Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J6x9e7qWkMrBIyHBPvKr34Fk7cc.roa
File: J6x9e7qWkMrBIyHBPvKr34Fk7cc.roa (raw, json)
Hash identifier: YFwpVbBXYjLimwp7SZ/Uzh2mXEk1Yxco/3N05OjY/sU=
Subject key identifier: 27:AC:7D:7B:BA:96:90:CA:C1:23:21:C1:3E:F2:AB:DF:81:64:ED:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3442
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J6x9e7qWkMrBIyHBPvKr34Fk7cc.roa
Signing time: Fri 29 Mar 2024 06:22:32 +0000
ROA not before: Fri 29 Mar 2024 06:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13378 (0x3442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 06:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27AC7D7BBA9690CAC12321C13EF2ABDF8164EDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:eb:47:62:3a:c9:22:28:4c:b5:12:ff:43:
68:c6:f2:3f:49:78:40:b8:57:82:06:64:4f:e4:63:
b6:af:e4:e7:4c:4b:55:38:8b:f9:c7:31:81:11:9c:
60:b1:85:b6:95:94:0e:3f:c5:72:68:f1:02:38:2e:
bd:3f:61:7b:11:6f:01:26:c5:ca:64:a4:ae:31:69:
33:e9:ec:8b:c7:8c:53:52:cc:5c:5a:4e:54:f0:7f:
28:53:80:66:84:52:24:8f:d4:25:45:16:22:62:c2:
49:03:b2:31:57:49:28:8b:20:df:02:7f:cc:f4:de:
fe:b4:a2:a1:b7:25:a4:94:13:7a:0b:dc:60:5d:d6:
9f:83:2f:58:60:2c:0e:94:8f:ac:7b:10:9b:ee:0b:
02:44:81:54:6d:e6:39:22:68:aa:df:c6:6f:05:ea:
9c:a2:39:1e:71:1b:84:37:91:a2:1d:4f:07:c3:ed:
a0:ec:1b:ce:d0:0b:58:84:d6:8d:8d:d1:45:54:14:
35:ae:e4:36:4e:12:31:92:9c:4e:5e:eb:de:be:39:
b4:5e:75:a5:fb:a9:47:f7:1a:42:9f:58:b9:e3:86:
f8:60:60:47:36:c9:91:37:ba:fb:d1:9c:41:e4:24:
47:f1:76:b3:f3:39:e5:bd:d0:08:5d:79:f0:d0:1b:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:7D:7B:BA:96:90:CA:C1:23:21:C1:3E:F2:AB:DF:81:64:ED:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J6x9e7qWkMrBIyHBPvKr34Fk7cc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:99:31:96:9f:d5:52:38:12:78:54:04:ea:38:c8:30:60:1d:
e6:b4:ef:c4:d9:5e:f6:25:f5:e5:a7:79:3a:f2:ee:72:a1:3f:
b0:aa:f9:7c:d5:e8:37:b0:9d:65:0f:42:cc:9e:e4:1f:e1:1d:
45:93:e2:b7:a4:8c:a4:00:a2:83:4f:ac:99:3f:d2:c3:23:94:
90:c9:0f:ce:3c:0f:72:57:63:a3:ac:f6:30:c9:0b:ab:9d:dc:
cb:70:07:35:b6:f1:50:2e:4f:ad:71:3a:7e:32:ba:76:5e:01:
2a:34:0c:fd:8f:74:37:a0:0e:2c:8e:60:b2:93:45:f2:aa:1f:
5c:be:74:5d:bc:be:88:ce:f0:44:b9:b0:41:0a:8c:dd:5b:53:
b0:6e:de:60:d9:3d:3d:36:94:24:71:17:d5:e8:a1:70:91:67:
60:ec:19:47:f3:ad:da:1c:cb:7e:ed:4b:31:40:5d:27:74:c6:
db:ed:68:6c:5d:0d:21:75:fe:2b:24:b6:1d:d4:1e:01:ca:81:
63:ff:4a:89:94:e7:d6:34:ac:99:a9:e4:60:8d:77:83:81:72:
88:69:65:48:ba:77:ac:85:d9:80:69:76:90:c6:71:6e:d9:3e:
7c:a9:75:2a:5c:fc:b4:c0:9a:69:65:1a:92:c3:08:d6:ab:30:
62:61:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:39 2025 by rpki-client