Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/B_vixZaakLpsxrttGKM4_whzlt0.roa
File: B_vixZaakLpsxrttGKM4_whzlt0.roa (raw, json)
Hash identifier: 5qAiarSS9D4OtN3annzV0P4nRJTW2UwOnUlBmWyQoLc=
Subject key identifier: 07:FB:E2:C5:96:9A:90:BA:6C:C6:BB:6D:18:A3:38:FF:08:73:96:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A36
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_vixZaakLpsxrttGKM4_whzlt0.roa
Signing time: Sat 27 Apr 2024 12:53:41 +0000
ROA not before: Sat 27 Apr 2024 12:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18998 (0x4a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 12:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=07FBE2C5969A90BA6CC6BB6D18A338FF087396DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:ad:6a:3f:e9:bc:1e:b2:4c:82:25:e7:aa:
f6:d6:86:56:04:67:a0:e4:71:77:38:96:90:a0:37:
86:03:d7:ee:d4:10:8f:93:10:f4:fa:52:de:a9:a8:
7a:bc:d4:81:9a:c9:6a:f6:7d:08:ed:64:a5:de:fd:
2d:c1:5e:03:13:f7:6f:6f:5c:ca:8f:04:ee:e7:ab:
06:d9:1d:02:13:a3:d0:c4:78:3f:5e:ed:7f:2a:1e:
6f:01:6b:62:e9:cd:08:e2:52:ae:03:63:d7:0a:f4:
87:1b:7a:61:71:3d:80:1a:88:0d:03:b7:63:21:81:
5a:bf:70:cb:1b:50:aa:80:4e:0a:52:e9:b8:99:97:
2c:14:12:db:4b:21:44:52:3e:81:9e:e1:fd:73:b6:
1c:c5:fe:23:7e:60:9c:82:8b:8c:9a:bd:90:f2:7a:
94:73:90:4c:5c:e8:09:e9:29:f3:9e:48:8f:b5:4b:
0b:d4:37:00:1f:be:c8:34:bf:78:df:9b:0f:56:9b:
df:a6:43:73:3d:b8:5e:27:0c:6e:4e:91:53:66:1e:
47:14:85:a3:85:3d:b7:cb:f8:6d:1c:b0:9b:ae:cb:
f3:d7:34:8d:06:ea:e2:3f:97:e4:a7:dc:ab:81:82:
13:df:ce:5f:54:c3:77:0e:c0:cf:56:02:a6:1f:4e:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:E2:C5:96:9A:90:BA:6C:C6:BB:6D:18:A3:38:FF:08:73:96:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_vixZaakLpsxrttGKM4_whzlt0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:52:63:38:e1:c4:89:35:99:75:50:39:8a:6a:47:ac:61:ce:
a3:0e:59:0c:30:27:44:b9:40:5c:c7:96:3a:62:d8:7c:67:15:
e7:f1:a4:43:33:a1:f0:a9:ac:b6:1d:1b:71:88:31:b0:97:c7:
f4:b8:24:7d:a0:95:49:79:07:60:3d:91:5a:03:c6:f0:89:8a:
20:4d:4e:dc:c0:de:29:e1:fb:c8:87:d4:e8:42:4a:45:3c:f0:
11:c0:82:9e:f2:e7:78:66:a1:a3:b7:e4:dc:16:5b:4a:f1:18:
76:e6:f3:02:7e:81:b1:21:45:2e:b5:6c:b6:98:8b:9c:02:42:
bb:68:8f:42:b7:22:14:28:d5:b2:aa:b5:b4:91:fc:29:26:8e:
e1:ba:1c:7a:90:4c:59:b6:44:5c:ef:bc:dc:16:65:f5:e4:58:
c0:f0:2d:6a:76:ad:97:a2:fd:02:f2:42:e3:76:4a:da:60:0e:
ad:86:26:7e:f6:26:09:aa:38:4e:ac:01:05:fe:3a:f8:bc:79:
dd:a9:f3:3f:5c:30:34:5d:25:bf:fd:04:c7:97:89:24:af:f1:
c0:29:11:96:f4:8a:cc:a1:e8:52:41:fd:68:99:51:42:a6:41:
61:50:a7:da:67:12:48:57:67:a7:8e:76:24:9a:56:df:6e:95:
7e:7c:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:38 2025 by rpki-client