Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rYcuqsEZK2vHk7SKlxmoEEtrRio.roa
File: rYcuqsEZK2vHk7SKlxmoEEtrRio.roa (raw, json)
Hash identifier: 1ew8GGeRqb6VD279s5eSDUBG6vjamSjmEdtsCtsct7A=
Subject key identifier: AD:87:2E:AA:C1:19:2B:6B:C7:93:B4:8A:97:19:A8:10:4B:6B:46:2A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D76
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rYcuqsEZK2vHk7SKlxmoEEtrRio.roa
Signing time: Wed 01 May 2024 20:53:39 +0000
ROA not before: Wed 01 May 2024 20:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19830 (0x4d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 20:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AD872EAAC1192B6BC793B48A9719A8104B6B462A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:19:52:c9:e1:eb:94:e1:ad:28:c8:85:f6:
18:77:44:30:37:74:fc:c3:f6:49:2e:c0:ad:61:18:
a7:4b:a6:5c:6c:4d:f0:18:5c:04:93:91:9a:39:01:
ed:7e:e1:75:ef:10:a2:eb:a8:97:5a:f7:59:cf:fe:
07:14:12:50:5e:cf:43:bb:75:f1:db:d0:45:d4:03:
42:da:86:67:7e:6c:49:be:09:fc:04:80:09:b3:a7:
19:f6:e2:4d:7d:d8:42:53:c2:f7:c2:e8:8d:6e:4b:
43:da:76:38:1c:e5:30:65:bb:84:af:f5:43:49:12:
c5:b4:c3:38:9e:a7:23:48:65:aa:91:50:c2:20:49:
de:8e:4d:08:b0:5e:19:39:f2:2c:bb:71:ec:1d:61:
36:08:30:ee:f1:2e:01:af:fd:00:75:5c:77:52:66:
cd:e2:a8:9b:fb:5f:30:ae:bb:f1:43:d4:5e:ca:b7:
e0:8a:44:43:5b:76:2d:5e:b9:45:fb:84:15:9d:b2:
67:26:80:a6:a3:50:93:70:cc:fd:8a:64:5a:55:3b:
59:b2:79:2f:89:0c:cc:96:e2:0f:dc:89:d7:ca:5d:
cd:6e:fa:67:d6:c3:2b:bd:a2:14:98:38:e7:b9:10:
4e:cc:d0:45:e0:95:3c:4e:b9:ca:33:b7:25:1d:b0:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:2E:AA:C1:19:2B:6B:C7:93:B4:8A:97:19:A8:10:4B:6B:46:2A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rYcuqsEZK2vHk7SKlxmoEEtrRio.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:37:7d:ea:88:37:f0:cd:60:52:4c:aa:3d:db:5b:61:4e:74:
a3:79:a1:4f:c7:c2:2d:08:4e:79:2d:bb:9e:ca:52:86:e6:a0:
12:4b:35:3b:2b:c3:1f:cf:2d:1c:65:92:f4:a0:c4:69:78:f0:
bb:c1:94:8b:7d:bf:35:30:33:97:0c:00:da:d6:fd:66:0a:12:
f5:b7:98:4e:e8:e9:a3:68:1b:81:dc:fa:c0:7e:bf:61:1b:a0:
d6:3f:a4:6f:c1:3a:82:02:e2:d4:33:b1:c4:9d:3b:4e:a2:ed:
c7:99:cd:37:1c:c5:32:d4:5e:ac:cf:7c:74:c1:35:d0:bd:9a:
43:c0:43:31:ff:2a:20:74:50:ed:df:28:d5:5c:ab:ae:cc:b3:
8e:aa:98:18:b0:f1:84:44:d9:38:5b:ec:67:db:af:07:06:8b:
98:37:72:75:16:46:e2:9e:81:55:19:73:16:45:eb:30:55:7c:
4a:e0:9a:4a:f5:18:e7:fe:53:c5:d0:01:42:85:1d:60:d4:4b:
95:60:57:86:13:eb:af:b1:87:60:76:5d:af:5d:6b:43:40:00:
00:23:3f:70:60:72:9b:bf:df:d8:75:cb:88:30:95:39:e0:9d:
da:09:d8:97:02:1d:19:61:c6:2d:0c:b4:e3:6c:85:91:89:b2:
5d:28:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:32:42 2024 by rpki-client on console.sobornost.net