Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HFs91_3ObVovziZJL6Y3So4BqWE.roa
File: HFs91_3ObVovziZJL6Y3So4BqWE.roa (raw, json)
Hash identifier: oqjIYyyCm5ghxxF9u7OQ6EVy1dllOU0gOnPdIuvCzGQ=
Subject key identifier: 1C:5B:3D:D7:FD:CE:6D:5A:2F:CE:26:49:2F:A6:37:4A:8E:01:A9:61
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A42
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HFs91_3ObVovziZJL6Y3So4BqWE.roa
Signing time: Sat 27 Apr 2024 14:23:33 +0000
ROA not before: Sat 27 Apr 2024 14:23:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19010 (0x4a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 14:23:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1C5B3DD7FDCE6D5A2FCE26492FA6374A8E01A961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:48:85:e9:82:0f:dd:38:90:f6:61:12:df:
56:84:d9:c0:95:02:4e:51:63:60:7e:5f:c1:96:22:
be:46:a6:c6:f2:a6:17:d7:51:c4:12:72:8d:c5:82:
f8:1f:d3:51:60:b1:97:3c:d7:d2:f0:8e:0e:f6:48:
92:db:1e:69:1b:f8:40:9e:db:26:0f:16:6b:33:95:
1f:3c:32:74:de:84:05:3d:1a:c4:15:7b:72:d9:35:
b5:cd:6f:f6:98:9b:2d:b3:5c:a5:b8:d2:67:93:77:
85:60:47:7f:2f:83:98:b2:a4:5e:c7:2e:f3:1a:c8:
d6:46:1f:83:c9:84:a4:16:74:7a:01:26:48:84:5c:
09:46:f3:0c:8d:6b:3d:44:99:40:ea:a4:1c:39:ea:
89:78:07:0d:3d:20:fc:72:44:96:c7:45:02:79:a4:
ab:cd:b3:6c:f6:09:0e:1a:75:9a:0b:92:21:4e:b1:
90:d2:aa:52:92:f8:c6:11:c9:e0:16:1e:64:03:6d:
59:af:fc:66:f1:39:88:e5:14:fa:70:87:62:1c:5a:
1d:4a:e3:2e:20:64:bb:0b:da:93:2a:28:13:22:2c:
3b:e7:f8:cf:08:cd:97:f2:92:a5:81:5a:5b:1f:30:
8c:9a:17:b0:96:ff:52:87:1d:e4:47:0c:62:13:30:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:3D:D7:FD:CE:6D:5A:2F:CE:26:49:2F:A6:37:4A:8E:01:A9:61
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HFs91_3ObVovziZJL6Y3So4BqWE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:46:0b:48:e2:5a:3d:1d:00:85:a0:40:f6:88:dc:e9:55:97:
b4:ec:42:da:c0:08:24:43:b5:5f:85:dc:fc:e7:70:11:79:30:
db:e6:43:c4:be:d5:45:2e:19:88:4e:c6:b7:27:42:39:a1:ae:
4e:ea:9b:82:90:af:53:51:2c:cd:88:74:f3:2e:03:64:71:69:
54:95:75:44:3f:bc:f4:59:e1:c9:fa:3e:d8:44:04:7d:47:12:
f1:47:85:a5:d9:f4:87:46:a2:32:47:b8:23:92:49:b6:a3:c0:
70:c0:c8:62:d9:8f:7d:4a:7f:48:3a:62:27:8c:32:42:6c:a3:
66:81:93:7d:ce:c3:a9:1b:80:3a:bd:05:12:4c:31:31:24:2a:
e1:d3:65:f5:93:32:92:73:38:9e:78:8d:ae:40:77:46:cf:93:
b7:1a:64:d3:f3:04:8c:c1:2a:cf:44:d0:60:09:e6:fc:70:d8:
9b:38:e4:c6:a9:ba:d4:36:39:2a:2a:bd:34:58:33:25:89:b4:
e2:e8:a3:68:44:fa:91:da:f3:21:ba:5b:6e:00:1b:0f:f8:e6:
1c:cf:cd:35:f3:55:54:6b:75:cc:b1:8a:be:24:ba:89:27:b9:
ee:03:77:47:65:8d:b2:e7:34:5e:cc:ee:71:86:f3:6b:8f:3a:
9a:56:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:45 2025 by rpki-client