Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J8qmVqSuWf91nQuQ25Ep08DFgfo.roa
File: J8qmVqSuWf91nQuQ25Ep08DFgfo.roa (raw, json)
Hash identifier: Gw6MSVjH6mAxMPvUJKseBqwr3TDY6SfEoysTQjW8ISA=
Subject key identifier: 27:CA:A6:56:A4:AE:59:FF:75:9D:0B:90:DB:91:29:D3:C0:C5:81:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4976
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J8qmVqSuWf91nQuQ25Ep08DFgfo.roa
Signing time: Fri 26 Apr 2024 12:53:20 +0000
ROA not before: Fri 26 Apr 2024 12:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18806 (0x4976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 12:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27CAA656A4AE59FF759D0B90DB9129D3C0C581FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:bb:f3:76:e5:d2:32:9b:83:16:2a:38:90:
52:02:01:03:51:2b:60:24:4c:8d:63:4f:a8:82:2b:
41:9a:80:e7:87:46:1e:bd:fc:59:dc:b0:97:c5:9d:
a2:1e:39:44:33:69:ef:12:62:ff:4a:0f:e5:d8:59:
0e:98:17:68:e0:a3:b1:61:00:54:0c:4e:a4:af:bc:
de:29:bb:68:93:a1:89:e4:9f:f5:21:1d:e1:4b:01:
49:50:99:aa:85:ca:39:18:3d:fd:39:40:9b:f2:e0:
4f:63:0c:de:c3:b9:cf:67:73:41:4e:61:81:b1:4c:
54:5b:bc:04:86:74:fc:04:13:4c:83:d0:a8:ac:2d:
ce:fb:77:52:cb:93:fb:a9:0e:c3:24:9a:6a:65:2b:
88:e3:22:5e:57:fb:e7:c2:0a:59:5c:55:c1:b9:d4:
1b:11:e1:9d:3c:fd:68:64:50:6c:b7:4a:34:8b:cd:
2f:aa:6d:dd:bc:cf:75:10:3f:bb:21:29:c0:73:22:
5a:c2:12:f2:6d:bc:7b:bf:ee:3c:33:9c:6c:e6:71:
90:12:dd:69:d6:01:94:e7:2a:42:12:d6:df:4c:fe:
a3:bf:8b:db:b4:81:ba:e3:f3:f2:60:ce:38:f0:37:
56:3b:b1:30:22:f6:83:8e:8d:ae:78:4d:23:78:45:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:A6:56:A4:AE:59:FF:75:9D:0B:90:DB:91:29:D3:C0:C5:81:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J8qmVqSuWf91nQuQ25Ep08DFgfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:4a:60:7b:b3:13:19:f2:d4:bf:05:2d:76:8f:5b:95:b2:91:
8b:0d:5a:22:e2:1f:82:c8:f8:85:09:3c:cd:21:63:af:e2:fd:
e5:e5:5a:0d:5b:38:99:78:53:3d:99:9e:4a:90:af:d0:89:84:
86:53:56:e1:b3:c9:18:c9:94:6f:62:22:24:01:fc:24:5c:88:
5e:fa:c3:ab:56:9a:92:3d:14:06:a1:da:96:5f:ac:d7:62:3b:
07:14:3a:dd:d0:19:99:f2:d1:2d:e6:06:7d:43:34:6b:c5:02:
b4:e9:36:d1:27:fe:42:eb:0f:bb:e5:e3:06:60:88:ef:aa:1e:
c7:cc:24:81:54:4c:a7:b1:a1:df:f2:53:e3:90:b5:87:9e:83:
83:03:91:01:ba:85:81:6c:f3:5e:6b:b3:5b:0b:b0:7b:e1:fe:
3e:48:53:af:fe:67:25:c1:8d:50:2f:b1:22:99:59:05:28:b9:
76:6a:79:0e:ca:7b:09:94:7a:1a:6c:bc:66:99:9e:89:35:13:
ff:26:7f:f8:d9:9b:d9:4f:7a:29:5d:60:70:93:4e:df:9e:92:
4f:27:70:0e:19:69:5a:73:42:e6:01:27:b9:01:1f:37:e5:cc:
51:3e:ba:d8:0c:72:94:fa:28:09:5e:ae:50:14:71:d6:2a:82:
dd:78:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:13 2025 by rpki-client