Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GmTeG88oK27JXQ0wRj0XxXuZt7E.roa
File: GmTeG88oK27JXQ0wRj0XxXuZt7E.roa (raw, json)
Hash identifier: lzqMzzjIQ5sIAzt4d8tHubdpxRt7lBed/ySCAgtRhAU=
Subject key identifier: 1A:64:DE:1B:CF:28:2B:6E:C9:5D:0D:30:46:3D:17:C5:7B:99:B7:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E76
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GmTeG88oK27JXQ0wRj0XxXuZt7E.roa
Signing time: Fri 03 May 2024 04:53:43 +0000
ROA not before: Fri 03 May 2024 04:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20086 (0x4e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 04:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1A64DE1BCF282B6EC95D0D30463D17C57B99B7B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:e7:e3:68:06:78:5c:2e:f0:ee:94:77:b2:
f1:b7:31:14:e7:f6:aa:bd:55:db:c4:36:14:dd:d1:
de:1c:6f:1f:eb:e6:e8:4b:13:1a:0e:47:1c:2f:b8:
7f:bd:b2:93:8e:73:99:92:fa:d1:3c:8e:01:a6:6f:
27:3b:20:23:d4:d0:57:7c:3d:42:bc:b7:7d:df:c7:
72:d1:4d:f1:21:29:7b:b4:f0:da:7f:3f:8d:28:35:
84:cc:2b:a0:d3:25:67:06:81:e9:c6:94:46:a9:dd:
51:8f:b0:b4:22:da:e8:df:23:3b:63:d8:4e:ea:b6:
98:63:bb:5a:51:19:d6:30:cc:cb:1b:76:bd:1e:0a:
81:c4:8c:f7:98:4e:00:37:9d:06:dc:da:65:f9:25:
73:9a:67:ea:b7:8a:fe:d6:04:2f:a5:7d:fb:bb:2c:
f7:1d:cb:e7:a4:ad:0b:31:86:18:11:77:7f:6d:3d:
f8:e6:b1:48:2c:95:f4:28:a1:cf:81:a2:87:87:1f:
64:a5:42:6f:37:de:9c:3b:50:7a:93:78:79:d7:df:
79:46:26:17:75:58:58:90:e4:18:4b:6c:67:84:52:
4f:7c:a5:18:86:08:34:d4:6c:4e:f3:53:6e:b8:01:
fb:8f:4c:62:0b:f2:89:fc:d9:85:b5:4e:ef:c7:55:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:DE:1B:CF:28:2B:6E:C9:5D:0D:30:46:3D:17:C5:7B:99:B7:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GmTeG88oK27JXQ0wRj0XxXuZt7E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:06:5a:2d:da:ab:31:61:f3:3a:1d:92:a7:af:70:56:2e:7d:
0a:a9:a9:2c:9e:db:55:1f:e7:0d:1d:ec:3f:62:37:4f:3e:72:
8c:dd:b2:30:a1:2c:28:ba:e6:43:17:dd:b0:ef:9d:08:3b:80:
4d:a6:e3:21:82:b9:61:09:bd:36:77:4c:e9:25:02:29:2c:22:
28:3a:0f:c8:39:2c:e3:ed:70:d8:5c:7a:a5:ea:ca:17:c0:5d:
35:67:4a:03:c1:0b:25:e6:39:23:76:02:d7:06:65:64:08:0a:
e8:b9:60:b8:fd:4d:a5:96:6c:f0:b2:2f:79:56:2a:e9:4d:14:
f1:cd:f9:21:fa:3f:e0:75:61:54:90:cc:3c:09:8b:5b:6f:6b:
ad:3e:b5:1d:a5:8d:45:c3:6e:48:1c:45:b4:03:28:3b:30:05:
28:f8:5e:a4:93:61:e0:1d:1c:02:db:13:b7:0d:76:3c:25:ed:
68:b1:8c:6c:48:4c:56:bf:d3:a4:b7:5b:ac:b0:01:bc:50:e9:
1a:1e:2c:e5:93:b9:6b:88:0d:75:39:b5:be:17:15:db:f9:a4:
cf:f7:e5:41:f5:df:da:96:4e:64:9a:55:a4:8b:f6:26:65:f6:
fa:5e:32:be:ad:fb:27:31:44:08:a8:7a:ac:69:4f:e0:09:b2:
d2:80:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:42 2025 by rpki-client