Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kx7Z4BSas-2LObBMNPxU3bLAreY.roa
File: kx7Z4BSas-2LObBMNPxU3bLAreY.roa (raw, json)
Hash identifier: bFDxpSzru5uiVM4yWPWI7WAJPP1SAxDAjEtL02OyxQk=
Subject key identifier: 93:1E:D9:E0:14:9A:B3:ED:8B:39:B0:4C:34:FC:54:DD:B2:C0:AD:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A8A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kx7Z4BSas-2LObBMNPxU3bLAreY.roa
Signing time: Sat 27 Apr 2024 23:23:27 +0000
ROA not before: Sat 27 Apr 2024 23:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19082 (0x4a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 23:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=931ED9E0149AB3ED8B39B04C34FC54DDB2C0ADE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:2a:74:83:37:f2:55:7f:26:5f:17:c0:93:
3c:fd:89:6b:f3:17:a4:60:8b:cb:9a:7a:6b:2e:58:
30:95:06:f7:e2:e1:34:fb:1f:3e:ca:98:e5:56:49:
58:a1:cb:59:fd:ad:9b:ee:31:72:04:a3:cb:fb:a7:
71:14:37:f8:cb:f6:d9:ac:9c:03:dc:fd:54:6f:79:
29:83:6c:f0:9a:95:48:0f:2c:65:46:fa:b8:b3:cf:
3f:e2:4a:e9:01:11:c7:91:4d:5e:39:74:3f:a2:29:
9a:e7:45:3d:32:f7:11:91:66:58:d7:67:39:f0:4a:
13:ae:c8:45:bd:44:b2:76:f9:67:ce:56:4f:c9:e2:
1a:e0:20:4e:6a:20:7d:da:65:a4:7e:87:c7:fa:ef:
3d:83:80:e9:3a:8a:0a:e3:78:a3:3f:b4:a4:54:17:
c5:98:c6:7c:cb:51:b4:9d:dd:a5:0e:60:11:9c:ab:
e6:11:d2:19:c9:fa:08:2f:13:c6:af:af:d6:f3:c4:
22:5b:14:06:5d:35:93:13:2c:ce:95:3f:29:0c:dd:
4e:3b:c8:a9:41:12:fc:49:4a:37:eb:25:8c:c1:46:
d6:26:8d:e2:32:0b:2e:96:19:c9:87:f8:b6:ab:e5:
74:73:88:ea:5e:00:a4:d5:ab:fd:db:3a:a6:f2:30:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:D9:E0:14:9A:B3:ED:8B:39:B0:4C:34:FC:54:DD:B2:C0:AD:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kx7Z4BSas-2LObBMNPxU3bLAreY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:a9:96:76:a9:6a:f3:3c:23:9e:e3:3e:9d:93:df:58:39:2c:
de:24:26:06:0b:9f:0e:95:69:ad:a3:cb:64:0a:73:be:29:ed:
bc:86:6d:cc:6a:38:5c:48:0d:de:29:10:82:43:4c:5b:7c:9d:
34:b5:4c:08:1b:0b:dd:47:39:62:96:79:19:32:34:5c:5d:f8:
36:01:bd:95:3d:af:16:46:65:71:37:57:86:c8:a2:ce:5a:a0:
cd:fe:79:a4:11:66:71:43:17:7f:b6:1d:23:94:00:60:78:73:
e3:b4:4e:55:3e:be:c9:06:e0:ce:92:10:f8:06:ed:95:62:36:
73:f7:0f:76:cf:4f:7b:fc:0f:2b:13:80:39:66:d3:c3:2d:39:
88:c5:79:18:84:51:13:48:50:1e:a9:c4:95:d0:1a:f8:cd:19:
5e:06:c1:10:58:68:11:a3:b0:33:44:31:32:0d:bf:d7:bd:77:
63:37:e7:31:1d:5f:d1:24:d2:4b:2c:cd:a4:f0:74:fb:75:6e:
11:b9:f7:f1:4d:1d:3c:9f:da:f4:a4:e2:36:52:88:c4:07:c2:
fe:50:b0:be:b5:a6:eb:c0:dd:b3:43:22:d1:e8:11:36:f7:cf:
7b:a3:f0:59:fc:dd:0a:18:b0:24:f8:a5:3b:9a:b8:a4:66:a5:
7b:8f:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:23 2025 by rpki-client