Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pWVJk9VM0ROULKie9b_o-RZagyw.roa
File: pWVJk9VM0ROULKie9b_o-RZagyw.roa (raw, json)
Hash identifier: WlH5vEFYoajAC7n4fgBEX9e+bUqDXRnLNkAGaQaiu/Y=
Subject key identifier: A5:65:49:93:D5:4C:D1:13:94:2C:A8:9E:F5:BF:E8:F9:16:5A:83:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 434A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pWVJk9VM0ROULKie9b_o-RZagyw.roa
Signing time: Thu 18 Apr 2024 07:22:59 +0000
ROA not before: Thu 18 Apr 2024 07:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17226 (0x434a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 07:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A5654993D54CD113942CA89EF5BFE8F9165A832C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:c9:a8:2d:64:58:8a:25:ef:c3:52:36:b7:
dc:6e:87:31:05:2d:1f:36:5b:e2:67:a6:01:f4:70:
1e:67:bc:b2:d2:d3:b4:b3:c9:f0:b5:0a:7a:1f:8e:
8e:36:e9:6f:5b:48:c6:0d:cc:c6:98:b0:f3:9c:f4:
ff:71:99:13:94:bc:05:b0:c3:f3:77:4c:fe:40:c2:
1d:20:46:74:75:55:2b:1a:6f:ed:f6:a6:22:15:4b:
ce:8c:5b:62:b9:ac:cc:f5:1f:4e:0f:61:fb:43:72:
60:c6:b4:fc:f7:b2:e2:24:1f:fe:8f:ed:ff:d4:69:
a5:77:70:23:05:9e:ca:58:b5:60:58:23:cd:4d:52:
fe:9d:25:f6:8b:88:a8:d8:14:6a:bc:96:34:d7:6a:
9a:7e:77:eb:3c:6f:e8:c8:14:cb:d4:34:d3:07:4c:
d9:35:36:07:c0:29:d0:2d:f0:08:36:25:74:0e:e6:
80:64:fa:56:6b:3f:8c:d6:22:d1:79:3d:6a:bc:67:
2c:a0:e0:9f:61:4f:b0:22:01:96:9d:61:0b:2c:05:
a6:59:82:eb:07:d8:9e:1e:d3:b0:4c:b0:66:e6:49:
4a:e0:00:57:6a:da:5b:94:4d:73:f4:06:cd:a9:c4:
43:92:a8:c4:36:cc:e0:33:e0:5a:7c:14:11:29:47:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:49:93:D5:4C:D1:13:94:2C:A8:9E:F5:BF:E8:F9:16:5A:83:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pWVJk9VM0ROULKie9b_o-RZagyw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:df:9d:94:de:8a:23:86:0c:96:fb:f8:e4:9f:7f:21:cb:8c:
32:69:c0:d6:c4:75:50:a2:67:00:b9:a2:fc:41:01:cc:84:05:
a3:2c:da:b4:b7:a3:f5:1b:a6:7b:6b:13:ba:63:fb:89:11:13:
8c:32:f9:42:46:06:bd:b3:7e:9f:62:07:57:8a:61:3d:35:2c:
9c:e7:29:9c:45:68:4e:51:e9:13:21:0b:8f:c6:bc:59:85:e6:
c0:3e:b5:9b:86:c8:40:42:a1:5d:54:b2:f3:83:54:62:31:22:
88:b7:6f:70:9d:5e:5c:1d:9e:d6:38:58:80:46:c7:6c:25:7f:
e8:82:26:c3:a0:aa:5e:cd:9d:18:16:b0:18:46:a6:c8:f6:09:
26:22:fe:5a:b4:ff:69:d8:bd:97:27:b1:c7:96:b7:37:6d:5f:
ef:a5:cc:18:b7:62:4e:ab:99:ea:f6:8f:b3:a5:a1:42:ac:28:
a9:44:8a:dd:fa:14:b2:a0:62:8d:c3:26:fd:88:3c:48:4a:50:
5f:2e:67:99:bb:19:99:92:b6:e1:a5:3c:a6:a5:b7:2c:f8:15:
61:05:3e:85:6b:a4:ec:3a:61:df:6b:d5:31:d9:38:6d:ea:0f:
32:28:94:47:96:c0:06:6c:42:b3:1d:fc:4d:f8:05:d1:25:aa:
a5:b8:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:37 2025 by rpki-client