Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Wysq-N7S_S28a16KvszxKT4qPC0.roa
File: Wysq-N7S_S28a16KvszxKT4qPC0.roa (raw, json)
Hash identifier: Jl7jQDDipUD3t+tUYUkA2kK3WYpvcClsKmXQ4V7eb7k=
Subject key identifier: 5B:2B:2A:F8:DE:D2:FD:2D:BC:6B:5E:8A:BE:CC:F1:29:3E:2A:3C:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4326
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wysq-N7S_S28a16KvszxKT4qPC0.roa
Signing time: Thu 18 Apr 2024 02:53:25 +0000
ROA not before: Thu 18 Apr 2024 02:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17190 (0x4326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 02:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5B2B2AF8DED2FD2DBC6B5E8ABECCF1293E2A3C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:75:ef:d7:d8:73:33:f2:77:e4:72:90:88:
f7:1d:9a:67:ba:77:d0:14:6a:48:1d:42:75:60:49:
fb:22:f0:b4:25:e1:cc:9c:28:2f:ca:5c:0e:14:d7:
59:64:61:e5:97:23:50:39:eb:a9:44:16:36:e0:21:
82:6d:bb:04:42:3d:99:39:c2:52:ed:43:c8:54:27:
c3:2b:86:47:75:f5:8a:56:59:29:f1:32:5a:c8:39:
79:f6:0e:3a:1a:91:63:05:74:44:30:78:fc:e2:8e:
78:75:f9:52:8e:4d:4d:c5:20:f6:2b:3b:04:49:01:
ff:d2:07:08:53:2e:94:e8:f7:a2:18:19:46:91:56:
ca:0f:fc:27:6a:a5:63:0c:f3:7f:22:12:7b:d8:38:
03:fb:63:30:27:ce:da:3d:da:ab:91:24:11:8b:5f:
bf:ef:52:a4:ba:f5:da:5c:8a:78:cd:4e:6a:39:03:
24:49:a5:01:d5:e0:9e:10:6c:4b:f7:5a:30:b2:4a:
32:42:b9:9e:24:d8:f7:91:b9:ff:4e:16:ad:e4:1c:
37:22:02:8d:25:b9:69:b6:4f:56:59:5d:3e:ca:8b:
a0:58:79:ff:43:35:a9:5a:ad:f0:f5:21:0a:3e:fb:
bd:e5:e0:3f:f3:d3:6b:50:4e:ad:e8:40:8c:ab:e1:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:2A:F8:DE:D2:FD:2D:BC:6B:5E:8A:BE:CC:F1:29:3E:2A:3C:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wysq-N7S_S28a16KvszxKT4qPC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:26:cb:7b:d2:6d:c1:8b:55:e9:b1:cd:88:66:58:97:87:7c:
58:1f:9d:4b:15:66:14:11:79:47:1b:76:d2:eb:37:0d:2f:ec:
f8:4c:90:36:d8:0a:1a:42:5d:67:3d:09:af:c9:25:87:25:09:
bb:1e:4e:31:16:02:fb:b8:a1:ec:c8:91:9e:20:83:1b:ac:2b:
8c:02:d7:7f:7d:4b:34:b0:e7:af:18:67:ac:87:67:f0:04:5f:
09:ea:27:75:d6:b8:f5:e3:b8:d7:74:91:07:53:36:49:10:34:
0b:0e:48:80:d2:96:90:8a:8b:f5:2c:90:c6:e8:4d:a7:6b:a8:
d4:bd:bf:f8:db:a3:7c:85:70:8b:d9:41:4e:bf:f4:7e:d0:f7:
2c:d6:0b:37:1d:37:cf:bc:9a:a7:d6:22:a0:48:e4:70:37:d0:
b2:ac:11:d7:3d:ed:32:8a:f7:e0:08:5e:78:60:66:3b:2f:dd:
cf:52:e0:b9:9e:41:5b:ab:b6:aa:76:10:15:82:8c:b4:38:ac:
0c:e4:d5:25:37:be:fe:c9:97:c2:b0:2f:09:17:51:8d:b9:c9:
7e:79:58:a3:8a:f6:4b:37:d9:d9:5e:ac:0b:47:76:ac:33:ac:
89:47:99:30:90:aa:6c:9b:bc:d4:51:4b:34:79:c4:8e:ac:42:
22:48:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:10 2025 by rpki-client