Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7V9iimXUx1ZniBqm8cfULa2Ypqw.roa
File: 7V9iimXUx1ZniBqm8cfULa2Ypqw.roa (raw, json)
Hash identifier: fmpuLI7vR2fTyV3SeKNSYnau+E+0WtjnKC+Ua56mb8g=
Subject key identifier: ED:5F:62:8A:65:D4:C7:56:67:88:1A:A6:F1:C7:D4:2D:AD:98:A6:AC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5096
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7V9iimXUx1ZniBqm8cfULa2Ypqw.roa
Signing time: Mon 06 May 2024 00:54:06 +0000
ROA not before: Mon 06 May 2024 00:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20630 (0x5096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 00:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ED5F628A65D4C75667881AA6F1C7D42DAD98A6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:70:8d:73:cc:67:b2:7e:5d:e9:99:3f:68:
ac:f3:fe:29:29:bf:ac:d2:1b:77:c8:67:1a:4f:9f:
83:6a:d7:c0:e8:26:a3:a7:84:af:6f:4d:fd:34:3b:
db:53:49:a7:80:d0:f3:94:fc:a9:bd:66:76:c0:ee:
3f:81:4c:ac:5d:ae:29:ea:22:f3:74:be:6b:23:8d:
10:5b:0c:92:36:e2:4c:a0:44:30:02:7a:43:e5:1f:
55:29:e4:83:b6:fc:88:71:7e:97:4e:82:a0:23:73:
4b:97:b1:a3:98:16:4d:52:bc:ba:c9:fa:a1:80:eb:
5d:26:f3:d1:e2:76:18:68:f7:07:a9:e1:79:94:e1:
ed:76:77:4c:46:39:4e:f5:ad:07:50:c5:19:40:a1:
4a:f1:05:06:f8:3b:30:f9:a0:8a:e4:c4:1d:ca:2e:
7f:44:96:f9:5a:90:1e:a3:2a:a1:08:87:b9:42:b9:
78:28:21:ef:d3:12:7b:7e:53:a1:5a:97:05:e5:8c:
81:23:d4:0c:37:74:c9:c5:e4:82:63:26:01:49:47:
1b:e9:2a:b7:92:78:22:ee:98:4e:9d:83:a8:e6:3a:
f7:08:e3:b7:bc:ed:c0:4b:bb:38:d5:9f:35:ec:85:
f7:87:c3:89:d0:a5:d7:3c:78:2c:e9:71:96:62:a9:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5F:62:8A:65:D4:C7:56:67:88:1A:A6:F1:C7:D4:2D:AD:98:A6:AC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7V9iimXUx1ZniBqm8cfULa2Ypqw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:64:4f:3a:87:87:e6:a5:27:9c:a1:74:97:53:17:73:48:e1:
3e:a8:42:92:d8:5e:28:68:58:59:2f:85:36:bd:ad:69:25:eb:
9f:f7:a8:61:12:f3:d9:35:72:b7:0c:49:f3:a2:12:88:c3:34:
49:02:9c:5a:71:5c:9e:06:e8:b2:1a:91:19:ad:79:eb:7b:53:
57:66:23:1e:2f:b4:68:93:1c:ff:c1:2f:c8:27:26:fd:35:e6:
6f:88:ff:f5:a0:48:14:f6:26:e4:2f:06:17:b9:ac:c7:6e:2e:
b4:a0:ee:f9:50:94:ee:23:41:2e:ed:59:0b:95:66:74:1c:dd:
39:7d:34:b1:48:86:f5:59:b5:73:e5:3a:00:38:bf:89:f5:47:
b2:63:6f:c4:6b:61:29:0b:97:4e:d8:3e:bd:af:18:19:dd:5f:
4f:11:de:99:22:c6:8b:83:05:bd:10:7d:7e:66:f2:ad:99:70:
16:14:66:76:94:98:a2:e5:cf:ad:12:47:b0:b2:5f:f1:93:32:
75:cb:12:fb:f7:d7:b9:ec:ab:5b:3b:12:8e:58:fc:ce:e6:6c:
e8:9f:41:b5:d3:5b:c4:9b:37:de:48:8c:63:f0:69:46:be:6a:
36:81:2f:42:a6:56:6a:db:a3:a5:3b:00:ed:09:ae:10:b7:05:
d2:62:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:04 2025 by rpki-client