Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9cdxV8Y0N2JglmRCvnBa3H4S9zY.roa
File: 9cdxV8Y0N2JglmRCvnBa3H4S9zY.roa (raw, json)
Hash identifier: jt7Kvggo6FZmMBWxHWs/gK9sPxaeD/qEFwULTEYw7Sg=
Subject key identifier: F5:C7:71:57:C6:34:37:62:60:96:64:42:BE:70:5A:DC:7E:12:F7:36
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E46
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9cdxV8Y0N2JglmRCvnBa3H4S9zY.roa
Signing time: Thu 02 May 2024 22:53:42 +0000
ROA not before: Thu 02 May 2024 22:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20038 (0x4e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 22:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5C77157C634376260966442BE705ADC7E12F736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:f4:fd:33:53:7a:9b:90:8c:42:dd:30:06:
a9:de:aa:22:97:b9:90:e4:fd:d0:a6:fc:47:f6:b9:
5d:f9:01:90:32:b3:9e:05:8c:7b:9e:6a:7f:f1:bc:
35:e5:b6:ef:65:1a:4c:d0:53:b1:eb:5a:ff:b6:cd:
29:79:a1:81:42:cb:28:a7:68:78:93:44:f1:8d:01:
8e:13:55:a9:89:35:a4:30:53:9f:ab:d1:4e:03:8d:
5d:33:71:48:ff:cb:6a:50:86:f5:72:2c:08:5d:cf:
72:7f:7f:ca:c9:9a:2b:3f:6d:60:9b:bc:b1:5d:11:
be:d5:8a:24:ba:33:fd:c1:7c:64:a1:04:6b:2f:21:
c8:65:8c:82:a6:9a:2e:fc:dd:8e:ea:3e:e9:9d:5f:
30:d7:b2:3a:05:13:40:53:a0:6a:e9:ce:03:13:43:
67:28:58:a5:ea:ce:b1:7d:4c:2b:4f:46:13:39:97:
be:48:2e:aa:9b:b5:5b:57:0b:00:a3:12:99:4b:c4:
37:b4:c4:99:c9:d7:37:29:5e:e3:37:56:c9:e7:ca:
0f:a4:72:ef:16:0f:62:c1:eb:74:fd:29:8c:f8:cc:
85:74:a6:1d:4e:6a:99:b1:0c:36:63:e1:c5:49:7c:
6a:b2:f6:53:87:72:ed:8f:49:9f:51:00:0c:47:03:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C7:71:57:C6:34:37:62:60:96:64:42:BE:70:5A:DC:7E:12:F7:36
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9cdxV8Y0N2JglmRCvnBa3H4S9zY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:3d:7f:6d:4b:e8:d5:61:6f:14:ab:7e:54:13:f9:ec:f6:bc:
37:3e:25:22:a8:21:8e:f0:a1:42:cb:b9:34:a4:ee:17:ef:49:
f4:84:17:5f:92:85:69:de:3f:42:0b:32:f9:01:a9:7c:bf:56:
54:c8:0b:5a:2b:bf:4b:19:e9:4b:6a:a6:53:e4:65:cb:74:6c:
cb:08:69:f3:f3:1b:c8:4f:24:33:95:04:d1:7f:60:50:6d:9a:
51:6b:68:7e:54:40:72:b9:c3:f7:e7:98:3f:60:61:30:7d:bb:
f5:bf:7b:0c:e4:15:25:14:d3:63:eb:ac:c1:80:8a:7f:53:a2:
f3:3d:b2:6e:52:43:29:d2:bd:36:cc:f5:b4:3e:1a:90:19:8f:
8b:ca:b9:a6:cd:a8:4b:df:93:9d:a8:50:76:49:78:87:3e:39:
58:bc:dc:28:54:61:4e:45:5a:21:b0:d6:08:b7:54:89:c3:66:
df:3b:ce:cc:af:ef:fe:ae:56:55:12:ce:90:a8:70:ac:e8:5a:
df:0b:ab:9d:a3:b5:cd:c0:f5:64:08:3e:d8:ec:1c:25:6e:14:
6f:55:1e:a5:5d:00:89:47:23:21:8a:ca:fa:02:d2:34:1b:5c:
66:19:ec:bb:40:8a:ac:62:0b:23:13:ce:db:84:2c:a9:4e:0c:
e9:f8:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:30 2025 by rpki-client