Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gySLQIiTIqFvnE78SOjsRbQQfHc.roa
File: gySLQIiTIqFvnE78SOjsRbQQfHc.roa (raw, json)
Hash identifier: HsGAZhvOT6Plu0DaP/hYu2WnpUUiBp9yBQQHrAr/08o=
Subject key identifier: 83:24:8B:40:88:93:22:A1:6F:9C:4E:FC:48:E8:EC:45:B4:10:7C:77
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B16
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gySLQIiTIqFvnE78SOjsRbQQfHc.roa
Signing time: Sun 07 Apr 2024 08:52:31 +0000
ROA not before: Sun 07 Apr 2024 08:52:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15126 (0x3b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 08:52:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=83248B40889322A16F9C4EFC48E8EC45B4107C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:fe:05:25:01:9a:c0:37:2c:8b:82:7d:f2:
1b:30:a9:b8:8d:e5:ef:ab:26:f0:27:9b:de:80:c7:
5d:68:3a:e1:f8:98:19:d6:2b:df:22:45:61:e1:bd:
72:9f:aa:6e:d4:9c:22:bf:7a:ac:5d:40:1c:62:f0:
cb:a2:c1:da:ab:19:a7:e8:72:56:8c:f5:af:32:99:
61:b5:63:77:4b:16:07:7e:4d:2d:dc:71:33:23:ad:
b4:e9:6b:7a:07:f3:26:6d:22:83:60:52:4a:15:5c:
1a:1e:b9:65:33:fd:dd:27:1d:b3:aa:4f:e5:09:25:
4a:54:05:84:5b:a6:70:30:59:8d:89:2c:7b:68:1b:
2c:d8:72:f9:2b:13:bc:dc:8f:1d:d8:04:3e:d3:9b:
fa:74:54:b9:07:98:2d:ce:ce:65:bb:87:08:39:a4:
e7:38:ac:96:13:8a:29:c7:b5:8b:a7:2d:7a:03:2e:
91:7b:74:d2:c5:f1:a9:73:bc:52:32:6f:22:b6:06:
3f:fd:f5:15:ef:3f:db:fd:37:4c:e5:cb:23:b0:8a:
76:ae:69:f5:2c:a5:98:ae:e9:1c:fd:ec:b5:57:b3:
ed:a2:8b:a8:fd:54:f5:db:4e:e7:b6:08:e7:a7:25:
74:94:aa:ad:67:d3:58:11:08:43:6a:51:ff:4a:6e:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:24:8B:40:88:93:22:A1:6F:9C:4E:FC:48:E8:EC:45:B4:10:7C:77
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gySLQIiTIqFvnE78SOjsRbQQfHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:6f:8b:96:8e:9a:6f:74:4a:a8:fe:15:e5:41:be:d9:9e:88:
22:1f:67:de:32:0a:aa:a5:aa:5d:9f:70:89:4f:ea:c9:eb:22:
01:81:17:03:59:a8:27:a3:8b:67:08:7c:dd:29:04:88:b7:21:
fd:e8:a4:07:a9:0a:de:87:b9:3a:03:9f:98:e4:df:4c:d8:8c:
d5:22:19:1e:7d:d9:a0:06:81:2f:73:09:2d:6a:85:fd:24:f1:
ad:b9:31:0c:08:71:1d:70:89:3e:0f:5f:f2:34:09:c5:d1:a6:
4e:c6:0a:30:50:6f:1f:b8:73:64:38:a1:06:a2:00:e6:6f:ee:
78:fd:53:d5:38:71:4d:71:de:9c:60:eb:6e:a4:9b:10:85:e3:
88:b0:cb:5c:ea:41:6a:ac:ef:77:09:10:d8:71:52:a7:fb:fb:
2f:82:8d:97:a6:6a:9d:b7:2a:1c:28:76:a7:6f:c4:08:0f:21:
f8:a5:ad:72:d3:8b:a6:07:bc:c1:4f:76:aa:e5:03:b5:dc:26:
f8:a2:07:e1:8a:d7:c1:7d:b9:48:46:68:1c:2c:b0:fc:9d:98:
0b:8f:fb:d1:79:36:88:a5:73:3d:55:03:fe:ec:7b:09:9e:a4:
a1:7d:5e:90:90:de:30:0b:f4:b7:de:4b:a3:86:50:ad:9c:66:
ac:13:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:30 2025 by rpki-client