Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ar6c1qE83Pq2IwUdZ-ZnGjch_88.roa
File: ar6c1qE83Pq2IwUdZ-ZnGjch_88.roa (raw, json)
Hash identifier: gMdfwC7Aal2l4PK4obOoUHoGbLI6l1c7Uh9uXbaitFo=
Subject key identifier: 6A:BE:9C:D6:A1:3C:DC:FA:B6:23:05:1D:67:E6:67:1A:37:21:FF:CF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4352
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ar6c1qE83Pq2IwUdZ-ZnGjch_88.roa
Signing time: Thu 18 Apr 2024 08:22:59 +0000
ROA not before: Thu 18 Apr 2024 08:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17234 (0x4352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 08:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6ABE9CD6A13CDCFAB623051D67E6671A3721FFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:98:2d:2c:ab:41:46:57:c5:51:3d:d9:33:
ba:e5:e6:b4:7e:45:f2:42:69:7c:61:fd:6a:3e:90:
c3:2b:5d:03:bb:d7:b2:f7:63:89:1d:62:8f:65:ec:
18:c4:1c:30:9a:8e:d6:a0:99:de:9b:86:43:eb:8d:
96:5b:da:ae:9e:5f:68:02:d2:57:bd:e8:75:4e:bf:
b0:03:46:e6:dc:49:8a:e7:90:19:5c:87:8a:ba:75:
9b:fc:99:9e:d3:3e:4d:fd:77:42:2d:81:89:28:40:
07:12:8e:65:fe:93:ad:2c:e3:11:81:ef:76:46:c5:
12:4f:b6:6c:87:14:45:d8:3d:d9:14:56:eb:fc:65:
ed:03:88:9e:68:2c:6f:6f:05:52:64:83:05:37:0a:
60:8f:c9:f0:8f:0e:b7:4d:aa:b3:89:aa:72:52:57:
17:f0:87:18:07:4e:b1:75:ab:d4:fc:01:b3:a4:84:
5f:06:3d:1f:a5:83:db:dc:d9:46:c1:c7:6e:82:99:
ad:3c:13:5a:17:ef:42:de:a7:fc:0c:f7:84:f1:6e:
80:57:a2:d1:d9:da:f1:24:29:2f:ab:c0:c4:18:7d:
fc:71:3a:6e:2d:1a:89:fb:4c:7d:09:b9:d3:49:5b:
d7:26:95:39:8b:0e:91:de:f4:7a:ee:70:99:e5:2a:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:9C:D6:A1:3C:DC:FA:B6:23:05:1D:67:E6:67:1A:37:21:FF:CF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ar6c1qE83Pq2IwUdZ-ZnGjch_88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:61:4a:d7:a2:3b:ba:54:87:7a:8d:e4:fb:3d:8b:1e:e2:9d:
db:e0:30:c3:cd:0d:97:08:43:d0:02:52:c7:53:5b:d3:46:d0:
e8:de:18:13:a1:7f:55:c8:69:8a:93:39:db:80:c3:a0:ef:fd:
b9:5a:7e:9b:8c:5f:ea:e7:62:40:3e:b9:e7:0a:94:ad:7b:98:
10:62:cd:01:f2:af:2f:3b:b4:4a:32:2f:77:c0:e0:65:f5:3a:
9e:03:b5:63:82:b3:a6:0d:2f:22:8a:33:eb:ba:82:94:fd:5f:
3c:3b:ce:cd:1a:1c:e9:e7:bb:02:1c:1d:aa:7c:34:61:56:e4:
e8:ab:52:a8:10:a2:a4:2b:4e:a8:13:54:88:33:b6:aa:88:e6:
5e:db:ed:60:e6:c9:28:fe:6a:d9:7c:26:17:49:fa:59:f5:1d:
00:2c:c2:f5:ee:51:4d:e0:fc:fa:10:57:c9:53:75:74:dd:10:
1c:21:4d:fd:e3:46:99:e9:62:80:ac:14:44:2f:f0:4e:d7:21:
07:8a:88:26:df:13:6a:bf:c0:71:f3:8f:2f:7a:dd:66:b7:11:
d8:9f:a0:f0:b1:b6:10:0d:4c:2e:5d:43:7c:52:ee:da:73:6b:
e4:d8:21:3e:c8:07:af:4b:d8:ea:b1:b9:94:dc:c1:a2:57:8c:
89:00:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:56 2025 by rpki-client