Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OTUIfcX8P8SO7k9vSsZGB9cm6tg.roa
File: OTUIfcX8P8SO7k9vSsZGB9cm6tg.roa (raw, json)
Hash identifier: WXP4irIDyXrFEqlHqRkDPpe1xlsc0kDYh53u2JY5xoQ=
Subject key identifier: 39:35:08:7D:C5:FC:3F:C4:8E:EE:4F:6F:4A:C6:46:07:D7:26:EA:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EB2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OTUIfcX8P8SO7k9vSsZGB9cm6tg.roa
Signing time: Fri 03 May 2024 12:23:44 +0000
ROA not before: Fri 03 May 2024 12:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20146 (0x4eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 12:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3935087DC5FC3FC48EEE4F6F4AC64607D726EAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:9a:84:a3:3b:e9:1e:21:2e:cd:ce:af:05:
40:87:2a:e4:5d:47:3b:03:3a:32:7f:1c:65:95:6d:
9d:af:a1:54:fd:4b:cf:53:28:55:41:47:8e:cd:b2:
57:00:73:dc:90:20:7f:28:09:ef:34:27:27:02:27:
1f:bc:3a:f6:bf:16:22:75:aa:8c:d2:4d:9a:f5:d5:
70:a0:bb:bd:1e:c1:94:63:eb:33:47:c9:ce:c4:9a:
4a:90:00:fa:a3:f4:9a:ee:de:ea:73:e7:9d:a3:43:
de:11:3b:8d:e7:f7:b9:9c:ed:4c:90:0f:2b:10:47:
51:19:ee:78:44:e1:cd:e7:d9:22:2b:f1:ab:f3:b1:
b3:b7:18:bd:cf:06:47:b3:d3:40:fe:97:82:51:9c:
d6:44:f5:14:4e:5b:13:e7:46:81:9a:98:df:58:d8:
20:ec:35:67:24:6e:48:cc:b5:16:f8:91:4f:81:bd:
e0:12:2a:27:30:24:b9:a7:54:7c:5f:90:e7:5c:35:
d6:45:8a:00:30:48:e4:79:3b:ec:b8:8e:ad:04:68:
88:3a:35:b7:f4:ab:55:70:6e:95:be:ab:c1:02:70:
e3:0a:08:c0:8e:ee:d4:24:60:70:60:da:43:60:b5:
f9:69:4f:c3:1b:63:cc:d9:1d:f8:15:f3:6e:a8:25:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:08:7D:C5:FC:3F:C4:8E:EE:4F:6F:4A:C6:46:07:D7:26:EA:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OTUIfcX8P8SO7k9vSsZGB9cm6tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:c3:ca:1b:26:c9:fc:97:a4:6b:09:6d:1a:1c:59:b4:ad:9d:
fc:b1:b1:5e:2b:c1:ff:d7:6a:81:c8:e8:98:c2:de:3b:33:b1:
e7:d7:70:eb:02:a1:db:74:7d:26:11:a6:de:ca:a1:f5:63:79:
ff:03:5f:70:fb:4a:d5:c4:f9:fc:b1:2b:81:bd:06:8a:16:07:
fb:86:78:d3:e3:9c:4b:1f:86:e6:6e:48:07:9a:bc:37:87:2c:
39:4a:35:7b:a5:ae:fc:b7:ae:06:56:5b:29:51:ab:66:81:07:
b5:9a:ea:30:6b:3b:ac:3e:9c:6d:ab:59:c8:a6:14:73:a0:06:
4d:7f:e3:a2:fe:60:68:9d:b1:aa:d4:61:e4:d6:f4:72:67:da:
81:5a:c5:6a:9d:e3:b0:c9:c3:e1:db:c4:13:e7:c6:2f:9a:5a:
7f:0a:91:46:b6:22:57:e9:04:6b:2d:bd:b6:a8:65:60:ad:02:
ce:a6:64:5d:c3:21:2b:bf:24:64:31:5a:9f:87:43:c5:fe:99:
7d:47:98:7a:47:b0:be:b7:22:e8:23:4e:e7:81:02:49:15:c5:
db:6b:06:a5:9a:32:32:4f:04:2b:cb:e5:b2:9f:64:45:07:82:
37:97:7c:06:99:05:c1:9a:7f:26:54:66:ab:14:ce:df:94:d3:
71:fc:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:35 2025 by rpki-client