Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/k6vI87Rg7ew2n3FLiB8UVGYCG4Q.roa
File: k6vI87Rg7ew2n3FLiB8UVGYCG4Q.roa (raw, json)
Hash identifier: D5Hyc3ixTghMGCcjMkfnbKUe3l2oC8jnVKlG61bcIuc=
Subject key identifier: 93:AB:C8:F3:B4:60:ED:EC:36:9F:71:4B:88:1F:14:54:66:02:1B:84
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k6vI87Rg7ew2n3FLiB8UVGYCG4Q.roa
Signing time: Wed 01 May 2024 01:53:35 +0000
ROA not before: Wed 01 May 2024 01:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19678 (0x4cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 01:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=93ABC8F3B460EDEC369F714B881F145466021B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:b1:49:2b:08:11:c9:29:95:61:4f:bb:66:
86:96:fa:fb:de:34:9d:42:e7:1b:0e:0c:48:ac:24:
f5:b0:06:cc:b0:74:91:3a:e4:0e:ca:8c:7a:af:1f:
5f:ea:14:20:4b:9d:5e:4c:09:dc:4c:17:cb:f6:2a:
d9:60:ee:84:cb:84:91:f2:22:18:f0:f4:9d:d1:05:
9c:af:e8:16:dd:55:0d:a8:80:36:a7:e6:6e:4e:94:
ca:69:ea:dd:02:86:bb:fc:be:5d:53:eb:52:19:f9:
1d:9f:dc:fd:b8:f8:69:1c:9f:57:37:7b:10:1c:97:
30:f0:f7:ae:09:79:0b:ba:ca:60:12:74:41:73:02:
ef:71:0b:d2:cd:bc:1a:64:3f:38:4e:44:c0:92:12:
e8:f6:1c:4a:9f:da:72:aa:81:ba:c4:bd:a2:a4:a0:
4a:b3:9a:12:65:47:08:8f:09:74:f3:0e:ce:16:80:
47:2f:6b:9f:0a:9f:63:46:1d:74:65:39:35:a7:22:
ff:29:52:83:a4:54:df:d8:db:7a:18:0a:36:44:7a:
f9:74:38:bb:bb:58:76:43:83:21:2b:49:dc:3b:c6:
27:c6:cb:e7:31:c6:63:c1:21:4d:eb:f4:bc:f8:ad:
8f:71:39:bb:02:18:c6:b7:f1:10:80:cb:d0:d7:df:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:C8:F3:B4:60:ED:EC:36:9F:71:4B:88:1F:14:54:66:02:1B:84
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k6vI87Rg7ew2n3FLiB8UVGYCG4Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:d7:b9:c6:c0:5a:68:2a:fe:e1:98:8e:fe:0e:22:51:b8:48:
73:51:d0:e4:69:2e:9c:96:32:c0:79:8a:13:8b:a3:a7:73:1f:
97:56:a4:1f:f8:54:be:cc:1e:1f:de:f3:91:81:65:b7:4d:be:
72:11:db:86:b0:2f:c6:00:ee:14:ce:e7:92:7a:d1:1c:7f:a1:
24:e8:23:74:0b:35:09:e3:d9:90:a3:10:f9:24:97:36:63:2b:
fd:fa:0e:5a:a2:ea:4b:cb:b8:8c:bc:9a:36:c6:56:06:39:de:
ee:f9:56:4e:8b:34:c1:bf:76:18:d4:40:28:ab:f0:cc:99:54:
3a:c1:e6:9f:ee:95:c8:31:09:74:a4:ed:c8:b9:8a:ce:e9:db:
9a:2b:6f:ed:7e:14:2a:78:dc:36:f7:2c:e5:06:b5:a0:d8:7b:
82:8a:ca:97:db:ce:fd:89:1a:8b:3d:a0:c3:f4:8b:19:a9:51:
29:05:d5:90:5b:cb:97:ec:20:19:4e:bd:a3:ab:e5:cf:f5:4c:
25:cd:0f:82:a9:9c:32:8d:c3:70:3b:58:5a:1d:c4:e4:43:4f:
47:c2:db:72:0f:7f:aa:c0:97:8d:3f:c2:49:c8:48:b8:c9:10:
d2:cb:2b:5b:cd:50:30:68:91:f6:b4:eb:b2:fe:eb:fb:e7:d6:
ea:3b:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:37 2025 by rpki-client