Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hzsuF1h_ze5KuIPsHUSQbexHOhc.roa
File: hzsuF1h_ze5KuIPsHUSQbexHOhc.roa (raw, json)
Hash identifier: 5MfedHaPAynAbBqNk0wWBSDI+POyUPtuZDu4nVVTXBo=
Subject key identifier: 87:3B:2E:17:58:7F:CD:EE:4A:B8:83:EC:1D:44:90:6D:EC:47:3A:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BA2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hzsuF1h_ze5KuIPsHUSQbexHOhc.roa
Signing time: Mon 08 Apr 2024 02:22:33 +0000
ROA not before: Mon 08 Apr 2024 02:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15266 (0x3ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 02:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=873B2E17587FCDEE4AB883EC1D44906DEC473A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:28:9f:9b:27:8c:ca:35:27:c6:a6:c4:6b:
61:ee:d9:4b:39:73:81:27:61:94:d6:d6:e3:fd:c7:
1d:0d:45:31:38:11:f2:de:83:67:f9:b0:06:ca:33:
3f:33:38:ee:6e:a3:19:6e:33:d4:ef:86:89:b6:24:
4e:63:4a:21:ad:1a:0e:bd:f7:77:33:e0:dd:51:d2:
44:e8:b6:9f:7e:05:54:cc:69:db:ab:6a:e9:5a:d6:
af:92:8f:3e:c0:08:41:d6:da:29:b7:df:91:6f:d1:
ed:a4:fb:17:da:44:39:47:53:6c:8c:90:c7:0c:3a:
e1:12:8b:56:1f:d6:f8:3b:17:a4:ae:ce:94:89:ca:
1e:cc:05:db:90:a2:30:cc:1c:cf:e7:34:d0:89:b7:
62:49:95:d2:bb:90:25:61:19:51:a9:ad:1c:a1:55:
13:8d:62:f0:a0:34:6c:8f:7a:97:9c:a0:0b:77:7c:
8b:fd:69:b3:1f:23:4e:a5:2b:38:24:18:f5:2e:bb:
a6:59:13:b6:69:78:93:59:e0:2f:3c:b6:33:5b:91:
f8:12:c0:54:2e:d6:a2:37:b6:6f:07:ff:ad:12:d0:
6f:87:74:da:d9:ea:da:d0:ad:85:ba:a8:fa:75:6c:
af:9d:38:8a:38:f7:81:d8:53:43:aa:52:2f:b1:4d:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:2E:17:58:7F:CD:EE:4A:B8:83:EC:1D:44:90:6D:EC:47:3A:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hzsuF1h_ze5KuIPsHUSQbexHOhc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:dd:c7:05:ea:58:d1:55:cc:22:4a:26:b2:50:f8:67:8b:76:
7b:24:21:89:1e:3b:59:19:43:d5:86:44:67:d0:47:46:fc:d2:
23:fa:23:0c:cc:29:d5:46:db:f2:7b:37:dc:31:03:39:0a:d8:
1d:7b:f2:35:85:d6:60:8a:a7:98:fc:f0:28:00:61:a3:e1:2c:
af:ee:10:b5:f4:90:30:c7:8c:ab:54:94:5b:34:1e:97:8d:d7:
13:90:ea:11:06:73:a3:da:80:95:4c:8e:20:77:b4:3c:9f:76:
c5:73:7f:be:67:18:e4:12:3b:10:2d:b4:a0:f8:b4:53:3d:d6:
73:7a:8a:f1:58:54:17:85:fd:1d:e0:43:dc:d1:ec:77:4b:2a:
85:42:37:47:10:20:5d:89:ad:40:41:69:2b:4f:d8:09:01:4d:
fa:1a:fc:20:d1:fe:17:fb:87:e1:0a:b4:24:4a:b0:20:f8:bc:
d4:61:e6:bd:5f:81:c6:3b:80:ab:a6:c7:56:99:1d:2f:a2:b1:
1d:83:07:04:a5:87:56:1b:de:15:75:52:43:3c:34:7b:31:8e:
7b:0d:2d:a5:12:77:c2:ee:f2:4c:fd:61:42:5b:60:4a:87:c7:
e0:f0:e3:3e:e4:95:83:91:04:49:71:60:7c:cf:5b:11:2f:75:
16:56:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:24 2025 by rpki-client