Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vlm0hSO4xB5dnrBHPVO-2bxUit4.roa
File: vlm0hSO4xB5dnrBHPVO-2bxUit4.roa (raw, json)
Hash identifier: +FKqZfPcy2+BCJqqS3tUzDQ7bCU3W8cbASHJ5A292l4=
Subject key identifier: BE:59:B4:85:23:B8:C4:1E:5D:9E:B0:47:3D:53:BE:D9:BC:54:8A:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vlm0hSO4xB5dnrBHPVO-2bxUit4.roa
Signing time: Fri 10 May 2024 04:54:07 +0000
ROA not before: Fri 10 May 2024 04:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21430 (0x53b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 04:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BE59B48523B8C41E5D9EB0473D53BED9BC548ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:23:27:3d:c3:15:4f:04:b4:01:01:44:30:
fb:9e:63:70:cf:af:a0:f8:20:0c:6d:ed:fa:8c:d3:
56:eb:cd:ca:ae:57:fa:b5:07:69:eb:84:34:d2:a2:
52:c1:90:3d:22:d7:a2:8e:17:26:a1:0a:f6:79:48:
38:ff:65:92:06:b4:f4:b1:57:68:a1:01:43:2c:0c:
48:2f:df:c7:87:31:6f:cc:54:d9:03:e4:49:68:c1:
24:a6:5c:eb:72:54:a9:86:26:7d:41:01:8d:cc:b6:
2e:71:b6:a6:34:0c:d7:85:b7:95:91:b7:d1:a9:14:
58:f7:04:a1:29:b7:5f:de:76:aa:b4:a7:8f:c8:73:
f7:9f:c6:67:e8:a2:86:3b:6c:63:c1:8a:4f:2f:83:
38:31:8f:06:d2:75:83:7d:d7:71:b6:39:94:bd:d5:
08:26:7f:52:7f:b0:89:58:99:99:18:06:b0:7d:a3:
af:32:29:1d:96:35:37:a9:bc:07:96:d5:e3:41:6c:
84:57:f9:ab:b0:6d:b4:b0:34:e9:52:c5:d4:57:a4:
9c:45:92:0e:56:f8:db:b5:1e:f7:64:39:35:91:44:
36:3d:19:d0:e9:4a:d7:7b:bd:ad:dc:ca:41:a5:19:
b6:a0:40:04:e1:a3:bf:a8:25:fe:8c:aa:00:f5:da:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:B4:85:23:B8:C4:1E:5D:9E:B0:47:3D:53:BE:D9:BC:54:8A:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vlm0hSO4xB5dnrBHPVO-2bxUit4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:ad:4e:0b:17:d1:04:f1:74:86:a3:f1:a5:9c:b2:7f:8b:f6:
df:87:f3:f5:1b:57:62:e7:82:1d:c2:96:65:ac:1d:b2:fc:7e:
0d:f2:bb:1b:70:0d:b0:6c:3e:47:92:50:bf:c4:88:11:12:ca:
c2:dd:b6:ed:02:2f:a4:16:0a:ab:ce:bd:d8:63:79:8c:e4:05:
82:27:a9:d2:c3:30:53:89:1e:51:a3:b3:0f:dd:e2:f6:04:f0:
53:47:29:f5:b2:50:c3:05:18:59:42:f9:e7:c1:b9:7a:f4:1b:
ba:04:b4:11:39:f7:93:fa:9e:7b:1e:86:39:15:3f:5a:e9:4e:
cf:a8:a0:87:21:68:37:aa:e6:d4:88:af:83:83:af:36:97:0c:
39:67:4e:be:f5:1d:53:05:7e:30:1b:1e:09:a9:65:37:37:7c:
2d:4f:9b:3e:e8:66:64:30:b6:f0:b0:d9:3f:c1:cd:5c:30:8a:
d9:17:fc:27:20:0a:bd:15:d4:c0:f3:f7:c2:2c:68:b7:20:71:
88:ca:be:6a:38:fc:b5:c5:d2:9e:7b:af:cb:91:e5:55:17:96:
ca:aa:4d:80:70:f9:27:43:57:14:b6:13:90:5a:66:05:92:bc:
1b:7e:df:09:02:aa:80:3f:0b:65:07:21:8b:b2:4e:e8:9d:05:
90:91:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:56 2025 by rpki-client