Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/of7tm-e-KXKOzp0_6wzgIZHYlBg.roa
File: of7tm-e-KXKOzp0_6wzgIZHYlBg.roa (raw, json)
Hash identifier: sBHHkkDfw4N+iSx28P907lFpYQjrs3ciiHmB1h9Ju8g=
Subject key identifier: A1:FE:ED:9B:E7:BE:29:72:8E:CE:9D:3F:EB:0C:E0:21:91:D8:94:18
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55A2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/of7tm-e-KXKOzp0_6wzgIZHYlBg.roa
Signing time: Sun 12 May 2024 18:24:24 +0000
ROA not before: Sun 12 May 2024 18:24:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21922 (0x55a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 18:24:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A1FEED9BE7BE29728ECE9D3FEB0CE02191D89418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:9f:aa:a9:8e:a3:55:9d:8e:41:14:32:32:
ba:c5:78:b8:84:3c:4e:ef:32:d5:1d:64:77:66:63:
ee:4b:d4:e7:df:93:42:7a:3b:e3:5c:ac:53:e5:8e:
82:61:76:65:61:d3:ad:a9:7e:76:6c:17:c7:ad:19:
aa:48:fe:f8:2e:fb:00:ee:f8:56:5b:5c:1d:13:04:
82:a2:0d:83:ba:d8:a1:70:a5:46:a1:e4:ae:f6:64:
bc:e3:6c:53:11:22:82:93:0e:38:7c:62:db:16:e0:
f1:c6:a4:04:93:84:76:79:f1:34:e6:d5:62:5a:86:
1e:66:28:8c:a1:ed:27:33:13:a2:11:64:8b:bc:7c:
49:1d:ef:70:9a:8b:2b:86:68:21:be:5b:e0:67:c7:
ff:77:9d:1d:4f:5e:31:2d:dd:3d:f9:d7:13:f0:54:
18:be:cd:ab:7b:82:20:d4:c2:76:b9:61:31:57:02:
34:1b:1b:e7:c2:39:f3:60:d1:0a:0c:ba:9c:12:c8:
fd:8b:19:63:df:27:e7:aa:ae:19:fd:9d:98:71:4c:
04:05:c1:42:2f:56:16:97:0f:8a:1e:f4:7a:5b:44:
9c:8f:7a:b4:8d:96:f0:8e:e6:1b:f1:0c:15:5e:b9:
fa:04:53:ab:e4:fc:ce:82:75:25:52:f6:47:31:d9:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:ED:9B:E7:BE:29:72:8E:CE:9D:3F:EB:0C:E0:21:91:D8:94:18
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/of7tm-e-KXKOzp0_6wzgIZHYlBg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:f1:26:a5:13:20:88:63:86:d5:88:23:0c:4f:70:b2:76:76:
5f:2f:e1:d5:9d:8e:26:95:0a:05:2b:00:f2:f7:34:9a:90:b8:
f5:04:88:27:47:ba:fd:f5:d1:fb:53:c8:50:6d:82:4b:9a:87:
ab:76:ca:d9:47:67:ab:fb:aa:0a:dc:bf:cb:af:b3:a9:3c:d9:
68:ce:56:17:1f:9d:8c:c4:d4:35:4f:0e:99:22:08:46:34:08:
40:2e:08:13:57:28:b4:8c:9c:48:9d:99:b0:e7:ef:e3:ef:6d:
ad:b3:12:0d:4d:d8:90:8b:20:d6:6d:59:d7:96:ff:64:c2:0b:
f6:cc:48:5a:51:e6:76:65:c6:2f:5c:fe:2e:4a:a7:9d:af:99:
35:a7:30:18:b2:01:20:27:ba:cf:1b:5a:db:ab:b7:0f:4b:64:
b6:91:67:c1:0d:d8:42:05:7f:16:72:f5:4f:44:f8:00:33:c8:
c2:ad:46:39:49:67:10:e3:ea:22:70:ce:ac:ed:d0:93:50:fa:
a2:61:80:cf:05:30:00:47:6d:9b:8a:68:4e:5e:87:21:a5:1b:
f7:57:4b:a9:5f:78:51:bc:02:a8:54:d3:c9:18:3c:eb:d7:8e:
c3:0c:f0:30:0b:c7:20:ef:0f:f0:ac:da:a5:ad:8a:04:8b:98:
6b:fb:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:36 2025 by rpki-client