Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uLpDH91ANETY7Qfrs8o0um2KV4c.roa
File: uLpDH91ANETY7Qfrs8o0um2KV4c.roa (raw, json)
Hash identifier: PHi/HKYP4+hLInq6ws7Q2Mm7odsz6K6qygHKXJ8iFbk=
Subject key identifier: B8:BA:43:1F:DD:40:34:44:D8:ED:07:EB:B3:CA:34:BA:6D:8A:57:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47F6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uLpDH91ANETY7Qfrs8o0um2KV4c.roa
Signing time: Wed 24 Apr 2024 12:53:14 +0000
ROA not before: Wed 24 Apr 2024 12:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18422 (0x47f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 12:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B8BA431FDD403444D8ED07EBB3CA34BA6D8A5787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:4e:11:75:b2:a2:dc:5c:c3:d4:33:d2:57:
f0:11:9b:52:1d:dc:13:9a:f7:33:03:b2:33:db:8e:
1c:7c:5e:00:c1:a8:89:38:c9:92:86:11:c4:d2:95:
88:b1:5b:03:05:a8:ce:f2:5d:34:83:a2:4a:51:f5:
7e:47:91:db:89:a9:4f:24:96:37:05:a3:9a:d6:69:
79:95:8f:17:7d:4e:68:66:43:37:5b:8c:d7:fa:79:
dd:b5:c9:a5:27:1d:53:ed:20:1d:a6:9b:f2:60:ad:
f7:47:95:24:43:28:65:a9:84:e4:82:d1:c6:9f:cf:
9d:90:d9:20:05:83:1d:21:a5:c6:6e:31:9f:38:01:
e3:96:ab:7f:65:d2:3c:82:6e:0b:ef:f5:e7:23:5a:
e8:2d:af:94:60:9c:36:1f:43:68:5b:5c:97:ab:c7:
0b:38:55:0d:ca:2a:7f:0e:35:9d:eb:8c:f5:b7:5e:
e8:67:d0:87:f3:1c:8a:30:a7:b7:39:9d:8d:54:a3:
87:10:4b:30:01:f4:fd:a2:70:bc:2e:c8:6a:f5:d7:
bd:5e:44:f9:5e:aa:95:cf:33:3f:35:8d:b5:31:9e:
a5:7b:9e:95:88:75:f3:69:b0:22:4a:c1:96:13:57:
66:b1:9b:d4:6f:c9:9f:ba:71:77:b3:b1:5f:ed:58:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:43:1F:DD:40:34:44:D8:ED:07:EB:B3:CA:34:BA:6D:8A:57:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uLpDH91ANETY7Qfrs8o0um2KV4c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:20:1f:c6:b4:47:29:3c:8e:7c:fd:f8:bb:30:5d:d2:fc:ae:
66:0e:8c:bf:18:f6:dc:0c:8a:5b:e3:7b:97:21:99:2d:d9:c4:
c4:d8:4e:35:d8:ba:7d:6f:40:02:fa:ae:0a:19:a8:eb:01:b5:
be:66:1a:5d:0b:1d:62:ba:7a:8e:44:25:f1:d4:3e:d0:b2:87:
6e:77:0a:61:03:36:cc:1c:17:0e:ec:a0:fa:d7:8b:c3:09:7b:
92:9a:9d:ce:cf:49:4e:8b:41:04:a2:43:38:de:88:bb:61:67:
fb:28:2f:a0:dc:9d:47:7a:3a:14:14:b0:73:dd:67:69:b8:86:
d7:67:7f:ab:3e:7c:5e:a5:22:81:6f:f1:e3:17:9c:66:a6:77:
3f:f9:0e:78:05:03:69:e0:6d:13:98:91:56:cf:1a:ae:e1:79:
bd:b5:52:d5:f1:36:95:92:d1:cb:2d:ab:04:7c:37:81:a7:cd:
d7:78:16:ec:53:7c:56:2b:73:21:77:f8:16:f3:f0:5c:ee:ab:
ba:9a:f6:ca:7d:75:e7:76:a8:a4:9b:1d:f4:d8:8d:dd:93:70:
55:f1:80:5d:51:83:89:8d:cd:22:0d:f1:25:6d:38:3f:21:5d:
c8:1e:4b:d0:ea:f9:d5:47:ca:2b:d0:4b:1b:4a:68:44:23:3f:
95:92:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:03:02 2025 by rpki-client