Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u-KyjBhZ0ROc-ktng3kwNbQkxfY.roa
File: u-KyjBhZ0ROc-ktng3kwNbQkxfY.roa (raw, json)
Hash identifier: MVHaybOFbvLAsoG0uhuKTdhMBkUOpUCZ0If6k3MF//o=
Subject key identifier: BB:E2:B2:8C:18:59:D1:13:9C:FA:4B:67:83:79:30:35:B4:24:C5:F6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5236
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u-KyjBhZ0ROc-ktng3kwNbQkxfY.roa
Signing time: Wed 08 May 2024 04:54:07 +0000
ROA not before: Wed 08 May 2024 04:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21046 (0x5236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 04:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BBE2B28C1859D1139CFA4B6783793035B424C5F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:c7:86:04:e3:0b:c4:66:d0:47:29:f9:64:
bf:d3:82:31:94:19:a1:c9:9f:49:2e:92:14:8f:6a:
5a:4b:52:08:1a:14:74:81:35:86:a5:73:d1:66:f9:
8e:22:b2:7c:5e:a1:1d:30:77:70:51:39:19:e2:93:
db:ee:6e:16:31:ce:12:59:78:93:35:0b:ab:a2:99:
d8:74:d8:e4:19:5f:c6:0a:00:79:8d:89:40:04:7e:
5c:64:0f:c8:51:e8:f5:dd:43:3b:9e:6b:dc:17:11:
bb:be:37:50:91:47:d0:66:45:d6:dc:58:b5:ef:0f:
36:04:de:af:3c:b0:98:d0:f1:e2:9b:10:9b:2b:86:
e0:06:34:68:e8:ef:be:0b:bb:1e:de:c9:3e:d1:9c:
dc:f5:65:00:a2:8b:b4:ec:5c:e6:c4:90:8b:2a:41:
af:e5:b5:fa:2f:f9:25:60:b1:20:37:b8:eb:2d:23:
2c:2d:21:b1:59:44:15:d8:4d:bb:78:3f:3d:b5:28:
13:8e:26:4a:c9:d6:fd:d4:59:8e:13:9e:68:3c:e3:
3a:fa:a5:43:f5:da:16:67:20:cb:6d:6d:61:97:99:
93:70:c0:1f:3a:a9:27:e6:f1:f3:a5:bb:40:34:e3:
9e:c1:9c:00:be:be:97:48:78:45:dc:cd:cb:ed:f3:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:B2:8C:18:59:D1:13:9C:FA:4B:67:83:79:30:35:B4:24:C5:F6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u-KyjBhZ0ROc-ktng3kwNbQkxfY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:6d:27:47:c1:01:ea:6f:4d:b0:87:f6:87:7f:d1:b8:13:52:
e7:3e:a4:a0:71:eb:22:60:1c:6a:05:d8:dd:36:48:1c:29:18:
36:2a:aa:9f:9e:31:28:2a:4a:e2:db:a9:b3:1f:29:ab:60:47:
58:86:a4:96:2c:a1:04:0c:9b:14:f5:71:88:52:d8:2c:fb:27:
6d:6e:37:0f:35:c5:93:9d:d1:d0:1b:b2:af:88:de:3b:b3:b0:
bb:78:7c:c2:15:12:19:02:49:da:27:b5:88:56:03:e1:b3:43:
67:96:50:18:30:a1:12:43:d1:39:e4:af:11:9b:a0:2e:70:ce:
0d:0e:89:65:54:16:a5:4a:5c:54:f6:12:d6:3b:68:bf:77:ea:
d3:ab:e0:f6:14:37:a4:f4:eb:70:71:78:29:37:ca:db:2f:97:
70:73:f2:4f:31:be:cf:5b:d9:49:fa:f5:21:9d:ba:31:f3:d5:
4a:37:78:01:08:49:de:76:20:04:5a:a2:d7:49:ee:2e:e1:89:
e3:03:d6:cf:42:2d:63:a0:18:e2:21:1e:ac:72:10:27:f7:2c:
6b:0e:f1:3f:c9:f1:8d:a6:e5:61:8a:e0:e2:1c:ad:7d:4a:1d:
20:9a:d1:3e:3b:6c:d3:1c:5a:3f:15:92:6a:d6:16:1c:49:a9:
ff:d1:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:37 2025 by rpki-client