Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NNo07ZK9p4WldDGHsgPugUUSf8I.roa
File: NNo07ZK9p4WldDGHsgPugUUSf8I.roa (raw, json)
Hash identifier: rIB+cHHdNSmOSUnA1ABIJn/Ju0M/EXzDPsijUNsd0/U=
Subject key identifier: 34:DA:34:ED:92:BD:A7:85:A5:74:31:87:B2:03:EE:81:45:12:7F:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 386E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NNo07ZK9p4WldDGHsgPugUUSf8I.roa
Signing time: Wed 03 Apr 2024 19:52:21 +0000
ROA not before: Wed 03 Apr 2024 19:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14446 (0x386e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 19:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=34DA34ED92BDA785A5743187B203EE8145127FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:43:23:35:19:53:51:4b:bd:82:80:23:ef:
f4:ce:a9:f5:e0:d8:07:ef:05:ca:f0:57:2b:5f:54:
b0:70:0e:3f:3d:18:16:39:43:27:58:8f:25:ca:cb:
57:e7:5d:7e:f0:c0:da:f3:c0:8c:2c:d0:13:f1:85:
16:a3:27:28:55:03:6f:c4:32:d9:90:cc:ce:25:50:
1f:fd:21:4e:40:50:7b:72:c0:6e:fc:9b:21:ae:32:
28:7b:ba:22:7e:79:11:28:0c:9f:47:68:5f:4d:ef:
b2:c6:00:aa:ab:5b:a2:0d:1a:13:83:2a:51:58:0a:
f1:9b:e2:dc:75:d3:fd:32:06:c3:87:46:a0:62:2d:
97:61:25:4f:03:53:6f:b1:fc:a3:e2:e3:c5:01:70:
ac:f0:9f:31:b3:9b:bf:c1:84:cc:9f:bd:b7:ca:47:
9f:00:96:b8:ee:cf:db:04:93:d9:d5:77:ea:fe:38:
36:8a:1b:58:ab:9f:11:05:a7:20:3e:2f:23:40:05:
8a:5f:e3:22:c1:8c:c3:90:de:13:e6:00:a8:4f:c6:
47:76:85:2c:f3:a2:ae:67:ed:57:2c:cd:ca:43:8e:
87:c5:e5:58:3d:a7:5f:89:9b:e2:97:21:4f:93:46:
4b:21:c9:eb:6b:9a:3c:02:1f:89:b6:16:e1:bf:41:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:34:ED:92:BD:A7:85:A5:74:31:87:B2:03:EE:81:45:12:7F:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NNo07ZK9p4WldDGHsgPugUUSf8I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:ce:3b:37:7e:5f:e0:0d:f1:cd:b2:d4:0b:34:e0:00:7d:fe:
dd:95:b4:d3:63:ac:ac:83:36:55:0c:62:63:e6:88:c8:08:c8:
16:12:26:bc:a6:c4:54:45:8b:03:6b:04:96:73:f0:56:7f:ff:
ae:bc:a2:03:64:cd:38:7d:c5:67:78:10:74:17:41:33:96:4c:
8b:f2:d0:a1:48:8f:2a:65:15:6e:72:51:c6:ea:ed:14:61:10:
85:26:1f:13:34:b4:5e:80:62:7a:0e:e4:fb:ae:18:ff:73:3a:
b1:c3:b1:38:47:7d:f5:2c:d7:78:fd:67:43:c2:f9:d9:06:71:
2f:58:dd:f8:00:5e:03:76:2b:e4:a4:91:32:c1:d2:3b:f3:e1:
b5:5b:3b:25:46:7f:46:31:4f:c7:b8:4e:1c:bb:98:82:12:d3:
31:bc:c8:a4:73:d9:b0:19:80:62:43:30:66:19:0e:62:c5:93:
db:bd:33:32:ae:86:83:89:cf:3d:3e:87:11:bb:07:58:e7:43:
68:89:21:bb:86:57:b3:0d:2c:60:21:ff:05:5d:98:88:38:d9:
dc:e8:c5:a6:d7:06:18:77:8d:64:01:ea:83:ee:a8:47:d5:a2:
1c:ec:3c:42:7f:88:ab:81:a0:80:d2:2a:e4:d4:39:f3:d0:7c:
df:9e:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:43 2025 by rpki-client