Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wUfZqkNdS2F0Yu2QzZAqN__m39w.roa
File: wUfZqkNdS2F0Yu2QzZAqN__m39w.roa (raw, json)
Hash identifier: mF0VDMYpvKd+t0CYQQYocoNa8cmeUa3Ph5KHjABGdtk=
Subject key identifier: C1:47:D9:AA:43:5D:4B:61:74:62:ED:90:CD:90:2A:37:FF:E6:DF:DC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FEA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wUfZqkNdS2F0Yu2QzZAqN__m39w.roa
Signing time: Sat 13 Apr 2024 19:22:54 +0000
ROA not before: Sat 13 Apr 2024 19:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16362 (0x3fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 19:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C147D9AA435D4B617462ED90CD902A37FFE6DFDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:18:e5:85:2b:19:cb:08:d4:23:6d:02:2f:
74:52:fd:a5:7f:61:fc:76:68:7b:e2:ba:0c:a6:bd:
2f:0e:33:a9:67:4b:b4:ef:ea:cb:ac:6a:ba:a8:a1:
57:b0:d7:20:0e:1a:e9:8f:c3:ba:0e:98:f9:a5:e8:
80:fd:00:6b:52:ea:84:81:2e:79:32:b1:c3:e4:f9:
74:34:85:72:a1:a5:d2:21:ec:a7:4c:1c:55:d1:b7:
ca:c3:f5:58:bc:70:4e:05:24:42:fa:1e:c2:1b:6e:
f9:20:27:f4:d2:53:07:68:80:7d:70:d2:58:7c:b9:
39:e4:d6:41:35:10:12:47:2b:d2:f7:08:88:3e:14:
e8:df:8a:ac:35:18:bd:70:7a:ed:c0:79:4c:db:4d:
c2:80:f1:fb:c7:c9:cf:e2:82:4a:a1:76:bd:fe:16:
0a:b5:a1:26:ee:3b:fb:a3:2c:ae:35:3f:94:ee:fe:
aa:d1:dd:4a:ca:45:01:b2:9e:c3:c1:b7:fa:70:8d:
29:87:2d:6b:3c:fa:cd:8a:97:ba:03:02:05:0d:2d:
7f:fd:e3:e5:3a:55:39:da:f3:96:02:4a:a8:c1:f8:
28:db:34:e3:f0:a4:b3:45:91:dc:e2:9c:0a:85:4c:
3b:03:0d:19:58:6c:3e:4c:ff:dd:2b:aa:d7:92:a0:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:D9:AA:43:5D:4B:61:74:62:ED:90:CD:90:2A:37:FF:E6:DF:DC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wUfZqkNdS2F0Yu2QzZAqN__m39w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:3a:0a:34:74:d8:08:22:23:48:96:cc:9e:7d:59:0d:84:95:
92:b4:64:e3:ee:5a:b9:13:22:80:e6:ad:63:3c:4f:4d:82:0a:
a4:23:68:33:f3:9b:df:02:5c:7f:2d:6c:c9:e8:53:42:4b:3b:
57:a4:16:03:0e:e4:1d:f6:6a:58:d3:6f:34:50:99:e0:0c:37:
86:03:1e:7e:46:b3:32:af:25:f9:60:93:9d:69:fe:3f:a6:df:
d7:f4:98:af:aa:cd:92:df:9a:37:da:76:83:4d:ce:a7:64:1f:
00:04:fe:02:4b:19:55:c7:98:73:30:f3:75:79:02:ec:aa:d7:
c9:a1:51:06:aa:8e:46:53:53:dc:95:60:76:42:d0:39:4a:4e:
49:69:a1:18:8a:c7:38:5b:9d:3c:60:94:f9:e3:bb:7b:89:27:
63:d5:17:66:86:e0:84:11:aa:0c:99:d9:d4:3d:3c:56:94:74:
bd:21:c7:9c:c7:c4:f9:42:b1:06:2a:e2:26:12:5b:97:ec:6a:
ad:e5:ce:bd:d2:50:68:14:2c:73:0c:6c:a0:61:c6:ed:a9:18:
08:52:2c:e4:bb:3d:e3:d4:a6:7e:19:cb:3a:34:35:b6:c0:a2:
52:46:bb:98:2c:70:7d:8e:86:d0:45:87:fe:b2:4f:ab:ae:37:
32:76:48:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:07 2025 by rpki-client