Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/umv1O7zhy1aGk13d6OgVCSs5xyg.roa
File: umv1O7zhy1aGk13d6OgVCSs5xyg.roa (raw, json)
Hash identifier: r3C/YsOm0cEGSuGw34HKekRWAEx1KXGMqDyHMst6Q0o=
Subject key identifier: BA:6B:F5:3B:BC:E1:CB:56:86:93:5D:DD:E8:E8:15:09:2B:39:C7:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B5A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/umv1O7zhy1aGk13d6OgVCSs5xyg.roa
Signing time: Mon 29 Apr 2024 01:23:29 +0000
ROA not before: Mon 29 Apr 2024 01:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19290 (0x4b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 01:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA6BF53BBCE1CB5686935DDDE8E815092B39C728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:06:c5:b5:7d:3c:03:40:3b:e4:24:fd:5d:
ab:e0:11:70:06:a1:8f:36:db:07:32:05:00:7f:3b:
aa:2d:f9:13:1a:71:d5:ab:32:68:89:ea:ef:13:ca:
1c:1c:52:b1:7c:34:91:f0:99:51:fb:35:b0:82:33:
a9:ab:34:c4:f9:fe:0c:4f:40:b6:ce:a0:da:dd:8d:
d8:13:2c:5c:a6:6b:79:a3:2a:25:be:3f:d2:94:43:
7c:88:5f:96:33:a4:71:51:39:e7:eb:3f:57:18:4a:
f9:7b:d4:9c:f7:0c:49:b6:97:ae:ff:2b:0b:7d:83:
47:a4:ff:cc:39:72:9e:98:1e:bd:e0:b3:05:eb:95:
d7:52:00:88:65:10:5f:39:ab:c9:2c:30:ec:1c:93:
3c:42:8a:09:de:7f:67:73:e4:64:fa:18:ae:84:55:
9c:fc:55:e6:71:f6:24:f9:dd:33:77:7e:24:19:7c:
0d:92:8a:6a:a1:f0:e9:10:1e:c3:30:51:13:ab:ff:
6e:85:ff:1e:d4:dc:a7:42:52:8e:50:fc:42:56:92:
2c:2f:55:1f:a0:e8:1d:02:54:c2:ef:f6:7c:2e:b3:
28:83:f1:3a:33:f4:f0:c8:93:39:c2:63:3e:70:4c:
80:7a:a7:c3:b4:04:57:29:36:d5:09:92:e6:9e:fe:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:F5:3B:BC:E1:CB:56:86:93:5D:DD:E8:E8:15:09:2B:39:C7:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/umv1O7zhy1aGk13d6OgVCSs5xyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:67:58:63:42:4b:de:a7:c0:5e:41:0e:d6:b4:02:72:dd:be:
d2:cb:f8:af:f7:ba:af:8e:4d:a8:8d:72:eb:42:14:0c:b0:a1:
cd:d8:2c:58:b7:58:88:46:9c:dd:c3:d5:c0:91:ce:60:b5:b6:
e7:07:75:46:2e:38:bf:29:db:72:b5:b2:00:77:81:5b:00:7d:
ac:db:16:b4:e7:74:bc:92:4a:12:e6:01:6b:ee:f5:99:82:37:
25:45:7a:b9:35:d4:cc:9f:d7:39:c7:52:23:12:24:a2:30:b8:
ad:c9:88:b1:bf:d0:f2:91:fd:45:09:ab:8b:1e:1e:9c:45:e1:
35:8f:2c:99:e0:b4:b0:68:fb:41:cd:88:a9:e7:7c:e2:20:8d:
9b:c6:89:8f:0c:0f:16:8d:79:8f:e0:1e:56:e8:15:94:dd:38:
47:f0:bc:9b:3e:79:45:3e:c0:7f:a4:36:c9:46:a2:0e:88:33:
5d:bc:7f:91:45:f9:e5:8d:fe:d4:3a:c3:c3:87:d1:aa:06:5f:
d6:a5:b6:82:dd:97:b0:c8:b0:c4:45:f1:71:43:09:be:74:ef:
14:d6:50:27:33:dd:b9:14:e9:e6:e8:43:45:be:90:34:b5:40:
28:0e:ba:fa:f0:7d:04:ed:d8:b8:fc:d2:a1:b5:ee:e9:99:bc:
8f:65:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 06:28:42 2024 by rpki-client on console.sobornost.net