Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jiyDkkej4x5VSHvKz9mD0HyOzIU.roa
File: jiyDkkej4x5VSHvKz9mD0HyOzIU.roa (raw, json)
Hash identifier: FjEYbnAtaGpidAXFbPkl+665Kah9pZi42TOGXI2ayeg=
Subject key identifier: 8E:2C:83:92:47:A3:E3:1E:55:48:7B:CA:CF:D9:83:D0:7C:8E:CC:85
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A56
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jiyDkkej4x5VSHvKz9mD0HyOzIU.roa
Signing time: Sat 27 Apr 2024 16:53:22 +0000
ROA not before: Sat 27 Apr 2024 16:53:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19030 (0x4a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 16:53:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E2C839247A3E31E55487BCACFD983D07C8ECC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:b8:0e:27:c2:4b:d3:e8:da:54:08:27:e8:
2a:9a:db:e6:48:47:87:aa:bd:7b:5a:a4:04:af:8c:
09:aa:57:ac:6f:18:e4:82:cc:9f:a5:da:a3:18:77:
38:46:6b:fa:e1:6d:97:e4:b9:e0:6e:7c:b4:2c:6a:
c8:b8:9e:29:b8:cd:a3:12:6c:42:8e:18:4b:17:49:
a7:26:a5:1e:d1:60:15:e5:47:c4:92:9a:09:2b:34:
9d:b5:09:6c:8a:be:2d:c4:8f:ac:97:5e:6c:e0:c1:
92:7e:13:45:5b:47:06:9a:41:8e:83:0c:5b:64:80:
92:fb:20:e5:ac:0f:f3:cd:80:01:2b:78:d0:00:01:
c0:41:a0:1c:ee:64:09:c2:79:11:59:91:4b:63:83:
7a:f8:eb:11:b0:25:22:4c:aa:2c:40:3c:6b:b0:30:
0a:4a:2a:85:e5:fb:d7:2a:ba:1d:0d:c5:9b:68:e8:
d1:f6:89:4d:19:38:0d:50:ca:61:69:bb:5d:e4:98:
7a:88:0b:00:73:4a:b6:38:a8:fe:1d:ce:ea:98:fc:
45:ce:47:83:d8:4a:8d:94:9a:ad:03:f8:da:69:59:
ac:d4:8b:89:d9:10:ec:e9:f1:72:da:21:15:10:4c:
86:e8:ea:83:8b:9d:fe:ae:c3:84:8b:45:17:f1:18:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:83:92:47:A3:E3:1E:55:48:7B:CA:CF:D9:83:D0:7C:8E:CC:85
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jiyDkkej4x5VSHvKz9mD0HyOzIU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:04:b1:a4:2e:4d:75:30:92:97:1e:1b:d2:65:87:3e:e8:7f:
af:f2:06:18:56:61:47:3a:43:82:3b:b8:f9:e9:c9:05:5c:d6:
2b:97:40:0c:95:19:f5:4d:26:1c:4b:04:8d:11:7d:dc:1e:6b:
2a:13:bf:e5:e1:58:45:97:dd:a7:8d:52:c7:5b:9d:f4:f2:b4:
36:1a:b4:3e:ca:a2:07:06:0e:fa:2c:25:c6:f7:f2:c3:30:29:
ca:18:49:b1:0a:d5:11:a1:63:2a:b9:3e:cb:03:99:c3:d2:80:
65:b9:d7:05:ee:3b:af:f6:d3:60:a4:aa:a9:62:dc:2a:cb:66:
f2:41:22:1e:cb:51:84:1e:59:87:19:9b:5b:37:c5:19:43:14:
e8:f9:37:73:26:21:de:fe:21:56:da:b5:b3:db:d7:8b:94:f3:
2a:16:21:e8:70:c2:d0:c0:92:6e:61:a9:9a:19:d6:c0:47:d6:
16:c5:d3:29:f4:83:8a:c6:17:95:ce:56:7a:58:fc:c1:c4:de:
4d:19:de:45:9c:4c:0d:63:00:a0:60:fa:d1:26:24:e9:0b:df:
47:e4:2a:60:71:76:0c:2f:0e:13:91:8b:c8:9d:4f:a8:12:04:
42:6e:2b:23:db:24:87:55:a2:63:c8:8e:c7:1b:bd:ba:f1:1c:
d2:ea:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:33 2025 by rpki-client