Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hsrKhEWFZAaoUs4fTGZR5qJBE4E.roa
File: hsrKhEWFZAaoUs4fTGZR5qJBE4E.roa (raw, json)
Hash identifier: DBFLxxfIoni+raz2PGa0KbPk4q99NymIuyrRQK/jaf0=
Subject key identifier: 86:CA:CA:84:45:85:64:06:A8:52:CE:1F:4C:66:51:E6:A2:41:13:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ACA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hsrKhEWFZAaoUs4fTGZR5qJBE4E.roa
Signing time: Sun 28 Apr 2024 07:23:32 +0000
ROA not before: Sun 28 Apr 2024 07:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19146 (0x4aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 07:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=86CACA8445856406A852CE1F4C6651E6A2411381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:2c:af:68:f4:5f:83:0f:d3:ed:46:0a:2e:
62:2d:ad:bd:4c:e6:92:fd:cc:de:e3:93:c4:53:e7:
bc:08:66:4f:af:0c:b4:e6:44:0e:04:be:78:b6:87:
4b:04:90:ce:f6:8c:d1:e8:af:1b:e2:75:4f:38:d1:
b5:71:3c:79:12:55:a6:76:14:fc:57:ff:eb:63:85:
da:a7:d9:cb:ce:1e:c3:d1:3e:2e:d5:d5:a3:a5:fc:
bd:e2:d1:07:03:ba:17:a9:77:8a:a2:4a:57:30:71:
51:52:02:92:59:fa:fc:31:4c:bc:a1:12:51:23:8f:
9d:1f:2d:44:87:b9:82:b4:56:df:c3:ff:11:75:fd:
95:46:49:4d:df:92:24:79:8d:a1:39:81:26:09:9d:
3e:2d:81:a1:f3:41:aa:bf:77:02:8d:aa:d2:3c:11:
54:3f:8e:45:1a:c7:6f:67:8a:e8:71:29:42:55:2f:
49:08:39:fe:3c:1d:73:5a:d8:1c:67:0c:d2:1f:0e:
ba:cb:2e:63:3d:6a:26:4f:67:66:c5:ee:23:13:e7:
8b:c8:ab:f9:4e:54:cf:94:80:ff:5b:2c:5d:35:8a:
a7:89:38:cf:fd:b2:25:7e:f4:64:f6:4c:9b:03:f8:
24:dd:28:1f:91:8b:91:40:00:af:25:83:4a:48:3b:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:CA:84:45:85:64:06:A8:52:CE:1F:4C:66:51:E6:A2:41:13:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hsrKhEWFZAaoUs4fTGZR5qJBE4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:99:60:78:4b:a1:4d:1f:5e:6b:3b:34:17:a2:2f:04:e5:9d:
10:1f:0c:79:5d:8e:97:64:54:fa:c2:34:5d:04:f3:ef:97:bb:
e9:be:ba:57:3a:e3:ef:c8:62:6d:d7:2c:3c:72:0a:22:b6:f9:
b2:44:dc:4b:ec:ed:ab:c7:e0:f1:95:4f:92:1d:cf:a0:43:35:
e5:b7:f5:33:1d:66:d6:44:24:e8:83:93:f0:f1:e6:ce:64:24:
ea:8b:78:9f:30:63:33:c4:e3:d9:1e:ee:65:9e:87:9c:1c:14:
9d:11:5d:35:e2:a7:cc:ab:8a:d0:a1:a1:dd:cf:f9:e5:c0:a6:
e5:df:96:c8:85:bd:3f:aa:09:bc:51:b5:62:a9:48:41:2c:4a:
15:d2:14:fe:31:7e:a5:34:f9:e8:8e:61:7a:02:bf:74:60:1d:
e0:ba:1a:c7:86:85:ae:c1:38:6c:cb:83:a2:b5:cd:82:25:7f:
f3:99:75:bf:21:6b:62:21:6e:2a:8e:16:0e:85:69:30:92:b5:
32:20:4d:71:92:da:f3:55:cb:64:7e:78:c2:60:7a:c8:c1:fb:
7c:e6:24:90:f3:a9:22:cc:2a:b7:4d:a1:be:0c:ec:86:08:b5:
fd:58:ab:be:b2:cb:64:9b:ef:f6:e6:73:d5:fa:17:2e:6f:b1:
0a:a5:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:48 2025 by rpki-client