Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8n1d-ps1y55Jyjdv_PR_KxPDRTw.roa
File: 8n1d-ps1y55Jyjdv_PR_KxPDRTw.roa (raw, json)
Hash identifier: 07gZRC6VZ1D/YR0B09JiCa6Mysqb5vflkKRRZOQNLDI=
Subject key identifier: F2:7D:5D:FA:9B:35:CB:9E:49:CA:37:6F:FC:F4:7F:2B:13:C3:45:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D7A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8n1d-ps1y55Jyjdv_PR_KxPDRTw.roa
Signing time: Wed 01 May 2024 21:23:40 +0000
ROA not before: Wed 01 May 2024 21:23:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19834 (0x4d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 21:23:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F27D5DFA9B35CB9E49CA376FFCF47F2B13C3453C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:56:ed:49:3e:38:d4:74:a6:20:25:b2:30:
a8:bf:16:8f:5f:55:fe:82:df:b6:07:91:a3:cf:d5:
d3:0f:22:e7:09:72:bb:58:9e:8b:b9:23:c3:d9:59:
9c:c9:01:23:35:f5:d7:0a:f9:31:d2:9f:53:3c:a0:
4a:25:0a:18:cb:05:fa:7d:42:95:8b:68:f1:d3:72:
17:24:ed:76:78:b1:4a:39:83:9e:84:39:96:a6:f2:
31:80:b8:c5:c1:72:5b:89:cc:1f:7d:77:e3:1b:02:
a0:86:7f:c8:5f:27:d3:34:01:1a:d0:16:54:ae:38:
d8:04:28:e9:23:45:fc:99:5f:e4:81:ee:18:cf:26:
f6:93:eb:9d:cb:e2:ed:87:db:44:84:f4:48:03:24:
fc:9e:d4:86:d0:28:0c:2f:2a:e8:b7:41:60:9a:06:
45:11:c0:51:5a:91:cb:81:b6:7f:e3:b0:d5:81:fb:
07:33:11:42:af:74:60:3b:2f:e7:02:1b:74:6c:41:
de:7b:e4:3b:d6:f3:d8:a8:ac:d2:68:3c:89:4d:7c:
45:42:76:72:6c:b5:6c:3a:5a:9b:a4:51:93:38:71:
1b:9d:3b:3f:e1:dd:5d:23:a7:e3:a5:9d:ee:a0:d8:
45:d2:4b:f0:36:a0:e5:e1:46:3e:74:b2:c3:e8:34:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7D:5D:FA:9B:35:CB:9E:49:CA:37:6F:FC:F4:7F:2B:13:C3:45:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8n1d-ps1y55Jyjdv_PR_KxPDRTw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:7d:fb:21:7c:8d:ed:2c:ce:55:e8:0d:b1:fb:4f:0f:c6:e4:
c2:31:46:28:98:82:c1:4a:be:a0:8e:20:2d:eb:17:e6:48:8f:
19:e4:83:b9:dc:3f:28:03:cd:2c:6b:44:25:68:13:8b:34:be:
d2:f7:e3:92:a3:5d:8b:d9:16:7f:39:66:a6:71:5e:6b:fe:3e:
e3:59:b6:b7:54:55:04:e8:90:d4:d0:3e:bc:28:d2:e2:18:f1:
23:28:9f:ea:33:79:1b:e6:e7:b2:5e:be:0e:35:e1:e8:99:a9:
3d:6e:15:29:26:18:f9:9a:98:a6:8d:a9:0d:38:b2:a3:a8:64:
ab:c9:67:c0:a3:a4:3e:83:fb:56:3a:52:c3:c3:fe:f6:e4:83:
32:16:bb:3a:15:cd:e0:dc:10:24:dc:b0:85:3e:5a:3b:b4:77:
bc:d1:a4:ae:e4:00:04:29:39:20:eb:94:ac:07:bb:8c:ef:4b:
48:70:0c:ae:57:bb:25:86:ec:c2:0d:8c:9b:23:61:3f:13:eb:
03:cc:16:f1:a1:55:70:80:39:f5:cd:64:16:cd:85:1a:14:ba:
e2:e1:cd:d4:5a:f5:0f:06:2c:b7:cb:f9:67:1d:d5:0c:7c:eb:
bd:d4:4a:bd:b0:05:be:95:fd:6b:f2:18:c5:d3:5e:9e:c7:cf:
d8:ae:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:52:58 2025 by rpki-client