Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j9RZln8ixBnbbSttHcdla5aTB1I.roa
File: j9RZln8ixBnbbSttHcdla5aTB1I.roa (raw, json)
Hash identifier: vT5nNpwfOiKHUSQowsX3qkLpjro7nXGX8HrwwWmh148=
Subject key identifier: 8F:D4:59:96:7F:22:C4:19:DB:6D:2B:6D:1D:C7:65:6B:96:93:07:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42B2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j9RZln8ixBnbbSttHcdla5aTB1I.roa
Signing time: Wed 17 Apr 2024 12:23:26 +0000
ROA not before: Wed 17 Apr 2024 12:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17074 (0x42b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 12:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8FD459967F22C419DB6D2B6D1DC7656B96930752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:d0:b9:2a:09:41:2e:55:5c:73:4e:a7:a2:
4a:34:a0:65:47:34:47:ce:f6:24:6b:a6:a6:2d:24:
41:7f:97:59:33:19:47:d1:3b:04:a5:dd:ff:d7:c3:
85:66:4d:85:4b:43:27:87:5a:97:c0:09:a1:4d:94:
e6:4a:49:6a:bd:e6:69:16:f7:36:8b:47:0a:58:25:
9a:0d:a1:14:a5:f3:36:00:11:45:54:7f:10:93:79:
f9:74:0c:b9:f4:15:f0:d7:67:fe:0b:b4:87:db:b4:
62:1d:08:83:79:23:08:8a:1d:dd:ef:c8:19:c8:37:
99:3a:30:ec:f6:06:88:65:2c:b4:f5:af:96:6b:63:
38:f5:36:bc:74:16:ec:65:b6:95:37:b8:c7:90:d6:
55:4e:e6:bc:a6:7b:53:68:dd:1a:82:00:ac:db:94:
66:2e:28:e1:03:11:ba:e9:bb:70:b6:30:8c:aa:4e:
23:87:18:98:76:7a:ce:30:fa:65:d4:b9:8f:9c:ee:
91:8a:28:53:ad:08:96:7c:59:60:ca:f7:83:29:85:
5d:4a:02:e8:ef:b9:60:f6:41:bf:83:5a:c5:c9:70:
a9:4f:4a:28:58:e5:e2:42:55:ee:70:75:39:a8:da:
98:1b:f6:59:7a:d4:3a:26:2f:1a:c8:a2:dd:a7:11:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:59:96:7F:22:C4:19:DB:6D:2B:6D:1D:C7:65:6B:96:93:07:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j9RZln8ixBnbbSttHcdla5aTB1I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:43:94:1d:01:77:7d:e1:39:6f:09:b8:88:51:3e:15:33:37:
4d:c0:e4:86:80:5b:91:c8:6d:cf:24:dd:ac:64:f3:02:88:6d:
83:37:4a:6a:08:25:ff:95:27:dc:d1:29:23:ca:bf:16:f7:da:
d0:cf:36:92:cf:86:e1:1c:16:64:a5:b1:40:08:bb:c4:6f:28:
ee:ac:ff:a4:2b:a8:8c:cf:4f:c8:1d:51:56:33:a0:7d:dd:c1:
e5:64:93:17:c0:22:5c:27:53:64:08:db:07:72:5a:0d:80:61:
ff:1a:a0:b4:b3:d6:e3:62:e7:33:47:8b:c1:63:e4:64:1f:39:
8e:f6:a5:ed:cc:c8:98:ee:45:22:90:a9:b7:d2:59:4b:f4:b4:
83:5c:48:67:26:60:2d:83:a1:73:74:df:d5:5e:1c:18:3c:97:
a5:ab:d9:a9:cb:99:82:3d:89:c3:2f:26:06:d2:8a:9a:66:16:
2d:f1:f9:92:65:34:1c:db:80:02:06:d2:03:99:a9:c1:64:ea:
50:6e:10:dd:3d:63:33:b8:01:3a:d0:3d:72:a9:d5:5d:e7:31:
46:9a:45:0e:2b:2a:44:80:29:6f:ce:a4:61:71:ee:e4:3d:ec:
d9:b4:42:6d:25:a0:5d:78:07:a8:78:4d:2d:ec:ee:7b:25:85:
34:59:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:09 2025 by rpki-client