Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_697t8dwDhw93OAFQD1raOBz4vc.roa
File: _697t8dwDhw93OAFQD1raOBz4vc.roa (raw, json)
Hash identifier: pgG9FNtOxCXspgu5JxISHmK7hcjP1V09khJ19Po2U9I=
Subject key identifier: FF:AF:7B:B7:C7:70:0E:1C:3D:DC:E0:05:40:3D:6B:68:E0:73:E2:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DEE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_697t8dwDhw93OAFQD1raOBz4vc.roa
Signing time: Thu 02 May 2024 11:53:41 +0000
ROA not before: Thu 02 May 2024 11:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19950 (0x4dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 11:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FFAF7BB7C7700E1C3DDCE005403D6B68E073E2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:29:92:13:25:0e:a6:00:fc:3e:0e:6e:d6:
40:46:cc:a8:d3:38:27:ec:a4:18:40:69:45:3d:64:
e3:66:7a:e9:a4:60:a7:e2:75:df:15:3e:b4:bb:76:
12:46:78:01:07:74:51:1d:5f:80:32:3c:46:30:a3:
f6:c7:ff:96:64:9c:6d:24:63:4a:aa:2a:7e:22:7f:
53:af:af:97:03:68:dc:94:69:f6:ff:81:87:dd:ff:
d5:b5:b3:42:38:25:8c:51:98:8f:17:16:db:8a:0a:
46:6b:85:41:4b:0b:5d:3d:48:bc:dc:7c:57:1a:69:
b6:2e:67:86:17:0c:ca:6e:d9:74:d4:85:70:0d:65:
82:d5:37:8b:6d:86:1f:3c:15:31:00:e0:bc:76:a3:
e8:be:65:cc:15:d9:f9:30:5c:bb:0e:68:06:e6:d9:
3d:90:8c:e7:ed:3d:41:cc:b8:42:8d:e7:96:b1:17:
e1:79:6e:a3:04:91:2b:98:d5:73:5e:09:80:c9:6e:
e4:b1:8d:90:57:02:41:94:7a:b4:d6:24:bc:cf:9a:
9e:01:86:31:43:49:23:17:70:c0:3d:e4:b9:70:d9:
e8:40:28:a8:68:5c:12:b4:94:71:49:b3:07:29:28:
4c:6b:e3:12:a2:d7:48:62:17:5f:fd:af:ef:84:3c:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:7B:B7:C7:70:0E:1C:3D:DC:E0:05:40:3D:6B:68:E0:73:E2:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_697t8dwDhw93OAFQD1raOBz4vc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:58:17:6d:bd:71:38:c8:7c:51:2c:c4:d6:07:2a:62:c6:9e:
51:f8:30:d9:7f:22:62:aa:78:a6:70:01:11:f0:26:27:d9:d7:
9d:12:a3:5b:63:e1:f3:eb:35:dd:89:54:ab:31:a7:52:f8:de:
35:2a:f9:ae:77:a7:d7:0f:97:5f:47:39:91:71:40:81:5d:7c:
e1:7d:2a:a0:6e:c3:db:33:f8:e0:26:f2:9f:bf:35:9e:4a:17:
7f:d4:c7:61:5e:34:9d:70:ee:0e:99:6c:13:28:d3:b5:1d:d6:
97:88:a8:45:49:d6:16:ba:b8:43:be:e9:65:62:fa:68:11:e0:
0f:94:5d:16:b7:2c:0a:57:61:6b:39:b1:ac:7a:20:6c:53:b4:
29:48:67:77:ce:be:63:e0:3e:94:5d:68:ff:ae:3a:75:d5:d2:
59:56:a2:23:f3:19:d5:42:9f:aa:d1:e2:df:ec:f2:22:0c:fa:
43:2b:73:6f:9e:41:19:ca:34:4d:b5:03:23:f5:eb:ac:7f:76:
a1:0d:a2:d2:df:10:12:be:f7:b5:a4:33:dc:fb:77:24:14:64:
a2:be:43:82:e2:23:34:82:b2:98:b7:dc:69:c5:41:b3:52:84:
c1:7d:06:f5:3e:20:26:7f:f9:f7:7c:1b:52:2c:5b:b6:35:6b:
f9:14:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:07 2025 by rpki-client