Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fD9fhCjLUZ893hrnDOCYsYl6kVY.roa
File: fD9fhCjLUZ893hrnDOCYsYl6kVY.roa (raw, json)
Hash identifier: xT9Gab+65ct7aue5ZYpnj7jVav2lSHNLlUKDkGBmDaE=
Subject key identifier: 7C:3F:5F:84:28:CB:51:9F:3D:DE:1A:E7:0C:E0:98:B1:89:7A:91:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4242
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fD9fhCjLUZ893hrnDOCYsYl6kVY.roa
Signing time: Tue 16 Apr 2024 22:22:57 +0000
ROA not before: Tue 16 Apr 2024 22:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16962 (0x4242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 22:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7C3F5F8428CB519F3DDE1AE70CE098B1897A9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:46:ab:49:98:95:20:21:01:1e:b5:4a:ab:
9b:f4:89:46:cd:ed:b2:c3:85:2f:92:c0:0a:06:37:
ef:87:b4:32:b2:1d:31:76:6e:c0:d8:9e:9d:33:85:
99:84:41:1f:c0:18:07:09:85:78:a5:ef:c1:cd:51:
7c:c0:b0:40:60:1d:4d:0d:e2:13:fb:96:5c:ca:d0:
56:67:0b:2c:0d:98:5f:f2:d9:bc:83:de:6e:6f:f6:
51:fc:9b:d9:b7:b0:33:e6:42:e3:41:1e:b6:e8:f4:
85:58:cf:c1:97:a0:6c:4b:a6:54:90:e6:31:13:61:
85:bb:66:9f:f4:bf:e4:ab:90:f5:6d:f3:02:ef:4e:
c1:5d:0b:33:56:47:2a:8e:fe:85:97:84:16:24:4b:
73:1c:35:51:6c:98:9f:69:be:72:89:4a:2b:f8:6b:
4a:9b:15:cc:a8:0d:69:e0:6a:22:34:a3:b1:2a:78:
ec:23:4d:65:09:cc:98:0e:e6:e3:0c:fc:c4:3c:c2:
42:79:89:48:71:a9:0d:39:bc:bc:db:83:f9:ea:9f:
8f:f7:99:7f:4b:50:5d:b3:b0:9c:7d:3d:18:9e:2c:
a1:6d:d1:90:11:0c:93:c8:a0:1c:67:c7:05:36:05:
45:56:fa:6e:e2:70:6c:d5:26:1b:60:7a:0d:d1:e8:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:5F:84:28:CB:51:9F:3D:DE:1A:E7:0C:E0:98:B1:89:7A:91:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fD9fhCjLUZ893hrnDOCYsYl6kVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:8f:62:04:f1:c2:c9:75:ef:66:ef:0c:ef:22:05:64:a4:d8:
3f:34:dc:43:fb:46:0c:af:89:4a:43:ac:7a:e5:61:4b:c1:9c:
32:1d:e3:16:d9:4e:2d:5c:bc:32:5f:cd:63:9e:02:d6:7a:10:
93:6d:49:46:bd:92:72:9f:75:cc:9b:8f:4e:57:29:9d:05:fd:
46:7b:f3:8e:09:60:5d:21:6a:31:1f:6d:42:1b:d0:26:65:1c:
6e:13:70:60:8f:6a:33:01:fb:14:b2:48:37:a8:10:23:45:8f:
24:6f:e1:6e:76:1a:76:1b:27:8d:ac:b4:7a:ca:9d:13:d3:ef:
b4:3e:dd:ae:d8:1f:9b:71:1f:3c:84:3b:b6:a8:1b:71:11:63:
0d:bd:c0:26:8f:37:f5:cf:2b:bf:7f:f8:9d:1e:2a:fa:0d:b4:
e1:4e:3d:54:68:d7:c7:1b:7c:47:3e:7f:19:9c:0b:1a:07:37:
a6:e7:fc:2c:ab:72:2c:fb:0b:7a:3a:e1:7d:eb:4c:4f:7a:b9:
ed:39:54:5c:b3:06:e3:37:4e:0a:a2:72:3a:a6:7c:49:9e:89:
13:34:34:6f:3c:d2:01:05:75:40:01:8b:6a:00:1e:16:2a:a7:
e2:1a:50:34:d5:82:18:8a:57:f5:20:14:81:71:46:3c:90:ae:
7e:15:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:32 2025 by rpki-client