Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o6T9sT110aBSo5mEEYfJjxGVqh0.roa
File: o6T9sT110aBSo5mEEYfJjxGVqh0.roa (raw, json)
Hash identifier: 2iw9Ay9jNykaRyj1ITEKhxKWZ372ZKxokFWHp/SHTu0=
Subject key identifier: A3:A4:FD:B1:3D:75:D1:A0:52:A3:99:84:11:87:C9:8F:11:95:AA:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5192
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o6T9sT110aBSo5mEEYfJjxGVqh0.roa
Signing time: Tue 07 May 2024 08:24:00 +0000
ROA not before: Tue 07 May 2024 08:24:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20882 (0x5192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 08:24:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3A4FDB13D75D1A052A399841187C98F1195AA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:c0:c0:a3:f1:0f:77:fb:f2:3a:65:36:45:
18:25:70:f1:8b:c8:f8:85:c1:f2:9c:6d:fd:35:fa:
13:bd:43:9a:da:2c:ec:35:40:39:7a:ba:ea:c3:7b:
49:86:a5:67:f4:7d:ae:be:cb:77:c3:c8:65:8c:2c:
e4:06:ff:c3:08:61:b6:ef:38:78:5d:f9:20:6e:32:
87:cc:ec:a9:2f:05:cb:9e:fe:94:20:00:49:2d:d0:
37:5b:ff:d4:32:30:38:f2:ed:7a:7e:c5:f3:ac:17:
6c:22:a5:df:d9:3f:b7:2b:a4:cb:d1:73:d9:2f:78:
0c:0e:72:03:6e:39:4d:4e:50:7e:69:4f:61:0f:04:
4b:ed:6a:2e:8f:1f:c5:65:a5:7a:74:12:c2:09:9a:
44:61:45:df:9c:b5:5f:aa:60:f7:e7:9e:b7:48:f8:
47:39:5f:4c:7f:f1:71:cf:eb:a6:59:f7:d5:27:42:
f1:f6:7e:e4:b3:7f:bc:56:72:73:b9:8c:c7:20:32:
dc:e7:47:84:68:d4:c7:2d:33:15:a7:a6:b3:92:e2:
1c:76:a7:22:fd:fc:66:dc:37:26:34:f0:03:de:79:
4f:d1:40:b4:a6:40:4f:c1:ff:2b:64:5f:c0:2c:f2:
26:89:c9:9b:e1:1c:1a:00:de:ea:7b:94:ae:46:2a:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A4:FD:B1:3D:75:D1:A0:52:A3:99:84:11:87:C9:8F:11:95:AA:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o6T9sT110aBSo5mEEYfJjxGVqh0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:90:c3:d0:a5:4d:1b:1e:00:b9:61:fe:90:3e:67:7a:6d:2c:
bc:28:a9:32:75:b8:64:dc:dd:75:70:9a:d0:c3:78:79:72:5d:
b8:06:f8:fe:25:5f:49:6b:82:4d:6a:23:4e:90:89:3d:4b:13:
9c:10:62:60:61:8f:97:c1:e4:cd:a1:8e:bb:8c:2b:20:00:4a:
4d:81:f5:b1:ef:73:12:ff:c6:1b:f4:c2:a1:3c:9c:b0:1e:01:
9c:4c:68:dd:67:9a:85:a4:84:34:c9:b5:ba:dc:1d:36:9b:23:
32:c6:42:f9:6d:89:80:9e:38:26:4e:f2:11:b4:2c:01:bd:5b:
9b:58:10:86:64:7a:78:3f:96:53:42:08:1d:77:a8:2c:ee:cb:
ac:93:5c:be:32:25:2c:b2:fe:c4:6a:4e:8d:83:0b:70:f7:44:
5b:5f:cc:24:e5:31:51:35:45:13:df:6b:79:d6:6b:53:f2:b0:
5d:c8:c5:c2:d3:6d:22:2f:88:ac:d4:a1:91:0c:33:4c:f5:25:
86:62:0d:2d:30:d2:22:b1:57:fe:09:27:7e:ad:02:28:bf:eb:
69:ca:08:a6:82:57:82:56:9f:0c:8d:57:c0:9e:96:c2:79:88:
7c:eb:47:41:35:a8:bd:80:d7:b3:7e:33:f3:24:69:8e:d1:a2:
eb:de:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:22 2025 by rpki-client