Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8H5l4OoB47SlveZjDDjkh7j3808.roa
File: 8H5l4OoB47SlveZjDDjkh7j3808.roa (raw, json)
Hash identifier: ip2e/O+WHtWWtY0FC7hmRYCzwTts/z3e6x9+O/myFpo=
Subject key identifier: F0:7E:65:E0:EA:01:E3:B4:A5:BD:E6:63:0C:38:E4:87:B8:F7:F3:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A6A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8H5l4OoB47SlveZjDDjkh7j3808.roa
Signing time: Sat 27 Apr 2024 19:23:22 +0000
ROA not before: Sat 27 Apr 2024 19:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19050 (0x4a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 19:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F07E65E0EA01E3B4A5BDE6630C38E487B8F7F34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:f9:a2:72:6a:a9:a8:4e:f0:ea:fa:f2:45:
1b:e1:38:78:7f:a7:66:1f:68:a2:3c:a3:8f:6d:47:
26:d5:ce:97:76:ed:02:84:9c:00:af:8f:55:b4:5a:
f2:dc:6d:9e:41:6f:ea:fa:26:6f:16:b5:94:c9:6b:
2d:17:20:58:0b:4f:db:88:34:08:7a:ff:05:ee:24:
7a:8b:3b:44:1a:da:7a:cd:7c:b7:e2:c1:da:91:63:
3c:91:2c:24:2f:08:e3:84:11:63:ec:52:e2:d1:89:
7b:26:85:a6:b3:58:f7:6e:a4:5b:0c:68:23:94:96:
0f:ab:37:5f:30:75:70:19:2f:55:cc:24:bf:f7:04:
2e:c6:51:e6:05:9b:d9:d4:08:3c:e7:be:bb:da:83:
db:05:c9:d8:fc:49:c1:3d:57:8a:44:bb:96:c7:d6:
13:e4:4d:79:3b:d2:37:e0:d6:60:71:d0:79:52:0c:
81:84:24:76:17:8f:0e:22:8f:81:31:f8:94:1c:22:
60:09:a5:05:ce:97:75:8b:03:21:c5:0d:76:cb:aa:
85:23:d7:93:b4:bd:00:1b:b4:0f:40:70:f7:21:58:
78:dc:23:32:7d:0f:69:78:9a:c3:3d:a1:f5:53:39:
68:4b:f0:a3:5c:fd:8c:51:e1:0d:78:2c:d3:53:20:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:65:E0:EA:01:E3:B4:A5:BD:E6:63:0C:38:E4:87:B8:F7:F3:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8H5l4OoB47SlveZjDDjkh7j3808.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:41:06:a7:ef:0d:56:94:a5:3c:18:a6:19:c3:35:de:04:eb:
e0:42:84:28:52:b8:ba:5c:f8:53:cf:95:f5:62:bd:83:b7:a6:
8b:1b:de:1e:c1:aa:01:d6:9e:7b:3b:be:c3:f0:33:17:10:64:
da:75:7c:78:e8:7c:7a:b1:15:9d:ac:cf:e7:57:8d:11:1b:08:
07:1b:6f:ad:d1:6a:6b:b3:d5:b4:bf:41:97:9e:53:f8:3d:67:
dc:dc:d3:01:29:03:03:c0:3e:27:f0:42:62:e9:ea:18:bc:aa:
93:64:5d:c8:4e:4d:ee:7d:96:88:b6:98:01:ad:8f:3a:5c:6d:
88:c8:20:24:65:ab:66:2f:2c:d7:84:ce:c7:98:5a:4e:58:15:
1d:c1:4b:58:d4:17:35:17:ea:b3:09:ba:db:b8:d4:e4:7e:ae:
d7:3e:d2:37:6f:64:67:84:d9:b0:2c:b5:68:85:88:57:df:45:
04:a3:ea:7f:67:85:bc:78:cd:3a:81:b8:49:3b:52:cf:76:10:
8c:e0:be:66:af:5e:c2:bf:a9:28:31:c7:2f:4c:99:51:d0:04:
6a:80:ae:b7:fa:c1:de:66:a2:ed:87:5f:5a:1b:65:7e:36:1b:
d3:0b:52:db:e3:78:84:e1:18:b6:6a:56:f9:6e:1a:80:31:44:
10:3f:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:21 2025 by rpki-client