Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0jGLHFPZU2P4GpZDxoT6uU1-PjE.roa
File: 0jGLHFPZU2P4GpZDxoT6uU1-PjE.roa (raw, json)
Hash identifier: luH7S1FY1S2IBS2cczEakFN8fet+6UnaDoPTHaOH6Kk=
Subject key identifier: D2:31:8B:1C:53:D9:53:63:F8:1A:96:43:C6:84:FA:B9:4D:7E:3E:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FE2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0jGLHFPZU2P4GpZDxoT6uU1-PjE.roa
Signing time: Sun 05 May 2024 02:23:49 +0000
ROA not before: Sun 05 May 2024 02:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20450 (0x4fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 02:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D2318B1C53D95363F81A9643C684FAB94D7E3E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:e7:70:99:c2:72:a2:c4:9c:2a:ea:20:28:
e6:93:a2:65:27:32:4a:1c:a3:a8:9e:22:67:37:5e:
09:e9:1a:a5:3e:ef:4d:f8:ed:72:97:07:ec:6e:60:
3e:69:44:a4:e2:3a:f0:c2:36:92:80:51:96:2e:8c:
51:d0:b1:7a:c2:dc:a5:68:70:ae:9f:1f:03:b5:48:
c2:81:5c:44:f9:5a:ac:5b:68:56:77:4d:5b:a3:ae:
79:a4:84:1f:06:7c:e9:a3:38:59:38:11:72:a0:78:
23:5d:35:d5:37:7b:45:db:d0:ee:cd:1d:67:93:9a:
89:fd:73:76:20:43:73:b5:71:08:ea:52:67:ea:50:
d7:2c:2d:a5:01:b5:4f:d2:c2:0b:ea:ca:ab:09:f9:
68:7f:73:8e:f2:b7:87:89:e5:e6:2a:8e:0c:0f:b5:
29:e6:95:3c:aa:d8:39:be:4d:79:cc:2f:20:55:c5:
23:1a:50:51:bb:e5:46:b4:35:d2:18:f1:97:0b:bb:
38:08:dc:22:ed:67:4d:9f:e5:49:75:eb:7d:7b:fe:
fb:82:e3:8b:cb:73:99:62:b8:31:66:19:93:c3:88:
94:55:29:8c:b5:a6:2c:03:2f:30:a8:5e:ed:1b:6d:
3b:da:98:af:03:bf:e2:4d:26:23:ab:61:5b:29:a3:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:8B:1C:53:D9:53:63:F8:1A:96:43:C6:84:FA:B9:4D:7E:3E:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0jGLHFPZU2P4GpZDxoT6uU1-PjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:9e:ef:98:d9:5d:91:7a:92:c9:7a:aa:76:19:27:65:c9:01:
85:07:c0:c4:97:fe:ba:1d:91:8b:dc:4a:9d:50:76:a6:2c:b4:
57:56:8f:f1:25:a8:cb:81:42:d8:4f:3f:81:67:0c:99:db:ce:
17:a6:f5:c2:ef:95:82:e8:76:fc:a4:f6:2e:68:72:a5:4c:c2:
ba:66:b1:cd:aa:a4:70:39:6e:8c:64:fb:d7:7f:d5:00:61:92:
1d:9c:68:10:c7:ae:f6:a2:d1:c3:70:1a:4f:a6:91:31:5a:59:
0d:3b:a9:ad:23:17:5f:73:c5:49:4b:c1:d8:88:26:fc:e0:8e:
d6:9e:c1:44:ee:c5:ed:97:7f:ad:c6:96:00:52:ad:d7:26:bc:
5a:6e:04:38:e4:0a:81:88:58:9e:53:2e:de:e8:a6:0a:83:1a:
e7:a5:08:78:5d:13:e0:fd:ef:09:ff:f6:21:40:a2:88:33:7c:
1e:50:a5:8f:29:fb:81:e3:15:e6:f4:90:34:9c:9a:ed:1e:57:
4b:ed:e1:6d:46:58:c1:ec:24:38:e2:b5:e6:f6:33:60:2f:75:
5c:a8:c5:e6:27:b7:9d:71:b6:a2:d4:36:f3:73:19:b6:02:a7:
68:0f:06:fa:3d:e4:01:a8:1e:32:3d:b5:62:8b:91:7d:ab:94:
1e:d1:dc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:32:36 2025 by rpki-client