Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FLsoZbBK0uRKYQr0Klz8bX4uRYI.roa
File: FLsoZbBK0uRKYQr0Klz8bX4uRYI.roa (raw, json)
Hash identifier: rT+ZQQQDljXeWGlgfHrpmJ6bkMCJF3AXZyAM9vEKeH4=
Subject key identifier: 14:BB:28:65:B0:4A:D2:E4:4A:61:0A:F4:2A:5C:FC:6D:7E:2E:45:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B42
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FLsoZbBK0uRKYQr0Klz8bX4uRYI.roa
Signing time: Sun 07 Apr 2024 14:23:00 +0000
ROA not before: Sun 07 Apr 2024 14:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15170 (0x3b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 14:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14BB2865B04AD2E44A610AF42A5CFC6D7E2E4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:80:59:ed:69:cb:5e:a5:ec:d6:51:c8:2a:
c3:e9:20:52:39:f0:5f:75:b1:8d:52:42:b1:70:cf:
df:8e:99:8d:c0:e1:b1:48:5a:f4:b8:2b:f5:d1:86:
6b:68:55:c7:c4:5f:aa:c9:e8:05:1c:3e:87:96:56:
e8:ab:0f:e6:e3:09:52:73:3f:75:48:de:f4:09:48:
9f:1d:59:62:b7:4a:48:8d:3c:28:df:5d:49:37:4b:
3d:b3:34:04:60:4c:08:c4:d8:06:ab:44:97:f9:e9:
2e:47:19:88:bf:6e:8c:55:7a:b3:82:b5:9a:e4:bf:
20:c0:7e:18:2b:85:5b:37:80:ce:aa:c3:8f:49:d8:
9a:2e:b7:be:3e:b6:a8:31:64:72:d7:20:9a:22:30:
10:df:c2:f2:48:7e:30:e9:9d:87:e9:64:dd:55:9f:
87:ef:fb:db:ac:39:c5:6e:d4:6a:f1:11:2a:e6:78:
73:45:82:ce:61:ab:e5:f7:e2:db:7c:07:cc:58:3e:
2f:9a:fb:0d:b4:2f:96:22:eb:26:4c:f0:6c:be:01:
94:3e:57:28:78:f8:53:7a:31:6c:7c:ff:04:1a:ad:
53:5e:65:c4:77:29:d3:b2:5e:59:9b:d0:82:a2:91:
f4:0c:ea:55:d2:1c:fe:27:40:7f:b7:96:0a:30:c9:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:28:65:B0:4A:D2:E4:4A:61:0A:F4:2A:5C:FC:6D:7E:2E:45:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FLsoZbBK0uRKYQr0Klz8bX4uRYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:5c:2a:ac:d6:fb:9d:33:8e:86:d3:9a:a8:0c:6b:35:f4:c2:
2b:5b:40:f3:73:c1:c9:e6:8b:aa:dc:0e:82:d6:4c:a2:35:c8:
ab:4a:14:86:9d:89:ab:06:38:71:de:d8:9c:5c:4d:48:da:4e:
01:1c:6f:00:81:20:e1:a1:1d:4f:ed:14:83:bb:99:42:e9:2a:
ca:6b:92:66:df:e0:ae:f2:37:71:c9:8d:82:cf:e6:c9:27:9e:
ef:bb:16:78:74:41:26:90:b0:17:b9:63:f6:f3:97:45:76:3b:
41:67:d0:50:0c:1c:4c:de:1e:fa:4a:dc:4c:7b:17:29:6f:57:
62:85:cf:7c:06:df:01:13:8e:4b:5f:35:0e:2b:5f:05:87:de:
60:15:18:7c:a0:93:d0:60:06:37:fd:f2:ac:53:53:eb:8a:5c:
92:22:46:65:68:3b:c4:ac:86:ad:1b:72:0d:92:29:18:c7:e4:
12:65:e1:2c:93:28:78:91:d5:48:a4:be:99:9d:65:7d:3a:64:
1b:0e:61:d3:cb:49:fe:83:28:09:0f:e9:72:72:2b:20:be:d2:
04:f8:5b:3f:af:42:b6:71:19:f5:a9:ad:a4:44:02:d6:2a:9f:
9f:f1:f2:8d:2c:22:78:ac:db:64:7d:99:f5:d8:d9:78:3c:c4:
6b:2e:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:59 2025 by rpki-client