Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nCOi8uaJB-kbLaaR7fqmtc1v0yk.roa
File: nCOi8uaJB-kbLaaR7fqmtc1v0yk.roa (raw, json)
Hash identifier: 6mhb89tfwDmYC1SAiQlHYAFFmOuZ6wiWvzWXqqtDeLY=
Subject key identifier: 9C:23:A2:F2:E6:89:07:E9:1B:2D:A6:91:ED:FA:A6:B5:CD:6F:D3:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C86
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nCOi8uaJB-kbLaaR7fqmtc1v0yk.roa
Signing time: Tue 09 Apr 2024 06:52:36 +0000
ROA not before: Tue 09 Apr 2024 06:52:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15494 (0x3c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 06:52:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C23A2F2E68907E91B2DA691EDFAA6B5CD6FD329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:91:ab:c8:49:b1:74:ca:15:32:29:a1:2e:
68:7b:38:88:fd:f6:90:01:f3:86:6f:e9:06:b9:18:
33:25:34:1a:e9:08:23:53:31:ec:e4:61:35:08:59:
30:3a:ae:93:d3:28:0f:79:a4:ce:14:d9:4d:b4:b6:
dc:3c:f9:1a:f6:3f:3b:28:b8:a0:89:67:72:39:e1:
f0:cf:86:98:08:bd:31:2a:c5:40:4d:96:a0:3c:7e:
aa:b5:cf:9b:b8:ba:cd:a1:8f:72:99:22:9c:3e:01:
cf:45:42:11:fc:29:a9:66:e3:ec:76:47:61:8b:d7:
2e:bd:35:fc:de:42:aa:90:98:23:87:69:92:d0:22:
7e:7b:5a:d7:82:3b:a1:cf:4e:6b:bc:88:cc:67:de:
b2:7d:e4:74:12:51:8c:a0:67:56:f8:d5:c7:a3:45:
c9:1e:a9:88:3d:de:7c:f4:d3:1e:ad:a2:7e:42:d2:
54:08:d4:38:9a:9e:49:31:16:94:6e:e4:b9:3e:09:
54:aa:b2:e3:3f:26:df:32:0d:78:4e:ee:1f:08:8a:
c8:02:35:25:ce:62:9d:1f:37:97:b0:fd:d7:60:30:
b2:0f:91:3d:12:a9:1d:87:ac:87:76:5f:fb:cc:31:
e1:23:fb:b0:1f:f4:97:4f:b9:0d:a8:9a:f1:48:68:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:A2:F2:E6:89:07:E9:1B:2D:A6:91:ED:FA:A6:B5:CD:6F:D3:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nCOi8uaJB-kbLaaR7fqmtc1v0yk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:91:90:0f:b5:7c:c8:b5:4c:b4:11:49:f5:c4:0b:67:75:bf:
9f:3e:66:c0:1c:1d:53:a2:2e:72:41:88:57:b3:d6:dc:e2:d0:
7b:9f:d4:5a:b2:20:e2:20:e1:c4:88:ed:4f:5f:da:41:92:18:
d5:89:c4:35:e3:bb:a6:64:53:89:94:32:24:56:36:40:47:d8:
61:26:9d:3a:d4:cf:3f:b0:3e:bb:a0:fa:0a:00:e1:ba:9a:04:
c4:e8:81:ab:c4:35:9f:e3:b6:a9:8e:c1:3e:ef:cb:97:aa:d6:
ca:3c:6a:67:ae:54:a0:ab:d1:2f:8c:4b:6b:a0:9f:7a:9a:3a:
4f:b2:83:24:c0:f3:b8:e5:82:f7:70:1e:3c:b2:c3:fa:5c:f5:
ae:82:3d:3e:94:9f:f9:f2:48:ed:a3:1b:76:36:68:ec:95:76:
d1:7f:2d:ea:a5:41:0d:e4:67:fc:8c:d8:5e:53:70:9d:3f:0b:
19:37:45:49:0f:6a:a1:cb:13:b7:d9:7e:75:9f:ae:ef:05:c9:
8c:6f:4f:0d:48:bb:31:d4:c3:82:4b:54:54:53:71:b4:c3:f4:
fa:b9:4a:ef:e6:1a:23:49:f5:f0:8b:05:f5:f0:fa:ca:eb:35:
67:60:07:fb:c4:9b:b8:da:98:c8:50:14:98:a0:a5:8e:55:48:
44:d6:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:29 2025 by rpki-client