Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qJPbQbVYTf9RKHVSpNxDWvaNuSM.roa
File: qJPbQbVYTf9RKHVSpNxDWvaNuSM.roa (raw, json)
Hash identifier: RmFq80zQrg+TM1c4ACrJ0XDUlRhMLN+Xg85n5XPtV40=
Subject key identifier: A8:93:DB:41:B5:58:4D:FF:51:28:75:52:A4:DC:43:5A:F6:8D:B9:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FAA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qJPbQbVYTf9RKHVSpNxDWvaNuSM.roa
Signing time: Sat 04 May 2024 19:23:49 +0000
ROA not before: Sat 04 May 2024 19:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20394 (0x4faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 19:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A893DB41B5584DFF51287552A4DC435AF68DB923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:21:14:b0:3f:95:b2:c1:c7:d8:5a:58:b8:
25:81:e0:f1:d2:e5:e6:77:74:fe:56:32:32:6d:15:
7b:51:21:9d:24:0b:8a:e1:10:3c:63:51:73:7c:97:
96:ea:29:c7:37:f2:13:04:b4:bc:f4:d2:18:8b:df:
a4:10:c0:3e:6c:e2:e1:9b:0a:ef:6f:0f:c4:b7:4d:
ee:32:f6:b6:58:50:fe:f6:32:46:d6:20:0a:70:23:
e9:d2:b9:fd:f6:77:a0:68:b9:22:ff:c1:49:dd:a0:
4b:bf:66:e1:44:cf:3d:9a:b1:20:df:03:a5:cc:f5:
45:08:7c:98:c6:ca:c2:b2:5f:d4:21:46:a2:1a:7a:
7e:94:75:c2:15:3b:99:1d:5c:84:ce:be:cf:d5:b3:
f8:95:b3:03:6a:71:fc:d9:f3:60:c2:1d:fb:cc:3c:
4a:c1:46:ed:36:a2:e6:40:44:1d:fe:e2:45:aa:10:
30:ed:82:9b:0d:a0:bc:a3:76:53:b2:e3:99:52:4a:
44:dc:ce:cd:98:86:48:0f:67:71:e6:44:69:20:31:
20:23:dc:26:19:7d:c8:d8:b6:12:a3:c0:71:55:c5:
fc:ce:aa:f0:08:63:b7:ea:ee:af:b0:03:df:50:5c:
19:ce:e9:aa:48:bb:f8:45:b2:d7:e9:84:7e:41:6d:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:DB:41:B5:58:4D:FF:51:28:75:52:A4:DC:43:5A:F6:8D:B9:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qJPbQbVYTf9RKHVSpNxDWvaNuSM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:e4:e3:35:30:e2:f2:94:3a:a0:33:5e:d9:ac:61:ec:51:db:
59:ea:ec:84:bb:c8:8b:07:be:7c:e0:14:db:24:1e:30:b9:3c:
9b:f4:6c:2c:e3:0a:8e:fa:84:32:03:46:ed:ac:9e:20:4e:11:
b7:99:ed:d8:e0:18:7b:10:9f:b3:44:fc:ff:56:33:9a:f6:17:
11:dd:b8:6a:68:61:f4:02:75:6b:bc:68:9b:8a:39:eb:50:44:
42:87:da:49:98:4c:91:ed:08:4b:08:58:b8:57:e1:4b:e3:bc:
85:ff:13:53:f4:24:c7:7a:48:29:f8:a1:27:cd:6f:cb:b0:b4:
64:0e:e9:2e:68:c2:97:e0:38:c9:87:72:98:3c:cc:f2:5c:be:
ed:05:8b:42:26:08:f8:df:a5:23:49:7d:2e:1b:95:25:57:c2:
07:fa:6d:74:ac:7c:8a:64:d1:0f:c6:94:37:70:b4:84:33:1c:
2f:a8:80:31:ac:b5:e6:0c:22:08:49:78:49:d9:24:75:89:04:
b7:2d:e6:67:5c:35:80:29:94:3c:45:ae:d5:63:1b:ea:42:1a:
c0:95:e4:9a:38:2d:5a:be:f9:b0:bf:8f:a2:8c:40:fb:a1:e6:
3a:7d:33:34:95:0a:0f:ff:95:44:9f:6a:c3:2e:46:d2:cd:a9:
44:42:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:44 2025 by rpki-client