Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0fofZHUEBey0Gr-aaWqSM_q--H4.roa
File: 0fofZHUEBey0Gr-aaWqSM_q--H4.roa (raw, json)
Hash identifier: nCHDkRRIq31vSVEvfU6hFaSSUo25aPW+H2ouODULYn8=
Subject key identifier: D1:FA:1F:64:75:04:05:EC:B4:1A:BF:9A:69:6A:92:33:FA:BE:F8:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0fofZHUEBey0Gr-aaWqSM_q--H4.roa
Signing time: Sun 07 Apr 2024 17:52:32 +0000
ROA not before: Sun 07 Apr 2024 17:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15198 (0x3b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 17:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1FA1F64750405ECB41ABF9A696A9233FABEF87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:8b:83:12:ef:75:46:4e:5e:15:51:ad:f7:
22:7f:ca:72:d7:e8:8a:9e:52:97:8e:d3:4c:3c:63:
a8:f5:74:02:36:03:9c:d7:24:78:6c:83:6b:1e:dd:
a3:4e:53:d7:67:54:3f:0d:77:e6:2b:18:14:e1:36:
56:bd:1a:2a:93:35:44:a5:62:e5:7a:f9:ca:40:cc:
c4:26:b6:1d:94:38:d9:39:30:ba:cf:93:50:f3:d5:
b6:3e:62:18:93:9c:4a:39:0e:ea:7f:51:da:72:12:
9c:af:00:e1:ec:0a:70:a9:b0:a5:73:f9:60:b6:7d:
b7:c2:ca:be:05:0c:48:69:60:07:14:b6:97:ce:bf:
3a:ef:0b:8c:18:63:19:b6:d1:12:9a:b6:1b:7e:36:
47:b4:88:7e:0a:7f:36:fd:be:82:09:7a:70:a4:9f:
2f:55:85:fc:31:15:b3:ae:47:e9:90:e0:1b:66:7a:
b2:e0:2f:04:41:02:0e:ed:11:8d:a5:58:8f:6b:c0:
2d:58:75:95:01:ae:35:6b:f0:db:44:e0:7f:10:c8:
b3:ea:48:84:47:09:4c:d7:7d:0d:63:5b:17:48:cb:
e4:f2:a1:22:d5:8b:ce:7d:c6:80:ec:5c:6c:3b:e3:
d7:77:01:77:07:4e:f3:fe:df:93:03:ef:24:a5:a4:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:1F:64:75:04:05:EC:B4:1A:BF:9A:69:6A:92:33:FA:BE:F8:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0fofZHUEBey0Gr-aaWqSM_q--H4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:e5:7d:e0:2c:35:48:ac:c1:cf:47:35:85:29:ad:d3:a9:6d:
0a:1e:25:b8:5c:2a:a2:4e:6b:0f:d4:16:4d:ff:9c:1d:1b:f4:
6f:e2:17:73:cb:49:d1:42:d1:5f:30:26:5f:78:da:ce:17:d9:
ab:b4:d1:c9:10:a7:e7:f8:9c:6c:3a:06:fa:87:7c:57:c2:7d:
14:c6:c0:aa:25:03:fd:b7:96:70:0b:bc:ff:a5:f4:d6:90:b8:
c9:00:4b:c5:80:1d:f0:cf:53:8b:e1:11:bf:96:88:04:e9:ae:
06:7e:96:a9:dc:ef:3a:2b:27:40:9c:49:e0:3c:73:77:58:f1:
7c:b9:48:50:8e:b5:b8:92:e5:36:0e:fd:d4:92:32:33:76:56:
87:c6:0e:e4:39:61:3a:52:ad:0a:3a:86:20:be:5e:b0:8e:22:
d6:4d:e1:59:0d:b1:48:4f:d7:cd:30:9d:fb:fd:f5:04:90:a8:
88:c0:72:b1:8f:3f:c5:96:95:1c:1d:ed:3c:53:3f:8c:02:0b:
ae:af:a3:b0:01:13:16:59:b3:43:7c:de:e1:d0:f5:08:44:55:
03:5d:9d:76:0d:6d:10:13:2f:b6:dd:a4:51:14:0d:74:3a:84:
62:d5:56:a4:b3:6c:bb:f9:b9:fb:f5:b8:b4:8d:7c:0a:eb:13:
1b:f6:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:31 2025 by rpki-client