Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rgaAOzF3JeZRVVUui8zV2o0sI_A.roa
File: rgaAOzF3JeZRVVUui8zV2o0sI_A.roa (raw, json)
Hash identifier: 9GlYSVcrmCSy/edji5PIZM5cMHMMaDW6YUX2VwEM7VY=
Subject key identifier: AE:06:80:3B:31:77:25:E6:51:55:55:2E:8B:CC:D5:DA:8D:2C:23:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rgaAOzF3JeZRVVUui8zV2o0sI_A.roa
Signing time: Wed 03 Apr 2024 01:52:20 +0000
ROA not before: Wed 03 Apr 2024 01:52:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14302 (0x37de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 01:52:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AE06803B317725E65155552E8BCCD5DA8D2C23F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:6e:a8:35:13:28:fe:25:70:b2:ad:8f:5b:
19:68:0e:74:f5:f9:9e:18:f0:7b:e8:d8:5b:24:21:
0a:79:7e:16:ea:59:4c:13:a1:e5:ea:6e:6c:c8:f6:
cd:54:36:8e:be:3b:1f:04:3a:17:93:08:2f:0a:e7:
cb:1c:cb:54:d1:22:ba:d7:66:77:3b:6e:66:3e:39:
61:72:6e:89:4f:3d:bf:27:55:26:85:f3:e5:ad:b1:
9d:8c:c2:10:12:01:40:d1:7f:f2:2e:41:48:18:f9:
da:48:67:17:9b:b1:ab:37:ec:fa:0e:e1:30:4d:75:
d4:77:c7:b0:89:79:79:9a:7f:92:f4:6d:d2:1a:7f:
2f:20:c3:91:d9:82:4f:8b:56:f6:b3:65:6e:52:e1:
ba:87:1f:bc:4d:71:34:df:7b:7c:9a:22:71:d8:db:
95:73:6e:19:c0:d3:43:e7:41:70:04:1f:d7:65:a3:
7a:56:e0:e1:a0:7b:8d:52:c0:b9:68:6d:4a:29:c9:
d6:3b:01:3e:1c:be:d0:35:de:27:a1:65:91:bb:5e:
11:b3:21:2c:a0:10:d7:7a:93:30:28:21:cd:58:2f:
96:4f:4d:77:6c:64:08:54:f7:a7:2d:9d:a3:a1:95:
4b:08:19:31:18:08:60:ce:c7:49:52:8b:5a:ee:19:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:80:3B:31:77:25:E6:51:55:55:2E:8B:CC:D5:DA:8D:2C:23:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rgaAOzF3JeZRVVUui8zV2o0sI_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:4d:2b:b7:04:fc:1c:9e:35:de:43:0c:f6:1a:52:1f:e6:eb:
4f:f8:f0:c2:0b:bc:06:08:3f:c3:89:57:b2:b7:c1:8e:32:22:
7c:5c:eb:0f:19:33:90:25:98:ae:64:34:fb:c8:84:e8:cf:54:
4e:35:e2:29:ae:d6:eb:53:b7:57:de:ca:fb:9d:d1:b5:e6:77:
01:fb:6e:4e:56:b3:4c:03:90:14:c8:0f:44:70:bf:b6:9a:5d:
aa:39:24:73:94:3d:95:50:4a:5e:88:89:67:03:b1:76:c2:23:
7a:84:97:40:73:18:b2:d0:d7:d6:ea:6e:a3:05:56:c6:63:67:
12:fa:b8:ee:f8:32:21:81:8c:b1:d2:0d:a8:ef:f7:cd:b7:59:
c5:b2:13:32:37:60:86:29:d3:7a:44:24:dd:83:83:a3:cb:98:
6a:3d:84:8c:ef:47:0f:2b:1a:94:6e:4f:57:cd:4c:e7:b4:4c:
11:02:17:0e:30:7c:79:5e:60:ab:93:f8:81:69:5f:92:54:a6:
32:02:94:56:7c:71:2f:5e:c9:32:8a:02:03:6f:33:13:19:89:
73:39:f9:e2:92:ed:ba:76:2b:e5:40:37:12:e1:65:eb:c4:f7:
d4:5e:60:de:20:f3:ba:b1:f3:97:30:b6:56:5f:f5:0b:6c:ab:
b8:9f:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:33 2025 by rpki-client