Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GseFsZU_Mdsxjh16wmvJK5GLqAw.roa
File: GseFsZU_Mdsxjh16wmvJK5GLqAw.roa (raw, json)
Hash identifier: 7ZQiPQ7fU07NSj94/eCnsvpvQwZIMEi/CmihVUPqG/Y=
Subject key identifier: 1A:C7:85:B1:95:3F:31:DB:31:8E:1D:7A:C2:6B:C9:2B:91:8B:A8:0C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D2A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GseFsZU_Mdsxjh16wmvJK5GLqAw.roa
Signing time: Wed 10 Apr 2024 03:22:41 +0000
ROA not before: Wed 10 Apr 2024 03:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15658 (0x3d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 03:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1AC785B1953F31DB318E1D7AC26BC92B918BA80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:52:be:9b:8c:b0:d5:9d:9c:8a:43:2d:c8:
be:73:d4:f4:6a:b2:23:27:54:ec:d8:2d:97:3e:be:
d3:c6:ef:86:fd:1c:57:cb:ec:de:59:6e:94:12:13:
4a:07:eb:d2:e1:3f:3d:97:90:35:39:23:db:17:cd:
87:e0:e9:8a:2d:8e:69:7f:5e:9c:54:5e:93:c5:b9:
0b:9c:65:f3:0a:8d:82:24:54:35:13:32:5c:aa:bb:
bc:1b:24:02:d0:c8:f0:7c:fc:85:92:8a:02:fe:5b:
32:99:f8:4f:30:65:87:37:c2:df:4d:c7:46:9f:69:
3c:2e:b5:c6:2b:ed:67:e8:26:be:b1:b5:3c:e1:c3:
96:25:48:ba:cb:a6:3f:c5:ee:7d:91:c8:7b:ae:ec:
38:f5:ca:a8:5b:04:3f:69:d1:47:a0:32:b1:ae:8f:
74:aa:06:c9:8d:9b:9c:15:58:e8:c0:ef:15:30:26:
51:5a:0e:d7:e9:d6:b3:49:a7:ed:25:d6:7b:9c:e8:
59:06:6a:de:41:4b:9c:ee:65:62:5d:aa:33:73:62:
97:58:30:22:d0:e6:7f:fe:41:c0:a4:86:b6:9c:bd:
d4:2e:1f:96:0d:e7:ef:9f:b8:e6:5d:64:c1:64:02:
50:80:68:d0:c0:75:a3:f1:7d:db:1b:02:d1:6e:dd:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:85:B1:95:3F:31:DB:31:8E:1D:7A:C2:6B:C9:2B:91:8B:A8:0C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GseFsZU_Mdsxjh16wmvJK5GLqAw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:5b:c1:26:a3:48:fc:f2:b3:ba:7b:05:d9:bd:66:10:92:c2:
5d:e8:43:de:50:09:07:1f:3a:41:5d:45:66:4c:9f:3e:ab:69:
18:3a:e4:9c:8a:80:3b:43:0b:0a:d9:68:2c:72:f2:6a:7e:94:
09:35:d5:93:51:1e:c1:0d:3e:a3:6b:99:d4:06:3f:cd:07:7b:
d5:09:59:1c:34:7b:d9:37:52:06:51:2d:fd:b6:47:e3:62:c8:
3c:c7:30:9a:f4:f9:2b:b8:be:1b:52:a5:40:bd:50:48:07:d9:
58:b2:14:0c:ce:29:a8:b2:b2:af:09:15:fa:ba:cc:16:0f:ec:
a8:37:24:7b:84:dc:03:25:96:c5:3d:b4:02:29:d6:88:d7:20:
fd:4c:49:1b:6f:c6:0b:e3:7c:3a:50:cc:d3:6f:e6:50:23:9a:
b2:84:90:68:7a:68:c8:f6:05:d4:fd:fd:6a:1e:07:15:64:a1:
6d:51:07:91:2f:eb:8c:ce:dd:fe:77:be:86:60:61:6e:a0:02:
f0:ee:63:af:77:03:71:f1:ee:88:e1:8b:86:dd:0f:8a:5f:5d:
d7:9f:29:e8:be:ae:03:f5:f0:84:5a:68:28:72:d2:12:b3:8b:
37:df:73:9e:51:ce:af:c7:a0:1a:08:bd:b2:4f:3b:8a:21:58:
38:51:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:21 2025 by rpki-client