b:f8:3c:0e:d4:8f:
4c:dc:16:de:fd:1c:a2:8e:67:ca:1f:35:df:af:c3:b8:08:02:
54:93:4f:18:e0:ee:03:bb:8f:da:b4:15:53:2c:43:26:b7:af:
6d:b8:6a:72:80:93:59:b6:fb:ee:fe:ff:87:e0:bf:70:55:ae:
fc:cc:ab:fa:a0:a8:3f:d6:e5:4a:98:23:0a:02:37:f4:51:6f:
3d:1e:e4:c7:89:ec:68:49:bd:86:21:db:28:79:d5:76:c0:21:
dd:63:d9:88:89:dd:25:59:9d:e2:c2:6d:7f:67:f2:a6:09:5f:
c6:a2:63:99:24:23:d7:36:8b:f1:01:d1:70:f1:1d:ae:93:12:
bc:5d:11:99:14:cc:a8:ec:49:ca:3a:9f:f2:d8:5e:90:cc:8e:
72:a8:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 21:07:11 2024 by rpki-client on console.sobornost.net