Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M-a21v8oqI8d3kkxnIJfJmebqEo.roa
File: M-a21v8oqI8d3kkxnIJfJmebqEo.roa (raw, json)
Hash identifier: 7bPA76gsjPg4Vh2pdtpWNmYPXAPKto+3on6UrEny8+0=
Subject key identifier: 33:E6:B6:D6:FF:28:A8:8F:1D:DE:49:31:9C:82:5F:26:67:9B:A8:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 419E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M-a21v8oqI8d3kkxnIJfJmebqEo.roa
Signing time: Tue 16 Apr 2024 01:52:54 +0000
ROA not before: Tue 16 Apr 2024 01:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16798 (0x419e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 01:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33E6B6D6FF28A88F1DDE49319C825F26679BA84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f2:80:f0:9c:47:dc:f8:ce:44:15:ec:f5:94:
8c:96:5e:eb:27:ce:62:3c:cb:77:00:7d:d5:47:f0:
b2:56:07:45:c2:cc:e7:1a:0c:30:dc:3f:b5:4d:92:
a3:f9:9a:6f:9e:ab:18:09:ff:9e:4c:32:e2:eb:97:
65:66:94:af:5d:db:b2:99:79:b2:4d:49:1a:d9:23:
cf:ac:98:e8:2e:f3:23:60:f9:11:a3:01:2d:f5:4c:
e8:d3:91:57:d2:3a:48:de:1a:0f:0c:2e:00:ff:4e:
2a:88:41:8e:14:a2:a3:66:ab:6b:99:13:7c:3f:84:
3a:1d:0a:68:a8:5c:8b:5d:d9:d7:57:2d:e8:b3:4b:
9b:ca:aa:d4:aa:2a:b1:20:8d:6c:dc:bd:35:0d:43:
e4:21:a3:69:69:6b:ff:6d:15:5d:23:9d:ab:ff:63:
1d:fe:21:66:c3:8c:76:9f:c8:2f:14:3a:6c:29:07:
80:1f:d6:b3:89:9e:37:e5:15:84:8e:a5:f8:4f:df:
b5:19:a7:a2:60:25:bf:21:fe:97:5e:34:7c:9b:9b:
a5:08:f2:00:9d:64:4e:66:3a:3c:49:8d:4a:14:d2:
5b:ea:1d:bb:25:b4:bd:4c:6b:d8:3a:7e:ca:35:97:
7d:63:f8:26:92:71:f8:ad:0a:a6:37:f8:e5:0b:60:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:B6:D6:FF:28:A8:8F:1D:DE:49:31:9C:82:5F:26:67:9B:A8:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M-a21v8oqI8d3kkxnIJfJmebqEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:f6:57:8d:f8:a6:4e:ca:05:be:57:b8:16:56:95:8d:87:77:
ed:52:55:b7:f0:b0:77:13:23:f3:45:07:44:bb:bc:04:28:bc:
65:aa:09:84:a1:23:78:ff:8f:cb:4a:35:95:27:e1:cf:06:5d:
41:b4:7d:25:a4:31:02:15:36:9a:7b:7e:f8:7b:a9:23:ae:6d:
48:55:a4:f4:e3:74:e6:e9:14:91:17:71:8e:a7:d5:7b:07:7c:
c0:3c:2c:41:ce:9c:ae:cd:02:37:75:2c:17:32:13:60:40:90:
ac:7c:49:0d:7e:ac:0a:2e:ff:87:a4:7b:fb:61:b0:95:ec:65:
ad:8b:1e:bf:01:d2:79:9b:23:c5:83:9d:b3:8c:f0:a3:01:e7:
b2:46:95:22:b8:bf:79:8c:60:54:27:ba:81:43:88:0e:70:b5:
5f:3a:04:3a:e2:c4:7d:30:d5:fb:34:04:a6:48:f4:3f:a0:5a:
61:a2:96:21:3e:dc:dd:c2:b7:b7:ac:70:30:29:2c:01:8e:5a:
18:8b:4f:b0:25:9a:2c:e6:34:ed:1d:e0:26:dd:a8:3f:ab:73:
18:87:99:80:91:6d:e5:90:81:5a:dd:71:ea:71:bb:91:ce:c1:
7c:69:11:b2:69:f3:2b:9d:0d:89:18:f8:28:c0:ad:b2:0e:2e:
87:6e:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:39 2025 by rpki-client