Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Xsc-R51BzrsfeFgKqtipYMjSUXM.roa
File: Xsc-R51BzrsfeFgKqtipYMjSUXM.roa (raw, json)
Hash identifier: NPbA6uvjqLnsCglfv3TkF4HeI6JUEm5AhcW7Awg/Jo4=
Subject key identifier: 5E:C7:3E:47:9D:41:CE:BB:1F:78:58:0A:AA:D8:A9:60:C8:D2:51:73
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xsc-R51BzrsfeFgKqtipYMjSUXM.roa
Signing time: Tue 07 May 2024 10:53:53 +0000
ROA not before: Tue 07 May 2024 10:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20902 (0x51a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 10:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5EC73E479D41CEBB1F78580AAAD8A960C8D25173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:eb:fa:22:0a:07:a6:42:3f:45:06:af:5e:
61:45:16:dc:cd:27:a7:34:99:5e:26:6c:0f:a6:02:
4d:0c:12:95:42:0d:28:c8:2d:5e:1c:92:69:4e:f7:
ac:2c:8b:f5:83:1b:87:75:97:46:2c:2e:ef:5c:1c:
46:7b:29:8e:f9:ae:c0:1a:88:71:a9:c6:c2:31:9d:
92:00:8b:fe:ec:1a:cb:2b:5f:57:62:a9:29:f1:89:
00:3c:49:80:d4:14:d9:c6:3e:5b:78:26:71:35:97:
65:07:ad:94:dc:f1:9d:13:81:a0:41:aa:a7:eb:83:
87:bf:79:49:fd:17:85:db:26:aa:31:33:0c:f1:2a:
4a:f8:97:35:fe:5d:4c:4a:c0:52:62:de:a4:c5:cc:
f8:0c:4b:ea:55:0f:14:ee:9a:d9:15:c9:1b:1e:25:
49:80:87:df:cc:c0:c5:7b:ca:1e:2c:1f:87:c2:b2:
5e:b4:1b:96:4a:b9:11:2d:42:6e:02:45:a0:bf:6e:
3f:f5:47:cb:7d:2e:0a:ec:da:cc:fc:02:7c:24:57:
4c:f7:6f:5b:7f:6d:b1:92:f8:da:2c:5d:a8:be:e3:
d5:e5:ff:a7:4a:1d:50:1c:9b:06:73:d6:92:06:0c:
f2:96:0e:c9:7d:68:a5:42:ae:1b:9d:c0:61:c5:c2:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C7:3E:47:9D:41:CE:BB:1F:78:58:0A:AA:D8:A9:60:C8:D2:51:73
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xsc-R51BzrsfeFgKqtipYMjSUXM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:49:0b:a0:c7:a2:7a:64:72:57:21:c3:cc:89:3a:e7:3e:63:
03:39:dc:93:de:1d:bc:fb:39:ef:3b:13:13:99:18:69:67:2c:
45:82:83:40:11:97:8a:ac:1b:d4:ef:97:a6:d1:a6:08:b4:e5:
f9:59:5b:0e:1c:78:f5:43:1b:a2:a2:fa:9c:c7:d6:78:16:37:
cd:22:e3:b2:36:4a:24:6a:26:5e:c5:e9:b1:43:5c:02:0b:ed:
3a:37:61:ca:9c:8b:96:e9:e0:30:25:c9:8a:0f:62:68:89:34:
d6:b7:1b:99:b4:1a:31:dd:07:2a:8f:1f:e9:54:17:c1:cf:a3:
63:ed:c2:27:77:ce:d7:67:21:5b:2d:14:b8:68:68:4b:ef:a5:
36:88:dc:cf:26:7c:39:47:46:d7:f6:78:9d:77:9e:ce:5c:72:
f3:c1:7b:aa:c0:d2:c6:ae:57:b6:a4:e1:be:73:28:01:1e:74:
0f:ae:40:c9:df:47:84:5b:8a:b0:40:a0:f0:58:af:03:8d:c6:
89:02:01:f9:09:43:4a:27:ce:37:7b:cd:18:95:5c:42:8c:e8:
f4:ac:f5:c0:a3:ef:5f:84:bc:9e:62:e7:4b:87:a6:2f:e5:b8:
23:5a:2c:ba:4e:d0:63:63:11:c0:dd:25:ac:f3:e5:81:ab:6a:
55:b4:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:27 2025 by rpki-client