Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fTjVvTnz7JWOFBW81jPDBK1fnXI.roa
File: fTjVvTnz7JWOFBW81jPDBK1fnXI.roa (raw, json)
Hash identifier: ZFuH82Lz+J/6cols5uAkUOOwPoGU4egdaI7lNC3qFMY=
Subject key identifier: 7D:38:D5:BD:39:F3:EC:95:8E:14:15:BC:D6:33:C3:04:AD:5F:9D:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DAE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fTjVvTnz7JWOFBW81jPDBK1fnXI.roa
Signing time: Thu 02 May 2024 03:53:43 +0000
ROA not before: Thu 02 May 2024 03:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19886 (0x4dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 03:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7D38D5BD39F3EC958E1415BCD633C304AD5F9D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:e6:2f:6a:6e:ac:7a:ea:78:8c:16:0a:5c:
80:8a:51:64:96:0c:fa:06:cd:e8:5c:13:d4:a9:84:
0a:a1:4f:f0:0c:34:fc:74:a3:dc:d9:0a:bd:99:d0:
7d:42:a2:ba:88:5c:a0:30:db:24:68:36:a8:02:82:
f2:7d:ac:75:c6:4c:8b:e2:6e:74:53:57:b7:e6:5a:
76:66:53:16:8c:04:ad:85:88:e2:1b:7c:ca:d0:d9:
14:56:d9:c9:c7:76:79:d2:87:e8:66:ec:fb:f2:76:
40:8c:a2:7a:39:ee:c7:ab:82:16:31:dd:b9:a5:4b:
4e:71:5d:60:3a:fb:b1:9c:bb:84:2f:eb:86:d3:ba:
1c:0e:dc:60:68:56:6e:cd:15:c0:6d:f8:9a:2f:c8:
8f:b2:67:33:61:ff:f7:b5:3e:24:b8:eb:4d:73:9d:
28:f0:94:7e:9f:25:af:3d:44:d0:c3:44:6a:1a:28:
2d:88:1f:02:eb:11:d3:ee:99:9d:30:c1:4a:c0:59:
46:fc:8e:80:fb:60:b1:fe:bc:49:87:d1:70:92:20:
1f:d8:77:4a:f4:09:b3:bd:4d:a5:40:25:3c:43:28:
e3:ee:12:8e:cb:6a:7e:98:31:c1:7a:dd:28:46:e3:
39:65:16:f4:7e:cd:f3:e3:aa:47:aa:a1:c9:3d:aa:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:D5:BD:39:F3:EC:95:8E:14:15:BC:D6:33:C3:04:AD:5F:9D:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fTjVvTnz7JWOFBW81jPDBK1fnXI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:4f:01:b6:32:30:c9:26:a8:93:a7:9d:66:cd:a7:a4:97:22:
52:1c:93:d3:92:f6:eb:41:cc:2b:c3:e4:0d:24:14:ff:f2:d3:
06:fd:4e:ec:ef:ad:96:11:7e:10:64:0f:eb:33:04:4e:65:aa:
35:fe:d1:6b:00:b2:aa:4a:3c:ff:99:12:2f:da:03:c5:d9:af:
52:b7:b5:ae:98:f7:fe:5c:5f:81:d2:de:8a:13:f3:6f:ab:20:
f0:da:b8:e0:07:0e:2c:51:a9:fe:de:dc:68:f9:60:d3:93:26:
de:f5:04:f5:fc:ed:9b:cd:94:f4:8b:32:7c:08:e2:e9:1a:06:
4c:15:0b:ed:d8:28:b6:ad:15:83:94:58:34:52:a7:46:bf:30:
a1:b8:3b:6d:f6:25:78:16:d2:3d:c5:78:8f:00:27:d6:53:9d:
58:af:5b:03:80:47:6a:01:a3:3c:23:56:29:86:6f:f2:d2:9d:
e3:ed:77:d7:0a:81:ff:a5:c3:99:5d:7a:df:6d:01:28:98:71:
ff:a9:ca:21:52:a6:fd:da:52:ff:36:bd:d7:e2:f4:47:1a:b4:
07:0a:3f:19:6c:e9:0d:d2:d4:d7:32:ab:92:aa:d2:6e:0b:5e:
65:49:78:89:83:49:82:ad:55:53:eb:19:64:24:28:1a:2f:03:
af:d7:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:33 2025 by rpki-client