Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OUd0uOjwdpXDUlRaOayXR08R-iw.roa
File: OUd0uOjwdpXDUlRaOayXR08R-iw.roa (raw, json)
Hash identifier: JrQroD29T/S2d1bAL1d7Tp3PkyJPABeAOdjqDXq/Xu8=
Subject key identifier: 39:47:74:B8:E8:F0:76:95:C3:52:54:5A:39:AC:97:47:4F:11:FA:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ACE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OUd0uOjwdpXDUlRaOayXR08R-iw.roa
Signing time: Sat 06 Apr 2024 23:52:56 +0000
ROA not before: Sat 06 Apr 2024 23:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15054 (0x3ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 23:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=394774B8E8F07695C352545A39AC97474F11FA2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:15:cf:8c:65:37:d2:63:ab:a6:99:49:29:
4b:39:ce:4e:8b:13:c8:88:91:e3:82:4c:d6:be:b4:
92:f2:61:e1:47:02:13:57:0e:a7:78:91:2e:50:9e:
4c:17:97:8a:4e:5d:e2:62:49:ac:3b:ed:6a:99:3d:
5f:3b:bb:48:96:b1:90:97:82:cd:45:cf:66:46:67:
1f:d9:8c:ac:81:32:70:70:8a:a1:3b:48:a6:b3:c4:
86:ba:b1:c9:8e:a0:47:b9:34:5f:e6:52:b8:72:37:
ca:1c:ec:d1:89:ba:eb:8b:ed:dc:e2:e8:82:c5:c1:
b3:36:9d:f9:dd:81:39:53:43:84:27:95:f3:2d:b7:
15:29:f5:06:a4:66:ad:a1:ed:8f:26:92:c3:dc:6a:
a0:a3:5d:9c:91:b1:be:d6:56:b1:f8:c4:94:da:98:
09:af:f6:b6:93:7d:40:5d:de:31:c5:3b:c3:b1:da:
b9:0a:9e:2e:dc:4f:5f:3b:fa:17:4a:63:fa:fd:47:
76:a1:81:a8:d3:db:bd:ac:c4:5d:dc:db:81:89:bc:
2e:e2:a3:1a:ed:e0:aa:bd:fd:dc:84:c5:25:95:ac:
f9:38:49:f2:bd:c6:87:c6:da:c9:e5:d4:cd:20:f7:
d8:bb:01:3a:0d:0d:40:b4:42:b5:2c:a8:62:d1:12:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:74:B8:E8:F0:76:95:C3:52:54:5A:39:AC:97:47:4F:11:FA:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OUd0uOjwdpXDUlRaOayXR08R-iw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:0c:6d:d6:7f:84:b5:5f:0d:42:c7:bb:8e:27:01:b3:95:13:
81:d2:dc:33:ec:5e:ba:b9:1a:a2:d9:c7:e2:0b:a4:39:91:40:
04:10:8b:a9:32:1c:ed:a9:86:69:ba:e8:2d:a0:3f:65:37:c6:
f8:0b:b9:fe:25:2c:fd:66:6c:74:55:a8:a6:1b:a6:2d:06:f9:
45:5a:fc:3f:68:8f:50:14:4d:a7:b6:ff:59:55:01:59:9f:97:
af:dc:b0:a5:6d:6e:d0:09:65:fe:c7:b2:d3:fa:5f:7b:01:d8:
14:03:8c:ef:12:e9:53:7d:cd:72:77:8d:3c:86:62:c9:a8:87:
78:0c:a1:b7:49:af:e2:3c:7f:09:a5:8e:4c:f1:27:61:31:1f:
1a:ef:e6:a3:8c:31:94:db:d2:77:b5:d2:f5:9b:bb:9c:6c:88:
a6:b6:cb:eb:3d:d2:16:ca:12:de:d7:1d:ac:b7:02:12:1e:c7:
50:af:5b:11:bc:28:bb:be:bc:af:e4:cd:8c:f7:d4:6a:f8:9d:
9d:41:d8:dc:c6:2b:5d:07:f8:4a:2d:f6:ba:50:39:c9:c5:42:
6e:93:a4:d2:6a:0b:7d:79:44:08:e2:59:3b:df:52:d6:a9:b6:
ed:05:91:09:c6:cc:ad:e3:ea:f4:93:8c:c0:91:46:89:69:c9:
07:fd:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:00 2025 by rpki-client