Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vbB_7W0rCdt49lHhoMmK-0NlV9E.roa
File: vbB_7W0rCdt49lHhoMmK-0NlV9E.roa (raw, json)
Hash identifier: KoldIrsoDsQHDP0mPvrJbj52bjiWglfH/fTRtN+tg3w=
Subject key identifier: BD:B0:7F:ED:6D:2B:09:DB:78:F6:51:E1:A0:C9:8A:FB:43:65:57:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5556
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vbB_7W0rCdt49lHhoMmK-0NlV9E.roa
Signing time: Sun 12 May 2024 08:54:26 +0000
ROA not before: Sun 12 May 2024 08:54:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21846 (0x5556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 08:54:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BDB07FED6D2B09DB78F651E1A0C98AFB436557D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:29:e7:50:80:85:c8:1c:11:c1:77:53:f2:
d5:06:fa:72:69:81:ff:af:20:2d:9a:6a:d6:ea:16:
f5:fb:54:be:0d:9a:ca:9e:ac:0d:b6:0e:42:2f:38:
91:0f:16:ad:2c:af:25:9b:f6:8f:b6:a1:5b:d0:a5:
7c:dc:e7:93:8f:18:29:2c:e7:c8:32:2e:f5:8b:e4:
aa:6d:95:fc:96:4c:b3:48:67:55:0e:63:67:85:75:
5d:dc:57:3b:15:98:9b:77:45:f4:79:6f:2a:09:c2:
ff:76:24:df:b0:5b:29:8a:b0:af:46:27:5b:ec:2b:
fc:61:a9:a5:53:d6:84:aa:28:9e:8b:af:aa:d3:e4:
7b:0c:16:34:4e:14:d2:4d:5d:ba:2b:7d:03:69:38:
61:7b:a6:fe:cc:18:2a:66:68:42:8c:99:63:7d:c5:
30:d7:13:59:b9:3a:11:4a:5f:3e:31:a2:67:3a:fa:
06:f4:c3:80:e2:fd:ba:a3:82:e3:d5:ba:86:81:72:
88:79:56:ab:e7:22:ab:bd:5e:1b:18:f9:09:66:d0:
7a:86:17:24:b3:47:e0:27:62:9b:5c:5c:fe:fc:1e:
f0:60:7f:28:cd:14:3e:d5:9c:d7:02:15:c2:50:18:
b1:32:36:8c:a4:b0:b0:f8:41:18:01:f1:fd:ef:c6:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:7F:ED:6D:2B:09:DB:78:F6:51:E1:A0:C9:8A:FB:43:65:57:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vbB_7W0rCdt49lHhoMmK-0NlV9E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:09:cd:48:4c:8f:dc:de:8f:06:af:75:97:79:a1:79:57:8b:
60:38:f0:7b:ee:b9:8d:32:cc:47:9e:78:55:f6:89:30:72:e3:
b8:ec:bb:c3:bc:b7:a3:87:b4:7d:35:ce:dd:a9:26:13:7b:b5:
7a:79:78:fa:7e:b4:c8:11:fb:83:3f:48:1e:22:00:90:21:d0:
3c:cd:dc:4c:4d:77:8a:09:b0:c5:c1:47:30:47:59:d3:90:8b:
be:0c:59:f5:17:96:93:5e:2b:46:9f:be:91:c0:a3:41:5a:2b:
b1:d7:bd:ad:e4:82:a6:4d:aa:dd:e8:5a:11:1d:60:90:d4:17:
a8:28:52:f4:41:9c:9d:fc:d4:11:0d:37:fd:17:7b:95:c9:0b:
fa:14:b0:0b:82:0e:d1:d4:9b:94:ea:65:85:3b:b2:a3:0d:00:
a0:47:a2:41:ea:ad:57:73:93:d2:94:9e:cd:6b:82:64:ce:b5:
e3:6e:18:87:3b:ab:2d:27:fc:40:09:6e:19:95:0f:67:17:83:
b2:17:7b:c8:54:e7:18:72:40:66:ab:c0:b9:7c:f9:dd:b3:97:
ce:c6:47:d2:9b:72:88:df:27:25:93:1c:fa:ae:05:14:06:d8:
6f:1b:38:e6:39:a8:55:ca:f4:9a:bc:3f:76:13:ef:75:34:30:
23:9c:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:18 2025 by rpki-client