Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wniOvMGQ1fspfYFelGVJJmuJYNE.roa
File: wniOvMGQ1fspfYFelGVJJmuJYNE.roa (raw, json)
Hash identifier: +PxyiWlEEKs8xG4g6T7znKmHHkDNNHlilMvBPkAkqNY=
Subject key identifier: C2:78:8E:BC:C1:90:D5:FB:29:7D:81:5E:94:65:49:26:6B:89:60:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 374A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wniOvMGQ1fspfYFelGVJJmuJYNE.roa
Signing time: Tue 02 Apr 2024 07:22:13 +0000
ROA not before: Tue 02 Apr 2024 07:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14154 (0x374a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 07:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C2788EBCC190D5FB297D815E946549266B8960D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:18:28:40:76:c9:fa:1b:1f:dc:05:f1:ff:
3e:4f:e3:bd:3f:ee:90:81:a1:03:07:3d:77:2b:dc:
e7:07:41:00:b0:ea:43:d0:8b:76:cb:14:94:c3:65:
ba:c6:f9:0f:14:d8:42:db:cb:8f:a7:a6:22:31:6f:
35:af:c1:5c:a0:6f:a1:44:73:27:55:19:81:64:7e:
78:6a:15:e4:96:88:e8:56:3c:fb:f3:68:8f:e3:ae:
bc:42:fb:06:a2:12:68:8b:76:e3:d3:87:8e:7b:35:
97:a0:71:1b:60:74:73:10:30:c6:b7:9c:a4:1c:eb:
e6:b9:1b:4d:85:62:2c:ce:8e:b0:63:83:bd:f8:0d:
48:77:14:b2:14:cc:83:75:4a:e8:e8:00:0d:5a:06:
dd:23:11:bd:c3:82:31:b5:82:fe:6a:47:20:cd:1c:
c5:ed:3c:a1:79:79:5c:06:c5:34:4e:ef:73:bd:18:
26:15:9b:ec:1f:af:43:fd:38:58:da:15:49:42:64:
b4:67:13:fd:7a:97:de:a3:65:df:39:ac:a3:5b:72:
00:6d:36:db:cc:8f:58:0d:1c:f0:63:53:c3:f2:ef:
84:67:48:14:90:24:4c:46:3b:b3:7a:6a:72:6c:cd:
91:37:e4:ac:70:16:b6:22:3b:e5:9f:cc:fe:35:8a:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:8E:BC:C1:90:D5:FB:29:7D:81:5E:94:65:49:26:6B:89:60:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wniOvMGQ1fspfYFelGVJJmuJYNE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:3e:e9:ca:5a:0c:92:ad:8c:df:37:88:10:ee:02:9f:e2:72:
a7:5c:fb:e8:4b:bc:21:fc:52:b9:23:4a:75:26:dd:7a:a9:79:
c9:d2:16:90:58:85:8c:04:62:29:f5:96:db:20:bb:5e:b9:e5:
91:08:51:c8:6a:ed:d5:5b:4c:77:7d:60:47:04:be:1a:05:11:
9d:9a:37:7c:54:6c:91:8b:08:b2:a3:1d:4d:a0:ab:1c:96:ab:
b1:40:50:81:82:8a:63:e4:0b:f7:a7:79:1e:e3:cf:8e:5a:3a:
c3:f4:c4:e8:32:5a:73:b5:0b:41:d4:65:88:c7:90:56:bf:cd:
85:8c:07:0e:34:b6:15:87:6e:d6:cd:8c:9e:4a:94:72:64:87:
3c:d7:61:7b:21:c7:72:07:12:7d:84:65:17:c8:c7:1a:41:23:
7e:e3:e8:64:da:05:af:d2:bf:f0:25:58:3c:97:23:04:eb:e9:
8c:98:72:6f:00:f7:13:98:01:27:ae:b9:42:21:28:8f:ff:36:
28:35:89:35:93:5b:06:1c:d0:cf:37:b7:35:9e:57:62:20:34:
de:fb:c7:97:13:1b:80:56:2e:b5:85:5c:51:35:82:e4:42:36:
f2:aa:63:5a:b5:bb:66:85:8d:89:26:df:ea:da:33:5f:a5:b7:
96:30:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:04:03 2024 by rpki-client on console.sobornost.net