Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0Rr7x7vBUzoU8If0gGbnP9jM7ZI.roa
File: 0Rr7x7vBUzoU8If0gGbnP9jM7ZI.roa (raw, json)
Hash identifier: lVOLDrSlkhqcF3y0NiccXEKYNeJpCsSEMPj6v6L9w5A=
Subject key identifier: D1:1A:FB:C7:BB:C1:53:3A:14:F0:87:F4:80:66:E7:3F:D8:CC:ED:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 412E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Rr7x7vBUzoU8If0gGbnP9jM7ZI.roa
Signing time: Mon 15 Apr 2024 11:53:24 +0000
ROA not before: Mon 15 Apr 2024 11:53:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16686 (0x412e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 11:53:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D11AFBC7BBC1533A14F087F48066E73FD8CCED92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:cd:92:2d:eb:4a:8a:d6:82:b6:c2:95:06:
1c:36:97:9b:b2:70:bd:b7:9d:5b:3d:c7:d6:fa:2e:
ec:25:22:0b:95:cc:b0:cf:5a:61:0d:d9:81:e0:6f:
cd:6a:12:77:ad:c7:4e:85:6a:9b:46:6c:7a:65:3f:
f2:0a:f2:c0:c1:8c:c2:7e:b0:42:a6:9a:aa:6b:5a:
e2:81:21:6e:27:97:96:92:62:53:9d:7c:34:83:01:
75:b9:73:91:d2:83:0e:2a:7b:c5:04:f7:cc:0c:35:
8b:29:2b:8e:06:4a:a5:7a:ba:f0:68:41:a3:13:66:
b0:ee:77:c6:89:ec:2f:4f:fb:1b:91:92:16:dc:74:
c4:cb:d4:d5:ef:c4:22:0b:10:ea:9e:f6:93:fc:b4:
d8:c9:8b:dc:cc:58:29:11:07:4e:5f:55:13:26:50:
6e:54:11:c4:b5:f7:7f:2a:32:8f:ea:9e:c0:bc:05:
5a:cd:17:ae:19:c0:db:3b:5f:8f:1f:a9:a6:08:30:
08:55:8a:ff:76:b5:05:b5:a8:b7:44:e0:f9:3d:02:
98:ea:b6:63:69:2a:82:5a:77:02:6e:1f:93:1b:22:
de:2c:28:87:32:6f:a9:af:bd:7b:74:71:b9:73:d1:
8c:76:d3:99:46:03:b4:d5:1d:b5:5b:45:40:1d:57:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:FB:C7:BB:C1:53:3A:14:F0:87:F4:80:66:E7:3F:D8:CC:ED:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Rr7x7vBUzoU8If0gGbnP9jM7ZI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:58:eb:f1:60:f9:c8:c1:6f:07:3d:57:ce:e3:1c:ea:d8:0a:
e4:e9:9b:88:c7:fa:56:d4:08:f6:76:04:29:19:ac:0e:0d:d8:
15:60:1c:5f:7f:3c:6e:20:40:ef:d1:f4:b8:34:40:b9:cd:9f:
2f:32:4e:a3:21:d8:34:b9:1c:3c:a5:0f:a3:37:17:f8:4c:8c:
ee:c6:f0:c6:aa:f4:7d:a4:e0:e7:37:8c:4d:43:65:7d:77:b8:
46:7a:a8:41:d9:0f:b7:9c:2a:a1:51:78:dd:26:e9:a6:eb:ef:
63:6b:a6:ac:a0:9c:d0:8a:2d:7a:01:21:a3:1f:e7:4f:9f:d0:
fa:69:ff:5e:96:29:9f:bb:25:12:85:26:27:e1:a8:a8:ce:fd:
a4:33:d1:08:9e:72:88:9a:04:d1:8c:84:c6:67:64:b6:3a:67:
f8:99:11:69:15:8e:b6:d9:d6:81:61:40:2c:1d:7d:6a:53:a9:
6d:0c:85:53:1f:62:2d:cb:03:b8:2b:48:90:c3:2e:35:cb:29:
33:11:b6:d1:25:fa:51:4a:4c:f2:db:e6:e4:47:c6:10:22:80:
2d:4a:a6:2a:82:26:d3:22:fd:54:b0:09:32:9b:c8:7c:31:ac:
f3:79:d3:a2:c2:25:e8:bc:17:bb:db:f0:53:8b:af:ee:f8:ed:
c1:cd:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:18 2025 by rpki-client