Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/muwUnPR5_rlmhkC4lCBLZ7XqqDc.roa
File: muwUnPR5_rlmhkC4lCBLZ7XqqDc.roa (raw, json)
Hash identifier: vCQkCpp+ycfir19HwuwNDvc7J/aPbvCDXDpxsb1dRGQ=
Subject key identifier: 9A:EC:14:9C:F4:79:FE:B9:66:86:40:B8:94:20:4B:67:B5:EA:A8:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 520E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/muwUnPR5_rlmhkC4lCBLZ7XqqDc.roa
Signing time: Tue 07 May 2024 23:54:01 +0000
ROA not before: Tue 07 May 2024 23:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21006 (0x520e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 23:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9AEC149CF479FEB9668640B894204B67B5EAA837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:28:f0:4c:e5:94:40:a6:30:75:a5:95:6a:
23:7f:fc:91:ad:d4:cd:f0:43:5a:dc:91:cb:a9:5b:
36:15:0a:76:71:7e:0c:ec:07:0f:96:75:fd:04:ad:
55:9b:8f:52:41:cc:be:26:3a:f5:20:85:c3:43:9d:
8a:30:81:45:9d:f6:95:5d:a3:5b:93:bb:39:37:40:
90:a1:a5:ca:81:fa:ac:da:df:2e:03:02:ea:72:83:
a5:04:01:8f:e3:59:0f:e2:cb:fc:3a:a7:66:d9:82:
c6:16:6d:da:d3:9e:3e:ce:ee:d3:14:b6:2e:f8:d2:
dd:8b:5f:50:cf:87:66:67:5b:00:23:a4:c5:63:82:
28:6e:0c:3d:8a:00:f1:52:f3:40:ad:3c:be:c6:ca:
36:4f:3e:ee:d4:01:76:a9:47:60:a0:d3:eb:f8:59:
2e:82:38:b7:b5:2d:a5:6a:40:23:89:84:32:cf:18:
f4:d6:72:ba:8d:f1:a7:55:7d:4e:cc:d0:d3:59:76:
9c:00:e0:9e:c5:ab:87:21:ba:af:11:16:d8:56:a3:
58:e3:2b:cb:ee:30:dd:32:05:45:0d:51:5b:82:72:
ad:3f:8d:9f:a7:2d:a4:7a:24:84:7b:03:72:c3:5a:
65:01:7c:6d:ea:23:65:5a:79:b6:b9:1c:8d:e7:b4:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:14:9C:F4:79:FE:B9:66:86:40:B8:94:20:4B:67:B5:EA:A8:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/muwUnPR5_rlmhkC4lCBLZ7XqqDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:de:c6:6a:7e:e6:0f:5a:65:a0:a3:08:31:e6:1a:f4:66:2c:
24:77:73:76:62:29:91:0d:8e:3f:f8:f2:9c:9e:61:c7:29:61:
4b:e2:70:b2:cf:ae:dd:83:d3:71:42:c4:8e:b3:e6:be:2f:df:
d5:e4:2e:8e:8b:52:f3:dd:da:b5:d2:8c:ea:34:a8:38:4c:49:
7e:f5:ea:18:6c:4c:0d:f6:f3:6a:fd:ef:03:2e:60:fd:bd:b4:
b0:4f:1b:81:a4:11:7f:31:5a:78:93:be:09:03:84:d8:2a:4d:
ef:ba:67:2e:f0:cd:29:c1:c1:e2:bf:61:af:c5:fb:52:17:c9:
ee:2d:e9:59:a6:65:f2:ca:cc:2c:36:93:58:8f:dd:ed:4a:a8:
86:95:e8:de:c5:d1:bc:53:42:e9:85:b3:db:7b:77:e8:ff:ad:
a6:a6:8b:7b:3e:3a:de:66:f7:ae:ca:a9:6f:69:45:a6:29:31:
57:b8:30:48:84:94:3c:e3:47:09:1b:d8:4f:b0:90:da:e6:46:
fe:a1:1c:c9:b7:e1:82:b7:ae:ce:62:02:0e:ba:17:9a:32:2b:
b2:14:9e:b4:8a:58:89:4c:a7:06:62:ec:4d:d5:3f:e8:c2:4a:
73:02:eb:44:57:da:79:bc:8a:28:16:05:d0:8e:c9:48:67:14:
8f:6a:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:02 2025 by rpki-client