Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Zae7glmojVRoOeLBKGbIecQ8sTM.roa
File: Zae7glmojVRoOeLBKGbIecQ8sTM.roa (raw, json)
Hash identifier: j9T5Z+/OQ+wdBUHvuwbEHC2VYZ2cqIiepyUtux6f5UA=
Subject key identifier: 65:A7:BB:82:59:A8:8D:54:68:39:E2:C1:28:66:C8:79:C4:3C:B1:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5206
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Zae7glmojVRoOeLBKGbIecQ8sTM.roa
Signing time: Tue 07 May 2024 22:54:04 +0000
ROA not before: Tue 07 May 2024 22:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20998 (0x5206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 22:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65A7BB8259A88D546839E2C12866C879C43CB133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:63:31:de:35:78:ae:ab:e8:c7:d1:c5:3e:
b8:8f:12:8c:37:34:2d:6e:8d:1e:94:25:7e:6f:fe:
62:1a:30:c9:5d:4a:cc:f6:c8:b2:03:00:df:c6:28:
ef:78:b5:67:31:d2:cf:73:7d:b8:cc:b7:2a:ba:78:
66:a4:fe:ae:24:4e:12:d4:17:36:b6:4e:86:1e:68:
b8:c7:79:bf:e8:b9:82:d9:a1:06:70:99:2d:7b:c9:
8c:4b:82:ef:7a:c2:8d:b8:6c:cd:84:24:5b:6a:f8:
51:a9:8c:50:08:2d:e5:7c:bd:03:b2:ca:64:bb:68:
03:2b:9f:68:b1:1e:46:9b:23:12:91:0a:30:91:00:
90:d1:5b:db:5c:f9:eb:e5:06:49:61:64:d3:c8:67:
8c:42:d9:01:f7:3d:64:1b:c9:23:7f:59:c2:40:80:
8c:1a:e8:a6:99:95:a5:a3:8c:2f:aa:bd:18:18:f4:
05:e5:a9:43:4c:7f:80:45:6d:ef:30:49:2a:ca:2a:
ce:a4:d1:04:fb:29:70:f5:a0:8e:12:dc:77:1d:bb:
d8:ec:95:6b:7d:da:36:f1:fe:e0:c4:f1:d3:95:64:
de:fc:c7:e2:b8:84:c9:dd:72:ef:4f:df:5f:e6:2c:
ed:2a:2a:df:c4:2d:9c:70:e4:f6:d9:cd:ce:28:12:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:BB:82:59:A8:8D:54:68:39:E2:C1:28:66:C8:79:C4:3C:B1:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Zae7glmojVRoOeLBKGbIecQ8sTM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:00:3b:f3:22:ef:88:77:22:fc:ed:f5:03:d2:ed:0a:81:73:
8c:51:84:e4:fa:f0:63:30:23:eb:43:b9:df:b2:b9:ef:73:6e:
41:85:e7:02:92:b8:32:5c:62:3c:90:7d:d4:2b:27:9c:0c:9d:
57:d3:d5:76:e8:b9:e9:0b:c2:d0:49:e0:0a:08:15:3e:ae:8b:
73:18:b0:bc:49:51:dc:2e:82:80:ac:6d:29:45:db:8d:df:e3:
e4:41:d6:62:67:77:44:63:f7:4b:fa:e3:af:cc:c5:04:e7:5d:
09:63:16:4e:d2:80:05:29:0b:15:aa:d3:5f:39:51:12:44:bb:
7e:68:76:26:55:df:42:5d:0f:1d:2e:43:54:01:70:6b:0a:2c:
b1:02:24:09:42:60:86:bd:8f:99:37:e2:6f:ef:e1:44:10:c0:
03:7b:97:f5:76:c6:fa:e6:a1:f8:6e:77:82:2d:2c:a5:85:ea:
f1:4b:ef:2e:f8:b7:5d:fb:45:21:87:0f:91:98:29:30:98:61:
3e:19:4d:89:5e:f3:6d:54:fd:82:61:6c:79:04:b9:06:2c:1f:
32:93:2c:e0:0e:f1:84:7c:45:b1:94:db:5b:16:34:a3:a6:bf:
c7:11:a9:09:58:ea:35:c8:02:8b:37:8c:24:91:4b:2f:d7:c8:
43:3c:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:38 2025 by rpki-client