Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MTaqS0DNOQamSi7dBpl_fzAA1-k.roa
File: MTaqS0DNOQamSi7dBpl_fzAA1-k.roa (raw, json)
Hash identifier: EftZiLDPMCGgwlLVcIBB7u5gfTbfKnZnrXaAdurof18=
Subject key identifier: 31:36:AA:4B:40:CD:39:06:A6:4A:2E:DD:06:99:7F:7F:30:00:D7:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EAE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MTaqS0DNOQamSi7dBpl_fzAA1-k.roa
Signing time: Fri 12 Apr 2024 03:52:48 +0000
ROA not before: Fri 12 Apr 2024 03:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16046 (0x3eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 03:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3136AA4B40CD3906A64A2EDD06997F7F3000D7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:71:67:6b:a1:33:bf:b7:d8:64:f1:71:75:
88:63:99:f4:e9:1b:c4:16:29:de:20:01:60:d1:09:
be:04:2c:79:6d:75:90:3b:b1:a2:4e:3b:60:a4:25:
d2:49:73:0b:64:31:37:93:c1:ee:0c:c2:2d:bd:48:
31:a4:e3:a1:27:60:ac:f6:c8:65:d2:5c:ff:04:0c:
71:32:2a:0a:a4:73:45:6e:7d:f5:26:7b:91:fb:24:
44:a7:b3:90:3e:9c:5b:f0:12:d5:60:37:ba:24:b2:
2f:d0:9d:df:b8:13:87:60:6e:2f:cd:46:8f:6f:e3:
ee:12:07:d3:b7:79:b9:88:dd:95:e2:b2:67:7d:03:
bc:1f:cf:1a:d5:f2:e0:4b:18:77:0f:33:53:7d:74:
85:a7:01:2b:8e:78:3c:58:49:21:71:53:bd:64:ba:
d5:66:eb:97:bf:e4:04:43:37:02:fa:29:31:05:bd:
54:39:6d:03:c0:cf:92:6b:93:70:9c:83:da:ba:78:
eb:5d:f3:e9:0b:4d:74:91:b3:b1:a9:b6:6f:39:44:
92:e3:47:5e:21:b3:1d:e1:70:4b:5f:e0:cf:20:52:
6f:d9:58:44:f1:23:f2:c5:0c:b5:6b:29:71:df:66:
42:dd:e3:77:c4:1c:0d:9a:f6:8f:b2:b1:b0:80:6b:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:AA:4B:40:CD:39:06:A6:4A:2E:DD:06:99:7F:7F:30:00:D7:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MTaqS0DNOQamSi7dBpl_fzAA1-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:80:b6:72:a2:69:4d:36:5d:89:dc:7d:a3:4b:d7:ee:0c:2e:
57:47:23:1c:d3:e5:27:d2:84:ae:41:92:56:4e:00:1a:3b:be:
c0:fb:fe:03:49:4b:ab:1c:0a:3a:34:e9:b3:f9:e7:aa:f4:3e:
c2:ab:f1:e8:8f:b1:61:ef:e9:1f:91:f9:6b:87:1f:aa:70:5b:
ce:c7:a7:4c:ab:11:cf:02:af:e3:02:91:fb:29:89:b6:a7:9f:
f8:72:1d:80:f2:08:95:df:fc:e5:97:41:a5:fc:64:d5:e0:8a:
da:0f:5f:b5:a2:67:47:4e:a1:39:8e:d9:cd:9e:56:af:3e:76:
0d:e7:ea:1c:f8:9b:4b:cd:16:86:55:b2:14:18:c9:cc:aa:e0:
2d:d0:ee:dc:7b:5c:54:c9:2b:6d:4a:a6:c2:ab:80:a6:36:43:
af:c6:c3:2b:4c:de:b2:31:c3:57:c0:5b:00:72:d4:85:ff:15:
ac:09:ee:f0:2f:37:e9:3d:72:89:64:22:9f:e2:cc:e7:8c:a2:
d4:99:c4:fc:76:a3:ac:53:de:e2:ec:53:1c:bb:72:0c:5d:da:
59:c3:fb:75:21:63:1c:62:d5:d7:6d:99:76:4f:e1:85:1c:bd:
3f:fb:06:c7:0e:dc:c0:22:46:1c:59:02:b0:96:45:49:f9:0c:
6d:8f:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:30 2025 by rpki-client