Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7G03ZUWGbopiiQ5WsMjUbUYrXV8.roa
File: 7G03ZUWGbopiiQ5WsMjUbUYrXV8.roa (raw, json)
Hash identifier: kizNgi5neZICE6gEgIfR8nVyArCalpI2cKZbItAc/Cw=
Subject key identifier: EC:6D:37:65:45:86:6E:8A:62:89:0E:56:B0:C8:D4:6D:46:2B:5D:5F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3546
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7G03ZUWGbopiiQ5WsMjUbUYrXV8.roa
Signing time: Sat 30 Mar 2024 14:52:09 +0000
ROA not before: Sat 30 Mar 2024 14:52:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13638 (0x3546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 14:52:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC6D376545866E8A62890E56B0C8D46D462B5D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:de:b6:5f:2c:71:57:59:bf:36:10:fe:93:
2b:43:f8:e7:0a:29:1a:fb:05:70:e8:74:81:33:c7:
2e:83:61:86:10:7c:51:09:9c:c4:cd:a4:5c:f7:9f:
58:3b:38:98:2f:bc:b7:98:16:4c:53:47:0d:cd:cc:
4f:07:e3:48:b8:b7:9a:24:fd:9d:c8:ff:0a:4d:47:
13:4f:fe:83:72:dc:8c:9f:a6:5c:dd:23:48:0c:a6:
8e:2a:d8:8e:af:fd:04:e5:d5:1f:31:b4:d7:be:50:
05:4f:8c:b8:b1:ac:75:ee:d5:2f:69:fe:26:ad:ac:
d7:21:64:c5:f9:19:d0:19:0b:61:72:f3:67:67:23:
9b:2c:c4:dd:79:22:fe:a1:b2:ed:5f:4d:b2:81:13:
87:d8:d6:e2:41:56:88:a0:21:6c:b1:19:a6:2e:ae:
26:11:7c:2c:42:f5:81:c1:ed:cc:8c:ec:13:3c:5d:
6c:3c:6d:d9:29:bc:59:33:1c:0e:18:16:aa:b0:aa:
17:67:34:b0:ae:25:e9:5b:1b:e5:cf:58:e6:8d:bc:
cf:1e:1f:6d:87:8c:f1:33:ae:71:5c:09:8b:06:1c:
e8:f1:a3:0a:54:11:34:3c:64:ed:e9:cf:d1:af:f0:
c1:30:97:3f:68:67:95:66:af:ff:fd:29:78:4c:99:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:37:65:45:86:6E:8A:62:89:0E:56:B0:C8:D4:6D:46:2B:5D:5F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7G03ZUWGbopiiQ5WsMjUbUYrXV8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:7b:af:9e:8f:79:81:ee:90:1a:eb:f1:12:91:44:59:d4:a6:
2f:50:71:5d:fa:f9:fa:41:b8:56:fa:73:98:04:8a:06:88:10:
b9:71:a0:07:f0:2b:fe:29:75:32:2f:9e:6c:f8:02:90:fb:d9:
f6:c3:b1:82:0b:b3:cd:11:37:76:37:94:dd:77:17:50:6d:2e:
da:26:da:15:09:66:87:99:64:9d:d7:7d:74:49:9b:e9:e9:9d:
0b:20:e6:16:b7:3d:86:49:cb:b9:88:65:f6:76:a3:bc:a6:de:
b5:19:61:0f:40:4b:58:4e:b7:a9:ec:85:d8:82:55:bf:31:9e:
45:18:82:5f:74:b9:78:6f:92:39:58:d6:9c:c8:6c:4f:3f:57:
4a:45:59:ff:1b:81:4a:28:9f:7c:92:46:26:37:73:dc:13:91:
d8:6b:b2:b6:70:8d:9a:7b:89:44:32:2f:b5:0d:6e:bb:74:dd:
f8:c3:3a:e8:94:89:b6:e2:ec:07:c8:2b:41:7b:f2:e3:38:f9:
91:e8:46:b8:81:65:20:88:fb:5b:89:66:b5:12:55:9c:f3:cd:
f9:f7:c9:19:c1:d1:26:5e:76:a1:90:bb:8c:fa:d1:e6:fa:36:
6e:be:0f:36:dd:24:e1:4e:8c:83:56:1a:a9:ab:93:99:95:ba:
03:62:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:41 2025 by rpki-client