Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gVG3ynWwRGotH7NPF2wFfGvyJC0.roa
File: gVG3ynWwRGotH7NPF2wFfGvyJC0.roa (raw, json)
Hash identifier: y7nr3XuVqhfoZalrGSzBcW+GIjEfcNDB4yJGAMWHOpg=
Subject key identifier: 81:51:B7:CA:75:B0:44:6A:2D:1F:B3:4F:17:6C:05:7C:6B:F2:24:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5242
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gVG3ynWwRGotH7NPF2wFfGvyJC0.roa
Signing time: Wed 08 May 2024 06:24:20 +0000
ROA not before: Wed 08 May 2024 06:24:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21058 (0x5242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 06:24:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8151B7CA75B0446A2D1FB34F176C057C6BF2242D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:8c:59:58:5a:0a:9a:d2:bf:62:59:78:28:
3a:52:d5:e5:cd:17:9d:5d:b8:a3:7c:61:13:be:52:
89:a7:fc:46:2e:bd:85:ff:ce:2d:f1:ae:c5:87:4c:
9a:d9:a6:f7:c8:ed:f8:c2:94:47:26:c3:f3:e4:c6:
59:49:b1:b1:81:f2:44:db:2e:73:4f:37:e9:6d:90:
96:71:52:b9:d6:81:3e:f8:04:45:3e:6c:d3:73:b0:
bc:05:79:d7:f9:f8:92:84:db:82:53:03:5d:e6:7a:
68:55:5f:97:19:7a:99:f4:5f:e0:77:02:b7:39:01:
ae:96:ae:ab:61:fc:ad:d3:62:f9:31:ab:d2:bb:c1:
1d:7f:1e:8c:63:76:87:6e:45:d1:2a:21:de:13:5c:
2e:e2:18:7a:50:7b:67:a5:32:0f:24:c3:3b:28:92:
e3:d7:cb:a6:e9:73:64:a4:a9:a6:d1:3b:16:0d:22:
19:59:72:75:0c:cf:df:72:1d:9a:1f:30:8b:1d:e2:
6c:ce:49:3f:f7:ed:83:d9:b2:f0:5c:e1:86:47:3c:
ef:51:d2:6f:3f:b8:c9:53:15:e7:99:d8:bf:d0:56:
c9:83:0d:92:35:d4:0d:fa:ac:fe:6d:49:54:7d:9d:
d0:71:04:55:bb:ea:3b:0f:cc:5a:4f:8e:23:f6:2e:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:B7:CA:75:B0:44:6A:2D:1F:B3:4F:17:6C:05:7C:6B:F2:24:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gVG3ynWwRGotH7NPF2wFfGvyJC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:ec:f1:8b:1e:af:6b:8a:1a:89:77:6c:c0:5c:1f:10:a4:c4:
b9:c3:dc:65:f6:f4:6f:eb:df:fd:be:2b:33:5e:d1:12:d0:ea:
29:86:b1:62:3f:5d:c2:cb:6d:80:37:12:b3:b0:55:d8:b3:4a:
d1:81:96:8c:86:98:69:11:4c:66:79:10:90:fb:b3:64:1c:80:
07:3e:31:27:e4:8a:2e:25:ef:36:fc:6f:6d:ab:75:a4:c4:6d:
c9:f8:f0:fd:06:e7:6f:77:5b:b0:10:1c:ff:db:07:18:39:43:
b1:b7:79:ae:27:38:37:14:60:a3:f9:64:b6:ee:2c:77:60:8f:
6e:6d:9c:41:86:80:3a:56:b8:28:ca:91:0a:39:5a:3f:1f:cb:
16:79:88:ba:9c:21:2e:b2:1a:5d:2a:d3:68:99:04:f2:a3:75:
7d:51:a6:91:48:70:c9:eb:45:d0:c5:d4:cb:71:d4:ce:34:3c:
ea:92:4c:22:30:80:68:57:86:49:b3:df:b7:07:3b:2e:fc:c6:
7c:f8:89:03:89:a0:8b:8b:c1:83:f3:b2:f8:dc:4b:2b:5c:46:
9a:cf:da:bb:36:90:e3:79:11:c3:52:76:e4:d5:cb:19:25:1e:
e6:f5:aa:cc:d4:4b:8a:18:69:53:d1:d1:77:8e:9a:6b:c4:99:
06:74:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:11:51 2025 by rpki-client