Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2R_Voh3-X7yZ_-d5LA7_rqAsGSI.roa
File: 2R_Voh3-X7yZ_-d5LA7_rqAsGSI.roa (raw, json)
Hash identifier: o0Y1GYTovTJ+RJErZv8Vn/aBbUOGa1dbCWd7k2Du8NI=
Subject key identifier: D9:1F:D5:A2:1D:FE:5F:BC:99:FF:E7:79:2C:0E:FF:AE:A0:2C:19:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E8E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2R_Voh3-X7yZ_-d5LA7_rqAsGSI.roa
Signing time: Fri 03 May 2024 07:53:56 +0000
ROA not before: Fri 03 May 2024 07:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20110 (0x4e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 07:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D91FD5A21DFE5FBC99FFE7792C0EFFAEA02C1922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:5d:f9:b4:2c:ef:24:d2:d4:63:ca:06:78:
82:55:de:15:51:4d:64:eb:aa:c9:d9:7a:6a:23:2f:
0b:58:a7:aa:ea:c2:ad:88:9b:55:77:9e:16:1c:a1:
0c:35:57:26:42:8e:c7:fe:19:f1:03:7e:9e:f6:46:
c8:ae:15:d6:21:49:9c:2c:2b:8e:f3:e8:33:35:b0:
f4:d5:1e:20:02:60:77:df:64:46:70:fc:61:78:19:
52:57:97:3c:ab:02:b5:fa:30:2f:d4:11:95:f1:13:
78:8d:7f:cc:57:2e:e1:f0:5c:69:3a:ff:58:9b:38:
38:30:3a:8b:17:fa:62:3c:06:95:99:6d:c6:79:5a:
0b:78:1b:60:e8:92:92:eb:2f:61:39:5f:0a:af:93:
30:d0:fe:00:10:70:b2:ea:0e:5d:11:43:52:d6:3b:
ea:df:8c:3a:d8:f8:47:c6:de:e2:5f:21:76:3e:ed:
80:b3:b4:11:16:a8:e9:5e:b5:8f:3c:fe:b5:9b:dc:
7a:f7:30:f7:7a:dd:ba:b0:db:ac:20:0a:be:01:e2:
9a:3a:b8:e2:45:f2:ee:4e:0f:f7:32:1a:fa:9f:d7:
e8:87:a6:d9:a3:a6:40:e0:b1:1a:96:48:77:5a:d9:
6b:e9:43:30:d2:dc:bf:2d:e0:47:db:bb:65:62:0d:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:D5:A2:1D:FE:5F:BC:99:FF:E7:79:2C:0E:FF:AE:A0:2C:19:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2R_Voh3-X7yZ_-d5LA7_rqAsGSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:aa:8f:3d:59:51:64:4c:83:09:5e:e3:e7:bc:04:3e:0b:6b:
5d:39:ed:c4:e5:0f:fc:c5:96:c7:ac:ff:12:9e:40:8e:e4:f5:
c9:c4:97:86:29:7a:37:06:55:5a:a6:6f:19:cd:05:1b:ad:72:
aa:34:86:b5:bc:86:e1:2e:f9:c2:19:91:ee:84:d4:7c:4b:f5:
79:16:08:49:e7:45:3b:1a:43:12:8b:e5:d4:78:36:c8:ec:fb:
68:8d:b5:ab:50:ee:39:33:7b:d6:7b:e5:a8:14:ce:20:69:3e:
96:a4:14:ba:fb:0f:75:4b:24:a1:7a:45:5a:e8:74:ab:bb:9d:
fe:bf:f1:41:e8:30:56:98:ae:03:c7:df:96:44:8f:0c:cd:15:
86:b1:3c:06:3f:db:38:7f:16:20:e8:18:b3:00:7a:c9:f0:60:
c4:b1:e0:57:9f:e8:e5:9f:9a:2c:68:35:cd:5f:29:54:7a:e8:
2b:0b:9b:1e:c8:e1:11:8d:69:59:3c:37:88:fb:f3:cf:28:9f:
cd:d9:8b:0b:d6:b4:ad:35:94:bb:b4:61:08:56:c2:93:e6:f5:
11:45:70:f0:36:42:bc:9e:cc:ca:86:88:f5:12:9f:4e:6c:d8:
30:27:3b:c4:a2:3b:0f:a6:59:46:d7:ac:e3:0a:f0:16:fa:9c:
69:bb:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:48 2025 by rpki-client