Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jmXaDC_-iOlo-Y76d0yFXtVyoos.roa
File: jmXaDC_-iOlo-Y76d0yFXtVyoos.roa (raw, json)
Hash identifier: bA51/bDCpEV2okUGztd07lciVw00ZusKPMp1dVjNcN8=
Subject key identifier: 8E:65:DA:0C:2F:FE:88:E9:68:F9:8E:FA:77:4C:85:5E:D5:72:A2:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33E2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jmXaDC_-iOlo-Y76d0yFXtVyoos.roa
Signing time: Thu 28 Mar 2024 18:22:02 +0000
ROA not before: Thu 28 Mar 2024 18:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13282 (0x33e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 18:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E65DA0C2FFE88E968F98EFA774C855ED572A28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:a9:84:c0:e3:45:82:dc:57:34:05:24:9e:
87:8a:a6:74:0a:60:fd:aa:3c:1d:7b:24:5b:67:48:
0e:70:97:10:af:45:4c:ec:20:7f:5c:ce:34:b7:2d:
4c:26:4b:e3:f1:8a:cb:15:92:e4:de:15:f5:e7:76:
56:a3:92:ba:15:59:44:33:77:ab:a7:8a:a1:01:fa:
48:25:17:12:ef:29:7c:33:48:a9:62:65:8a:ca:58:
c6:0c:b4:5a:1c:99:dd:8d:31:96:95:a7:34:68:fb:
93:14:19:7a:76:7d:57:3c:20:25:4a:84:38:05:26:
96:65:1f:0a:c2:a6:7e:f5:94:3c:a1:55:f4:30:1c:
48:04:b5:c8:af:b0:68:1a:ed:2c:05:c1:87:9c:95:
2a:83:b0:b3:e7:70:ad:4e:f5:b2:a8:f3:77:59:e5:
2d:1c:f7:6e:04:e1:50:ee:49:0c:42:4c:94:dd:03:
6b:a3:ff:fb:1d:a7:05:9c:0e:6a:6f:79:9b:3e:bf:
ab:44:76:c6:ea:4e:c2:32:23:64:e1:53:eb:8e:fe:
07:62:c9:d2:e7:f8:6f:58:f2:f0:14:e6:26:94:b1:
ae:8b:8f:ae:19:32:70:1f:63:ea:cd:bd:7c:bc:1f:
bf:f6:4f:eb:2b:0b:b4:bc:d0:4e:d8:0c:59:72:81:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:65:DA:0C:2F:FE:88:E9:68:F9:8E:FA:77:4C:85:5E:D5:72:A2:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jmXaDC_-iOlo-Y76d0yFXtVyoos.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:ce:b0:b2:93:43:05:76:a7:06:43:4a:fd:af:16:46:24:ee:
78:80:dc:25:d4:17:92:f4:2e:99:d8:f3:0e:92:f5:97:a2:e9:
45:56:e3:a0:44:88:d4:93:9f:7a:1c:bc:07:bc:4c:30:74:35:
0c:0c:ec:63:7e:2a:d0:e9:f9:21:61:e0:cc:75:cc:09:d7:15:
4a:58:50:ac:b8:52:ad:91:c5:12:46:1f:5b:79:5a:5b:f3:1c:
ce:75:31:36:49:fe:5f:42:e7:03:42:d4:f7:10:de:05:a3:5d:
54:63:70:35:fc:16:ea:7a:3d:3e:d7:6f:30:fb:8f:97:0c:81:
4a:3b:cb:dd:c0:b2:56:df:31:e5:6d:e9:f7:86:ed:ef:5b:ec:
30:10:94:46:72:db:99:9e:5d:fe:04:b4:06:21:00:a7:68:a3:
f9:1a:01:7d:74:d5:68:10:f2:e8:b7:6b:3e:79:7d:4c:83:4a:
71:9f:59:09:77:a1:c1:ac:d2:39:9b:7b:7f:0c:ee:cc:29:5e:
74:7d:d0:b1:c9:39:13:ff:3f:3b:59:db:fa:22:4e:4f:ac:8a:
78:17:c0:6a:82:05:36:a3:ec:01:ec:cd:44:fa:36:d4:9e:73:
bc:df:2c:94:df:5b:e3:3f:ad:62:31:ba:02:47:99:c3:54:a4:
7f:68:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:57 2025 by rpki-client