Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Bt-eMfp83dvYJppULIm4ts1lg4E.roa
File: Bt-eMfp83dvYJppULIm4ts1lg4E.roa (raw, json)
Hash identifier: X65mrd8Foj7X3XGwKFGwwRHqtBdNEuFr51/Wvx5QUY0=
Subject key identifier: 06:DF:9E:31:FA:7C:DD:DB:D8:26:9A:54:2C:89:B8:B6:CD:65:83:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bt-eMfp83dvYJppULIm4ts1lg4E.roa
Signing time: Sun 14 Apr 2024 22:22:52 +0000
ROA not before: Sun 14 Apr 2024 22:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16578 (0x40c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 22:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=06DF9E31FA7CDDDBD8269A542C89B8B6CD658381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:f3:11:23:fb:92:ff:cb:cb:e9:6b:53:7a:
9f:d0:f8:6f:f2:35:25:40:cf:49:33:fb:b1:d7:d7:
5e:c7:fb:f7:55:86:a1:90:ea:35:22:3b:72:cc:eb:
06:e9:b8:5e:6d:81:02:7b:d1:54:f0:8a:b8:0f:d7:
8c:34:0d:b2:1c:f8:1b:fc:7a:d3:bb:bf:75:66:8e:
c3:ad:49:89:57:0b:20:09:76:f3:90:0c:a0:fd:53:
7e:53:f6:a5:d4:ad:4a:68:3f:03:e8:52:cc:61:c2:
7e:88:ea:5d:5d:fe:72:ad:d4:b5:3a:f9:3e:08:b3:
68:8d:6c:e4:a1:a3:0b:a6:37:9b:c9:18:e6:f7:31:
2a:f8:7d:b5:7f:cf:b0:01:b8:75:c8:d9:20:e6:13:
b4:65:db:1b:09:a3:ec:69:29:fa:3e:ce:18:65:36:
67:1d:9b:32:09:ff:8c:93:10:5e:cc:c0:f1:99:b9:
c0:ec:86:db:47:95:c8:79:05:99:2a:81:56:56:4b:
13:57:84:62:e1:2f:15:a3:c7:42:bb:90:81:bf:31:
7a:fc:4f:17:f3:56:7c:78:ae:e9:1b:dc:05:58:8b:
9c:e8:94:b6:25:d1:83:21:b6:2a:c8:74:58:5e:ae:
43:1e:3b:5e:ca:09:23:d8:fb:ef:79:33:09:84:ee:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:9E:31:FA:7C:DD:DB:D8:26:9A:54:2C:89:B8:B6:CD:65:83:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bt-eMfp83dvYJppULIm4ts1lg4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:ac:f7:99:34:c0:fe:0d:92:40:63:65:00:5b:f5:fb:54:2b:
99:91:c5:17:73:a7:08:83:22:b1:aa:4e:f3:58:29:d8:bc:27:
64:34:af:1d:6a:81:29:07:b0:a7:1b:35:79:7a:29:75:a5:90:
0a:43:9e:50:40:64:8d:d3:24:b8:4c:27:aa:4d:b1:ea:ef:41:
ef:82:76:72:b0:d1:e9:96:4d:e4:d8:3a:e6:fd:b5:cb:f7:ad:
a1:a5:df:ad:a0:a0:f0:13:f4:0d:02:34:ea:8c:0c:8e:10:69:
6f:e3:c7:67:77:76:88:59:0c:1b:f8:48:2e:9a:1b:61:63:71:
df:e3:9e:d0:d8:ad:fb:f9:24:0d:0b:ad:1b:92:34:fd:20:8e:
22:08:9f:d6:30:63:b5:ef:99:76:87:1a:ac:36:d9:30:5e:b1:
69:f6:cc:4f:43:86:d7:94:c7:a6:25:c3:3f:6c:3d:42:38:af:
cc:fa:5e:39:80:c6:04:81:f9:43:95:9d:ac:fe:dc:6d:ca:15:
a1:d6:d4:72:5d:ff:6e:84:aa:4f:07:68:03:c9:18:71:41:e2:
19:49:b9:0d:ca:06:b3:fe:5f:eb:fb:20:7c:6b:86:9c:11:a0:
7b:c1:c7:c1:2e:89:51:00:77:d7:c7:48:91:80:cc:c0:c2:cd:
31:dc:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:36 2025 by rpki-client