Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V7dF0LWYeNT7pFdu3hAhGqIOVZg.roa
File: V7dF0LWYeNT7pFdu3hAhGqIOVZg.roa (raw, json)
Hash identifier: YzE1d806W/oLN71CsTdMOCiJPwCR24en7fJA3xxIWGc=
Subject key identifier: 57:B7:45:D0:B5:98:78:D4:FB:A4:57:6E:DE:10:21:1A:A2:0E:55:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 359E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7dF0LWYeNT7pFdu3hAhGqIOVZg.roa
Signing time: Sun 31 Mar 2024 01:52:09 +0000
ROA not before: Sun 31 Mar 2024 01:52:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13726 (0x359e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 01:52:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57B745D0B59878D4FBA4576EDE10211AA20E5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:b7:c1:4d:f8:a3:53:17:09:f3:cd:11:f1:
6e:31:be:f4:0f:34:0a:4f:07:99:09:98:10:cf:51:
7b:71:b5:e5:94:b4:ee:b9:9b:3d:2b:07:ee:8a:af:
94:dc:2c:85:b9:70:d4:3f:7b:d8:d8:97:79:d1:66:
00:e4:c3:b8:b1:db:56:8a:d2:f2:6e:d5:be:d1:bd:
79:01:ff:81:fa:d9:83:8c:c1:24:19:81:70:c7:20:
29:9f:fa:71:a6:8b:3d:6f:6a:e7:51:45:51:29:75:
87:30:35:60:3f:69:69:ee:eb:a6:06:b1:c1:0a:d1:
67:8d:87:67:c7:49:05:cc:8d:6f:84:62:75:03:cc:
e5:bf:df:eb:b0:08:e0:4b:69:67:01:f1:52:ef:19:
a8:92:88:06:ef:f4:74:54:01:b1:3d:b3:03:cd:52:
8c:5a:db:ec:9c:d5:7d:67:fc:51:11:6c:61:70:e7:
9a:d4:7b:ea:8f:3e:f6:d6:9f:3b:98:20:64:67:64:
f9:cd:bb:8d:79:34:42:38:90:65:1d:75:19:08:80:
c3:2b:3b:4c:b5:0d:ac:80:d4:88:40:91:6d:8e:a3:
6b:05:ad:64:b0:88:32:b3:54:af:16:6e:bb:ba:b9:
6d:f1:25:ad:71:62:91:ca:a3:20:b9:61:6a:0e:34:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:45:D0:B5:98:78:D4:FB:A4:57:6E:DE:10:21:1A:A2:0E:55:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7dF0LWYeNT7pFdu3hAhGqIOVZg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:d7:75:15:be:a0:4f:ff:dd:46:a6:85:5b:8e:bd:63:c9:9e:
c1:e3:0f:10:da:ff:71:09:c6:e7:39:84:7a:a3:b8:e0:31:b0:
38:3a:c9:45:87:98:2c:f8:69:d1:6b:a8:de:a7:e2:14:f7:c9:
f2:43:e4:39:49:41:82:83:bd:4e:80:88:ae:39:d2:9a:76:1e:
a5:02:e6:4d:9a:e3:5c:9c:7b:2c:38:1b:00:13:4a:40:9e:76:
34:7b:05:15:26:91:76:0f:84:5a:f7:36:51:1c:a8:bf:18:f9:
44:95:fe:9d:bc:6b:1f:6a:ab:ed:44:7a:89:6d:43:21:c6:a1:
d3:1e:c4:d2:36:de:69:0a:57:40:06:90:92:fc:64:ca:9c:6c:
93:a9:54:f5:f2:a5:a4:14:b4:80:b1:8c:d1:b1:8c:5e:33:d5:
f8:0d:3d:0a:38:e9:80:ed:d2:2e:b4:97:b6:df:5e:80:91:3f:
5d:98:4d:ef:90:47:ec:02:82:d0:b5:75:32:b1:75:ca:3f:f6:
c2:85:37:2d:a0:0b:a7:d5:a5:ab:25:11:3e:33:0d:32:26:c0:
9d:32:1a:ed:1f:86:63:c2:e1:8f:7e:5f:ea:39:01:6b:b0:3d:
59:b5:b8:92:62:c0:7f:e7:78:ea:00:f9:32:5b:3b:a5:c8:d9:
1e:fb:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:02 2025 by rpki-client