Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qDUYTZkK39woqSr4D6QU25FbWpI.roa
File: qDUYTZkK39woqSr4D6QU25FbWpI.roa (raw, json)
Hash identifier: bzM5CnFGsC4pJHFdVBcxA9assKc1z+sgrsd2e24a1oA=
Subject key identifier: A8:35:18:4D:99:0A:DF:DC:28:A9:2A:F8:0F:A4:14:DB:91:5B:5A:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CE2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qDUYTZkK39woqSr4D6QU25FbWpI.roa
Signing time: Tue 09 Apr 2024 18:22:38 +0000
ROA not before: Tue 09 Apr 2024 18:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15586 (0x3ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 18:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A835184D990ADFDC28A92AF80FA414DB915B5A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:5c:9c:0d:bd:6c:42:6a:52:8b:aa:47:d9:
79:b7:c9:06:a4:f5:fc:22:05:04:ad:04:75:e7:7a:
ee:0a:ee:d1:66:84:a3:f1:9c:16:1d:54:07:92:65:
3c:0c:c7:ee:48:33:93:e4:18:76:b9:6c:ce:5c:fe:
81:e3:59:d4:7d:aa:82:5f:95:ea:03:d8:48:4f:46:
df:17:99:5c:e9:d6:54:cf:06:ac:23:b7:4a:2d:86:
12:14:d8:5a:55:31:7a:28:5f:53:96:f9:e7:07:ec:
d7:ac:62:ed:54:78:3c:85:b0:f6:f6:13:9b:5f:46:
40:0e:57:91:36:f9:db:dc:41:42:69:a6:68:73:58:
c7:b8:37:c4:c5:ef:b3:a5:59:b1:b3:9a:ac:0a:fc:
d6:42:b3:6b:3f:f8:06:4a:f6:0e:44:66:02:74:1b:
7d:13:63:09:da:59:c6:77:02:08:c5:c0:78:75:69:
07:c8:59:d7:65:15:7b:a0:01:da:ce:9a:fc:10:0d:
62:b8:23:0c:d3:87:27:ec:48:c8:29:7c:23:98:ba:
84:cc:bd:a3:4b:ad:c3:b6:d2:f9:6b:f4:53:19:31:
34:09:bc:19:21:92:10:7f:26:e9:9c:38:06:a5:7d:
6b:31:66:27:55:29:17:fe:1f:fa:97:80:34:6a:51:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:35:18:4D:99:0A:DF:DC:28:A9:2A:F8:0F:A4:14:DB:91:5B:5A:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qDUYTZkK39woqSr4D6QU25FbWpI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:51:ae:5b:72:d7:8f:9f:dc:8f:50:05:26:1b:28:15:03:c1:
c8:7e:7a:48:fd:65:bf:7e:05:99:ff:e6:ba:a4:23:c3:3e:b2:
ad:5f:ba:ba:bd:23:ac:f1:65:90:cb:40:70:de:51:f2:dc:a1:
1e:19:9d:54:39:83:99:17:43:0d:d7:92:85:01:1e:0e:b4:2b:
bc:f7:c9:e8:60:84:65:ea:c2:be:71:41:8b:3c:bc:d4:65:02:
2f:0e:e4:fe:2a:b2:b0:7e:1f:92:ba:25:b1:a6:06:42:5b:29:
56:25:7b:3e:df:9f:af:e6:05:52:1e:64:41:56:42:7f:42:83:
7b:1e:0c:c9:28:1f:d4:ac:18:fb:e9:b9:fb:4f:36:47:c8:51:
e7:aa:41:e4:f3:24:3a:16:9e:77:ac:f0:46:fa:6a:cb:5f:64:
1c:c6:5f:cd:08:ca:9f:c1:92:c3:08:db:e9:99:c8:8e:4e:ef:
dd:56:3c:dc:2e:88:16:e2:90:89:fb:4f:43:7f:d9:9b:a4:d1:
88:e8:e9:11:5f:5e:04:1d:9c:40:f4:d0:e4:fa:56:e3:25:59:
ff:74:45:74:3c:ef:72:61:44:c7:33:3d:21:0b:00:66:8b:9e:
e0:b8:f6:c4:39:54:24:b7:8c:5b:ac:70:4c:a9:d1:a5:ac:6b:
0f:e7:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:45 2025 by rpki-client