Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HxVyTqRcFyCx8rMLTEFNctFmNPM.roa
File: HxVyTqRcFyCx8rMLTEFNctFmNPM.roa (raw, json)
Hash identifier: 0LxOkWahpOhhbAk8G01lz09enIJfyia4WEmHL7tDgtE=
Subject key identifier: 1F:15:72:4E:A4:5C:17:20:B1:F2:B3:0B:4C:41:4D:72:D1:66:34:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5762
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HxVyTqRcFyCx8rMLTEFNctFmNPM.roa
Signing time: Wed 15 May 2024 02:24:11 +0000
ROA not before: Wed 15 May 2024 02:24:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22370 (0x5762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 02:24:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F15724EA45C1720B1F2B30B4C414D72D16634F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:5d:4c:e2:5d:05:22:18:e4:5d:6b:ee:c2:
d6:da:a9:32:f4:e3:39:20:a4:ca:eb:66:eb:f6:de:
c7:66:8e:0c:c6:d1:70:8a:dc:91:7b:a6:a8:a4:94:
43:8a:4b:24:d9:d1:3e:68:db:58:da:e2:0c:39:7f:
d8:3e:b2:4e:5f:c0:3c:f4:d4:05:ec:45:e7:52:6d:
ef:6a:3b:e1:5a:59:01:bf:8a:e9:9f:bf:5c:63:69:
30:f4:a5:7f:4c:c5:36:2a:1a:6f:f5:68:50:a8:d8:
92:c1:bb:aa:76:3b:d4:15:b4:df:1a:ed:d0:20:b4:
15:39:fe:c2:20:0e:93:58:63:08:fb:1d:53:f2:d7:
f6:bc:1c:44:6e:b1:7c:17:53:f2:3b:ea:37:90:15:
13:9f:ad:d5:8d:1a:26:2c:46:c5:0b:d5:fb:2e:c8:
cc:ca:f3:9c:d1:87:0a:ee:ed:bc:30:96:e9:97:1b:
7e:ee:fd:d7:c8:15:c8:9f:12:b4:8e:96:0e:9f:4e:
f8:45:66:39:ba:15:73:df:69:d4:7e:99:3c:83:93:
61:14:f9:a6:49:cb:fe:69:1f:37:7d:51:7a:d8:41:
41:e4:8e:8a:e0:75:38:42:61:b8:91:e8:c8:f8:46:
f7:df:81:ad:fd:4a:de:72:3d:61:13:e4:1d:46:37:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:72:4E:A4:5C:17:20:B1:F2:B3:0B:4C:41:4D:72:D1:66:34:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HxVyTqRcFyCx8rMLTEFNctFmNPM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:f9:ff:b2:91:b0:36:be:03:20:c5:09:40:dd:63:9a:eb:49:
d5:7b:fa:24:92:45:1d:64:52:76:c8:36:6c:ce:4a:2a:4b:8f:
21:11:c7:20:43:6c:27:54:eb:ae:75:88:b4:22:15:38:18:19:
d5:a2:6d:26:e9:0e:bd:76:11:65:70:63:e0:9d:ff:97:20:22:
e8:d4:99:95:9f:c4:98:27:57:8b:0d:87:9e:8b:d5:e0:81:04:
90:9c:18:c7:cf:ed:eb:04:6c:13:37:61:9c:c1:77:ca:85:3e:
f7:96:23:e1:3d:68:fe:c9:a3:1f:0e:06:77:c2:9a:d9:d5:09:
3e:90:55:90:c8:5e:03:5d:b4:dc:7c:e9:10:27:e2:26:94:7c:
a2:cb:37:02:a8:1c:82:83:e4:1a:9e:ef:e8:84:2f:88:9c:be:
77:ae:ba:5a:d7:9c:31:92:9b:c8:64:fd:1b:76:2a:c4:c4:ba:
e9:73:91:9d:78:6f:bb:64:d1:4a:3a:6d:f5:97:2e:99:56:5c:
45:0c:39:b9:04:50:99:43:c5:c9:24:b0:e8:ba:53:63:a4:3a:
52:7b:4d:02:8d:8d:ed:49:99:b3:08:26:3a:e2:05:26:75:fb:
38:92:09:c5:41:84:bf:19:7c:7b:5c:12:79:f0:5d:a8:9d:fc:
97:9d:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:26 2025 by rpki-client