Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VkTmjEtZeyY9pKdjof4jLxHu33o.roa
File: VkTmjEtZeyY9pKdjof4jLxHu33o.roa (raw, json)
Hash identifier: lSJN1VwjrpIFxs1kIuzqqos/HQkEnYGi4qd1uJyvBAQ=
Subject key identifier: 56:44:E6:8C:4B:59:7B:26:3D:A4:A7:63:A1:FE:23:2F:11:EE:DF:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 494E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VkTmjEtZeyY9pKdjof4jLxHu33o.roa
Signing time: Fri 26 Apr 2024 07:53:37 +0000
ROA not before: Fri 26 Apr 2024 07:53:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18766 (0x494e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 07:53:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5644E68C4B597B263DA4A763A1FE232F11EEDF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:e4:1d:8c:09:3a:58:3f:57:3c:e7:ed:b2:
6a:e4:36:37:5f:1b:d6:76:b8:19:86:76:f3:86:19:
b1:c5:43:6f:14:88:c0:b1:15:ef:b5:9c:38:bb:08:
e7:76:c3:44:aa:08:e7:15:2e:33:4e:82:0e:8f:eb:
75:f8:27:24:17:74:fd:18:14:e0:14:04:c9:ce:ab:
42:4b:7a:aa:ef:f2:5a:17:02:62:db:20:81:3d:cc:
37:cd:37:39:63:5f:50:68:e6:73:6c:16:23:48:92:
c3:65:5b:66:1f:bd:ec:1c:49:5d:28:e1:40:db:0d:
80:d4:5c:bc:16:16:c0:1e:b7:cd:3c:a1:e9:da:1e:
de:ce:23:5f:38:07:d3:03:2d:0e:21:88:99:3f:ce:
ab:75:0c:c6:87:4d:88:3f:7e:7c:1d:f3:1c:17:94:
c8:cf:ea:f2:69:57:12:e3:3f:8d:11:ad:46:43:79:
10:05:08:33:6a:d7:c8:0c:67:52:e5:69:c4:62:77:
bb:66:c9:fb:b5:2c:21:8b:70:26:2a:60:94:7d:63:
11:7f:81:73:73:36:cb:4a:d4:fe:8b:6d:25:67:60:
b9:6a:51:b0:35:c6:0a:ac:b6:a9:4d:98:69:53:0a:
a6:0b:70:71:ef:c1:ea:42:a2:0a:42:7d:9a:1c:de:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:E6:8C:4B:59:7B:26:3D:A4:A7:63:A1:FE:23:2F:11:EE:DF:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VkTmjEtZeyY9pKdjof4jLxHu33o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:20:23:b5:1e:ea:ec:83:2f:49:cd:9c:80:80:41:8a:f5:fc:
7d:bb:f1:5f:24:e9:21:f4:0d:58:a5:60:a8:33:6f:45:58:8e:
83:8c:d2:18:cf:75:db:1d:7d:7d:72:45:95:41:88:2c:16:74:
eb:72:b9:5f:22:09:d1:31:83:bb:ec:a3:54:75:26:66:1a:3e:
36:cf:c6:0a:30:57:8c:23:c4:63:22:1c:9a:dd:a3:90:38:83:
27:be:52:4b:a2:27:17:bb:7c:cb:b6:d1:02:e4:16:f0:78:e2:
8f:0b:67:35:2b:04:bf:3a:bf:6b:b5:09:0d:df:fc:d7:85:3e:
58:20:55:75:2d:3e:40:7a:4e:49:8e:6e:65:50:60:88:93:a8:
4d:e8:41:94:a7:e2:5c:c5:15:cf:35:1f:3c:b9:64:cc:1f:2a:
0a:9f:e4:18:05:92:99:a7:4b:03:6d:33:d5:ae:5a:7b:4a:53:
ef:61:36:18:77:08:8f:43:3d:32:ba:c8:46:95:00:4f:32:dc:
bb:0d:dc:c4:09:57:64:12:de:c8:8f:49:95:e6:89:01:0e:af:
3b:d9:3a:9f:7d:41:d8:25:93:0b:77:24:7b:6d:34:d1:42:94:
61:14:1d:eb:65:35:bd:0a:68:d0:55:92:1f:ad:77:45:6c:83:
81:17:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:54 2025 by rpki-client