Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8ae6Pav9-l0dp61_AqjnESl05eU.roa
File: 8ae6Pav9-l0dp61_AqjnESl05eU.roa (raw, json)
Hash identifier: zGoHE+Cc6lCiXfytm4kfMJQOSKqCw1xj3x71iUN+A5M=
Subject key identifier: F1:A7:BA:3D:AB:FD:FA:5D:1D:A7:AD:7F:02:A8:E7:11:29:74:E5:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 422A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8ae6Pav9-l0dp61_AqjnESl05eU.roa
Signing time: Tue 16 Apr 2024 19:22:57 +0000
ROA not before: Tue 16 Apr 2024 19:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16938 (0x422a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 19:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F1A7BA3DABFDFA5D1DA7AD7F02A8E7112974E5E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:de:ab:97:a0:b7:f0:58:c1:9a:05:1a:1d:
de:5d:32:68:c0:63:46:72:b4:8b:58:28:2d:23:14:
d1:04:e7:60:74:fd:78:65:8f:8f:16:9d:d4:01:20:
7c:37:b3:79:ed:c0:b5:a9:b0:d3:fd:5e:a8:48:14:
68:69:01:ca:2f:d8:4e:d3:ad:00:fd:9b:25:0a:6c:
de:62:9e:bc:fb:13:63:26:81:73:30:c6:f7:65:25:
12:c2:69:49:7c:a6:37:93:ee:2d:5e:59:a5:b7:2e:
c0:35:c9:8d:70:21:b9:97:45:39:4a:cb:93:e7:d2:
42:91:16:a2:66:cf:27:15:8d:46:78:f5:be:b0:8f:
db:ed:d8:09:ec:7e:d1:56:eb:68:18:91:04:88:2f:
12:2c:ce:10:29:08:89:4d:e3:99:53:a9:23:3a:c1:
16:4b:28:76:cf:7d:d6:e7:9f:54:41:61:c6:28:6e:
df:3f:25:87:72:a2:3f:31:df:bd:fe:85:75:ae:a9:
95:a3:7b:f7:b4:59:2f:57:3b:86:a4:10:9a:e4:35:
d7:53:a2:9c:2e:2c:91:9c:16:bd:ac:f4:ab:ab:9a:
dd:21:95:bb:ee:c7:0c:0e:aa:fc:f0:f6:2c:83:d7:
00:43:50:90:7e:0d:dc:8c:aa:a1:c9:e0:10:94:53:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:BA:3D:AB:FD:FA:5D:1D:A7:AD:7F:02:A8:E7:11:29:74:E5:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8ae6Pav9-l0dp61_AqjnESl05eU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:6f:2f:a8:fc:99:18:45:b5:da:fe:d5:f1:52:67:d2:50:bf:
41:f2:9e:20:d1:f3:2c:77:7b:59:44:50:88:ba:98:37:80:1a:
6a:4e:df:b8:5c:ee:f8:fa:70:95:b8:30:3c:c2:36:d3:3e:54:
2d:da:8b:d4:65:9e:be:ae:2d:22:12:c5:7a:b7:68:67:c9:df:
9c:eb:42:ad:c6:bb:00:8f:4c:dc:9a:05:55:25:0f:dc:ef:d7:
a0:02:84:27:d3:81:62:fd:94:8d:4a:22:ea:7a:9e:19:1b:ef:
e4:f5:0d:7c:e8:29:44:35:c5:63:5a:ff:cf:fe:b0:ca:d3:22:
18:98:dd:97:b6:00:5c:61:82:32:7c:36:a6:a8:62:94:b5:a6:
46:84:9c:5a:55:f5:7b:d4:6b:77:e8:44:68:5c:f8:a4:3f:73:
b4:53:c1:45:7e:e8:d0:0b:3c:4b:68:ca:5d:34:ea:ec:c3:31:
5e:ec:ff:2e:4b:ad:f1:c1:cc:ce:1b:21:e6:ec:4e:23:8b:26:
15:e4:cb:4c:d6:96:76:cf:e0:cb:1c:a8:db:f8:95:11:a6:aa:
b5:0e:92:61:8e:dc:e8:d8:16:c1:d5:06:87:22:10:5d:6d:d2:
db:94:03:08:33:94:9f:3a:2f:6f:01:21:32:e6:54:1c:c3:15:
6b:b4:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:32 2025 by rpki-client