Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Om8xm4LtqheGp8iA3gG0qiz4ayU.roa
File: Om8xm4LtqheGp8iA3gG0qiz4ayU.roa (raw, json)
Hash identifier: RMwZRtMAM46IAW0zBXIMb6l3tZnKIHYAS76PwgzgqR0=
Subject key identifier: 3A:6F:31:9B:82:ED:AA:17:86:A7:C8:80:DE:01:B4:AA:2C:F8:6B:25
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CEE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Om8xm4LtqheGp8iA3gG0qiz4ayU.roa
Signing time: Wed 01 May 2024 03:53:35 +0000
ROA not before: Wed 01 May 2024 03:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19694 (0x4cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 03:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A6F319B82EDAA1786A7C880DE01B4AA2CF86B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:d4:30:12:0e:28:0f:63:a9:4d:d1:0f:93:
a2:5c:40:ff:91:e2:52:33:97:20:3a:00:5b:8a:e3:
69:67:5f:7d:34:40:39:50:c2:e4:e4:9b:6d:16:48:
51:36:5f:7d:ce:fb:41:91:51:37:ae:40:bb:a9:d9:
42:57:b5:71:f5:62:26:bd:96:cb:a1:2d:2e:52:f0:
a6:9f:48:3a:65:69:0a:8a:9b:d8:4d:5e:27:4c:43:
96:cc:34:51:99:8e:a7:5f:01:d8:c8:2c:51:09:e2:
c8:f5:10:d8:3e:66:0c:a9:06:db:90:09:2e:77:b6:
ed:68:45:ab:b0:7b:12:78:09:8f:c7:c4:60:ab:52:
25:e3:41:34:37:46:7d:da:92:dd:3d:23:aa:94:d9:
dc:06:43:20:ae:3e:01:a9:7b:a8:54:a5:46:87:55:
12:97:e4:8a:87:fa:3c:49:81:83:e4:3c:94:8c:7e:
fe:94:98:cf:71:89:92:94:f0:16:21:19:e8:e1:91:
a9:a2:a0:95:46:39:14:c2:54:c1:0a:3b:be:37:3c:
66:c1:a5:a4:23:38:f6:b2:3b:22:88:f8:57:66:39:
d8:cb:56:b6:cc:24:89:6e:88:8f:8e:69:f3:ee:4c:
bc:ab:39:9f:0a:ef:a0:b0:89:0d:0a:5b:7a:ca:a8:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:31:9B:82:ED:AA:17:86:A7:C8:80:DE:01:B4:AA:2C:F8:6B:25
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Om8xm4LtqheGp8iA3gG0qiz4ayU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:8d:30:3f:92:20:e5:a4:3e:86:da:07:16:67:8d:f2:c7:71:
31:3e:51:1a:03:7f:5a:ad:e9:d9:92:eb:ae:bc:1e:89:3e:26:
9d:19:6f:c1:d9:68:35:50:8c:c2:46:13:6c:16:1d:c2:17:51:
c4:41:bf:60:e4:f3:da:a2:3f:62:f3:77:ce:84:ce:97:60:a9:
ea:51:c6:2a:1f:f3:44:c7:f7:69:a6:e5:45:c4:79:4d:2b:3e:
3b:fe:ce:51:5b:4b:e0:5f:0e:28:54:f0:ce:6b:22:59:a3:6c:
ea:e3:6f:00:91:fd:64:7a:6e:5c:94:65:0e:ca:83:d3:54:97:
b6:8c:e4:92:67:bf:8a:56:f1:f5:be:7f:f5:15:e6:23:df:10:
a6:38:dd:d8:17:72:9f:44:62:f1:3d:a8:48:45:63:89:bd:cf:
5b:55:54:c4:50:b7:19:67:5d:4a:63:8f:43:93:35:3f:14:b3:
3d:2e:df:75:db:c5:0a:fe:03:6c:8d:8f:09:00:00:d2:7a:ab:
ec:2b:07:e2:0d:f5:d3:40:d6:6b:34:08:b1:bb:51:ed:4f:4f:
1b:60:00:f0:89:ae:33:62:55:1e:41:6a:b8:47:9c:e7:a8:4c:
ab:47:11:01:9a:ee:71:70:ac:59:ef:39:a5:26:93:a2:78:89:
49:f4:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:57 2025 by rpki-client