Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/whNfmgSDRXqlwieKZcdgeNdjT8w.roa
File: whNfmgSDRXqlwieKZcdgeNdjT8w.roa (raw, json)
Hash identifier: d8chMK4BAvip/MTMZ9r9At+oPhLhKcnyz4LmcbWUtoA=
Subject key identifier: C2:13:5F:9A:04:83:45:7A:A5:C2:27:8A:65:C7:60:78:D7:63:4F:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 505A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/whNfmgSDRXqlwieKZcdgeNdjT8w.roa
Signing time: Sun 05 May 2024 17:23:55 +0000
ROA not before: Sun 05 May 2024 17:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20570 (0x505a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 17:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C2135F9A0483457AA5C2278A65C76078D7634FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:63:69:32:ad:e9:1b:7a:cd:85:78:d2:ec:5b:
fb:0f:f3:0e:5b:1c:e3:82:67:d9:99:7d:04:97:57:
74:fa:1c:a9:0e:97:39:23:d9:fc:35:96:c6:bf:b9:
91:ee:cf:a1:cf:80:b0:3d:a0:87:13:83:4b:b2:3a:
d9:77:b3:25:9a:e7:a4:c1:22:19:c6:8a:ed:56:c8:
84:e3:34:e9:c3:c0:49:8b:62:90:36:d0:c1:5d:b4:
12:b2:44:59:db:5a:1a:ff:69:59:44:5f:65:d9:17:
ba:ba:42:fb:0d:50:da:23:6d:c5:c9:e3:89:91:e2:
f6:e6:af:b6:26:46:fd:b6:19:91:9c:f8:ed:4e:45:
f3:ec:5c:f9:28:7e:1d:99:ac:99:3f:3a:e6:ed:54:
26:54:9c:d8:c5:35:e2:0c:9d:8d:d0:bb:1b:98:44:
4b:bf:ee:66:54:40:e8:df:cf:8f:b0:4e:db:86:19:
56:37:c4:02:77:9c:f5:42:7d:cd:87:d3:4e:9a:87:
83:26:c2:5f:f1:10:8f:9e:cc:4c:41:d8:cf:50:35:
80:e6:65:de:c8:fc:ce:fe:a2:5d:cc:9e:34:ca:ef:
e0:b9:5a:34:ce:10:5b:4d:8a:23:ed:fe:cd:16:60:
5d:51:ab:1a:8c:0c:5f:d7:f6:3a:b7:70:e8:95:0e:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:5F:9A:04:83:45:7A:A5:C2:27:8A:65:C7:60:78:D7:63:4F:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/whNfmgSDRXqlwieKZcdgeNdjT8w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:e5:cf:74:f8:a0:2e:2b:6f:33:ff:5a:d3:e9:2f:94:bc:3f:
b3:de:d0:61:e3:86:e1:21:c9:1f:13:48:e8:43:bc:a4:33:d9:
90:b7:f2:d5:5e:3f:d7:c0:08:38:33:bb:1a:dc:7a:66:b9:28:
1c:b3:5a:a9:22:77:32:df:df:0e:22:1c:59:1c:d1:af:58:a1:
85:33:40:84:b0:fd:a7:a5:57:6b:51:d3:1e:f7:18:3e:ca:62:
6b:93:f9:16:8b:2f:27:8a:0a:1a:34:23:24:59:09:0b:55:8c:
cb:f6:2d:3d:50:45:5b:29:9a:b7:10:e2:e7:96:c5:93:f0:cb:
c6:b6:21:89:9e:67:e1:e9:43:f6:68:3b:d4:ea:75:a3:c7:a2:
8f:0d:ed:e7:68:09:03:db:34:93:f7:9f:6f:95:8f:63:c1:2e:
06:32:a0:15:5f:7f:5d:3c:26:17:7f:b1:be:49:60:61:4b:85:
28:7e:7d:56:30:0a:78:9c:0d:4c:bc:65:4a:5a:fe:45:5a:64:
43:fa:c7:c3:15:f2:8a:db:cc:af:5e:a0:c8:10:3f:85:12:1e:
93:ad:c7:fe:5e:e7:fb:7a:83:eb:57:ad:fe:ba:c4:36:b9:17:
5b:f0:d0:30:ee:11:a3:52:64:ae:16:86:85:f6:40:2f:c9:36:
b3:76:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:47 2025 by rpki-client