Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3Jfcwvd6aQyRFj6qaVcN88q0OcQ.roa
File: 3Jfcwvd6aQyRFj6qaVcN88q0OcQ.roa (raw, json)
Hash identifier: aaospOaJKu/9lj16FJGIRNtzipc6nSQnWVwnvRWDRV4=
Subject key identifier: DC:97:DC:C2:F7:7A:69:0C:91:16:3E:AA:69:57:0D:F3:CA:B4:39:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47E2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3Jfcwvd6aQyRFj6qaVcN88q0OcQ.roa
Signing time: Wed 24 Apr 2024 10:23:13 +0000
ROA not before: Wed 24 Apr 2024 10:23:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18402 (0x47e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 10:23:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC97DCC2F77A690C91163EAA69570DF3CAB439C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:a0:c4:18:5e:2a:2f:dd:59:80:7d:72:4d:
43:bd:aa:ed:30:52:e4:df:46:b5:87:55:e4:bb:7c:
fb:8f:a2:6e:a0:6a:3b:0e:82:6c:ab:bf:ca:60:cd:
4a:c0:13:b2:5a:1a:36:aa:79:51:37:5c:5c:87:1c:
53:27:ab:77:6a:7f:3f:2c:1e:e2:46:df:b1:80:b6:
44:86:0c:92:66:82:8e:60:47:1d:24:a0:a1:e7:78:
76:a8:ab:db:f2:72:ea:3a:0c:7d:ec:8b:8d:95:97:
89:90:f2:0f:0a:25:06:68:4c:19:46:af:13:ab:3e:
aa:de:b6:17:ec:c7:7f:ea:5d:36:0d:ad:9c:ae:5a:
23:5a:15:29:be:ef:41:02:8c:ec:2e:5d:b5:d0:ae:
8e:5d:5c:6f:e9:74:26:0b:3b:de:04:63:3d:44:dd:
f7:e4:20:c9:0c:cd:dc:96:d9:cf:2e:72:f2:61:44:
a8:78:eb:17:b0:86:9b:b7:94:f7:84:aa:e9:85:0f:
fe:42:6c:95:45:af:05:c0:92:8d:b6:be:11:da:37:
35:19:21:c2:ab:34:a7:50:ea:b6:7e:50:4a:72:0b:
74:cf:98:58:93:1e:8b:7f:a3:9b:17:cb:c8:ee:ab:
6d:a8:07:e6:10:a2:e3:35:9b:2d:0f:49:12:9a:ab:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:DC:C2:F7:7A:69:0C:91:16:3E:AA:69:57:0D:F3:CA:B4:39:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3Jfcwvd6aQyRFj6qaVcN88q0OcQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:bf:1d:0a:97:14:64:ae:42:b7:2c:70:e6:b3:45:ab:04:88:
c6:37:ba:aa:28:bb:14:6b:f7:67:dd:f8:f6:48:8f:84:8c:69:
7e:cd:21:ff:f3:18:3a:fa:5f:cc:8a:af:a0:80:3f:fd:23:30:
31:a5:7e:96:0a:d7:33:be:ec:d4:b5:0d:da:e6:40:8e:07:78:
a1:7c:a8:38:5f:83:4e:51:a0:77:00:64:82:c6:ee:84:ea:ce:
1c:8a:e0:f8:3e:b1:2b:99:19:ed:fe:ca:89:0b:0d:80:b1:6c:
dc:c4:bf:17:94:d2:d9:ab:0c:01:c2:1e:b7:15:1f:f2:dd:4c:
93:ed:15:9f:31:5f:aa:3b:b2:67:75:3b:e8:9a:99:76:9f:ad:
81:96:65:df:ba:2b:22:b4:72:10:95:c8:ed:01:0f:b0:a3:df:
e4:4a:c4:3e:42:30:57:13:09:24:d5:2f:c6:e3:d3:6d:0b:dd:
27:d6:6f:20:af:6f:7c:40:ad:2a:0b:af:bc:e6:da:1e:7f:06:
4a:29:8d:d6:eb:30:32:51:6c:10:00:74:dc:9e:c0:d2:35:d9:
38:2a:21:de:f4:94:8c:bc:8f:0b:1c:df:74:3a:cf:c9:2f:e6:
55:b2:fd:88:2a:b0:a9:78:dd:27:53:8c:89:63:fb:2b:ab:f1:
27:87:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:02 2025 by rpki-client