Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gjCHv8y4RNU6XFqcEurjZwwy_eY.roa
File: gjCHv8y4RNU6XFqcEurjZwwy_eY.roa (raw, json)
Hash identifier: y4eMg+0hb+vUZzKSPNgbd1EiDqKdDfF8HYjOT35dQIA=
Subject key identifier: 82:30:87:BF:CC:B8:44:D5:3A:5C:5A:9C:12:EA:E3:67:0C:32:FD:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4196
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gjCHv8y4RNU6XFqcEurjZwwy_eY.roa
Signing time: Tue 16 Apr 2024 00:53:04 +0000
ROA not before: Tue 16 Apr 2024 00:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16790 (0x4196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 00:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=823087BFCCB844D53A5C5A9C12EAE3670C32FDE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:ed:eb:89:0c:bb:c4:c4:fe:61:24:b9:84:
53:18:45:ab:ae:bc:71:39:4a:7d:ab:42:43:ba:a1:
be:e8:f5:3c:49:ad:a7:e8:29:d2:9f:6c:a1:1e:cb:
81:e6:6a:0c:bb:be:81:c6:51:47:fc:ec:37:26:6c:
ca:56:5a:a6:a5:89:17:41:91:08:cd:e8:9b:43:99:
a8:fa:1b:74:34:3c:71:21:03:4d:99:0e:91:92:ac:
f5:cb:1e:64:f0:6e:4a:5f:2f:e9:00:f1:c0:d2:37:
d4:7f:e9:81:0b:97:eb:d8:67:4c:c1:8c:fe:c8:7a:
9c:d0:5f:40:af:ea:6a:89:b7:59:fe:c3:ae:95:a3:
28:6f:47:28:e9:cf:25:25:92:9a:78:a1:27:79:97:
8e:24:41:16:34:68:ce:f3:79:1d:41:fe:b8:d6:52:
cf:60:d5:a4:ac:61:45:c3:bf:68:1f:55:8a:a2:84:
94:0e:8b:95:32:6a:2e:cb:5d:7a:7b:0d:26:3a:31:
3c:e6:45:6b:17:0f:94:21:dd:6f:54:cb:0f:d6:82:
97:9e:98:c5:28:6c:d8:b0:16:78:5a:3f:de:e3:ed:
b6:53:3c:53:5a:9a:18:2e:0d:05:e0:68:05:6f:e9:
17:21:c1:28:f1:e0:3a:24:81:a8:19:8b:61:6a:a0:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:87:BF:CC:B8:44:D5:3A:5C:5A:9C:12:EA:E3:67:0C:32:FD:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gjCHv8y4RNU6XFqcEurjZwwy_eY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:3d:20:ff:2d:3a:27:7c:67:cf:d6:7c:43:05:48:b8:7d:f9:
cc:b1:2d:58:47:93:24:bb:70:07:d8:c7:05:4d:c0:0b:82:80:
44:9c:ee:44:9c:60:43:19:7e:61:b5:9b:85:1e:bd:dc:1e:5a:
1f:38:da:1a:f6:70:ee:d0:d2:b2:74:fc:15:86:b2:8d:2e:ee:
15:da:d0:8c:a0:77:d6:22:29:7d:76:29:ef:3b:05:4c:d2:61:
0e:f1:8e:35:6b:48:1a:ee:c2:72:98:1c:9a:af:0e:ef:d2:01:
89:fa:f9:91:1b:de:64:2c:bc:96:16:3f:21:db:62:97:d8:d5:
93:d0:ce:42:56:97:c9:d5:b3:a0:33:20:d6:09:80:4c:e7:10:
58:b0:96:02:38:e1:40:7b:93:0a:f1:66:8f:23:fa:df:7b:9e:
26:c1:09:d5:b1:a4:37:2d:3b:3b:2b:17:86:e8:3a:b9:c2:9e:
9e:f1:28:11:f5:1b:f5:f4:24:57:4c:93:5f:e4:94:5e:28:ec:
2e:34:79:a7:45:6e:36:8f:5f:4d:f1:82:07:2e:8c:fb:bb:b6:
f6:1e:a0:7f:29:34:5c:a5:ef:33:33:0b:dd:2c:3c:fa:8f:46:
c4:18:0a:df:58:8b:73:3d:f8:95:14:9a:0b:5b:9d:e5:d8:40:
90:b1:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:59 2025 by rpki-client