Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MsHdOj7ohoaXKspXU7FS5gS2Y9s.roa
File: MsHdOj7ohoaXKspXU7FS5gS2Y9s.roa (raw, json)
Hash identifier: 6wD9JGJ0zPhe4UL1gUHuhCT2vzsj1BfzUqJ31TDmCtk=
Subject key identifier: 32:C1:DD:3A:3E:E8:86:86:97:2A:CA:57:53:B1:52:E6:04:B6:63:DB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4AC6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MsHdOj7ohoaXKspXU7FS5gS2Y9s.roa
Signing time: Sun 28 Apr 2024 06:53:25 +0000
ROA not before: Sun 28 Apr 2024 06:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19142 (0x4ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 06:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32C1DD3A3EE88686972ACA5753B152E604B663DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:10:01:da:8c:77:79:23:91:bd:65:89:3c:
7a:73:8a:df:35:8b:bc:f9:d5:94:01:cb:17:72:d6:
35:98:d7:4a:7a:91:81:89:e7:52:ed:88:ba:15:9d:
86:01:80:75:35:49:d8:a2:57:55:f9:2c:03:83:e6:
8c:4e:18:98:80:56:8d:b4:f3:96:31:6a:98:d0:5c:
93:7f:4c:e5:0a:35:e7:d6:90:02:f9:15:0a:2b:ef:
f3:30:e3:68:6f:4e:00:b8:1c:1b:5a:ad:8c:a9:db:
d0:60:92:a9:34:85:e3:a7:08:56:3b:86:6d:32:a5:
72:df:38:c4:a5:db:c6:0e:3c:07:67:9c:b4:24:23:
2b:fe:88:6c:c7:be:48:cb:80:9e:02:31:e7:fd:cc:
b0:ba:f3:f8:40:9a:c3:35:ee:96:0e:05:17:a4:f8:
a6:0a:9c:89:ba:41:20:69:f7:84:31:aa:da:83:73:
77:8e:cc:81:cf:71:25:59:4e:df:c1:4e:0b:f5:39:
28:76:5e:63:17:5b:06:2f:4d:5f:9f:d9:28:f1:cf:
ea:e8:5e:64:25:ad:38:99:11:72:fc:2f:fc:2d:8e:
9c:5d:cb:09:20:53:d1:a1:6f:be:ac:8a:ce:80:d2:
4f:58:c5:ec:65:a3:3b:68:8e:70:74:a7:3a:af:7f:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:DD:3A:3E:E8:86:86:97:2A:CA:57:53:B1:52:E6:04:B6:63:DB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MsHdOj7ohoaXKspXU7FS5gS2Y9s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:a7:2c:da:97:e7:ec:1b:89:49:e3:3f:0c:2f:c1:25:77:59:
e4:15:45:2e:10:c1:2a:fd:41:26:0c:3b:62:19:50:1d:24:63:
26:e9:a7:28:7f:4f:db:f5:63:b7:9e:72:b3:5e:ee:ef:ca:b8:
2a:48:08:85:f7:a3:6f:f6:3c:0f:81:05:28:3e:6c:93:2a:f9:
d3:b9:81:d0:fe:d9:20:24:ed:04:c7:11:8c:3a:cd:3a:a1:72:
e5:71:b2:e9:e3:58:52:94:89:84:61:8e:cf:74:60:3d:a2:fb:
e0:9e:b2:bf:f9:e4:f3:89:fd:46:b2:91:97:b5:25:46:92:7b:
ad:76:8e:8c:62:14:76:1b:4c:0e:f4:f3:06:f9:bc:ff:ee:d1:
61:4c:f5:82:db:ba:df:6a:7f:29:2f:b9:b0:57:0e:ec:29:13:
53:62:04:32:83:89:1b:71:c1:79:62:50:77:32:0a:33:bc:58:
3e:45:04:01:eb:62:89:27:4c:06:c6:d3:d1:98:50:50:e0:60:
c7:89:91:5c:f2:17:95:45:fb:63:48:80:a9:cd:7c:07:b4:c1:
94:22:52:1f:8a:d7:18:7b:f5:55:19:4c:e9:19:5c:57:16:ce:
73:36:fb:1d:2d:ee:9d:96:82:d1:b1:f1:07:f2:d7:c4:89:8f:
cf:5b:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:46 2025 by rpki-client