Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CZjutTMM_xMeAtYM7v2Z2tV83h0.roa
File: CZjutTMM_xMeAtYM7v2Z2tV83h0.roa (raw, json)
Hash identifier: VN0VP5d4ZE+gGP2XhEfHEiIn/OMZBCTo6h72XbxZvog=
Subject key identifier: 09:98:EE:B5:33:0C:FF:13:1E:02:D6:0C:EE:FD:99:DA:D5:7C:DE:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C12
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CZjutTMM_xMeAtYM7v2Z2tV83h0.roa
Signing time: Tue 30 Apr 2024 00:23:34 +0000
ROA not before: Tue 30 Apr 2024 00:23:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19474 (0x4c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 00:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0998EEB5330CFF131E02D60CEEFD99DAD57CDE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:b5:20:6f:0a:40:39:9b:6e:69:77:33:8a:
8b:e1:b6:a4:14:f4:ab:7a:e5:c9:0a:a2:b3:6e:2b:
ca:41:f0:7e:16:48:49:f8:fd:75:05:b5:7c:fa:ee:
12:97:86:60:65:a6:8e:17:40:4b:8b:db:09:01:81:
00:63:4c:be:f4:b8:97:7c:72:2a:66:54:f5:0c:9a:
a4:32:4b:09:89:82:0e:45:f1:7d:46:d6:ae:19:86:
d4:15:64:6e:99:38:6d:73:f6:83:f0:4f:e7:b5:b1:
8a:74:55:ce:fe:75:5b:65:fa:4e:f1:24:78:b0:76:
c5:83:8d:fd:45:78:50:01:a2:4e:1b:6c:8c:5e:b5:
26:3b:b5:d0:26:51:10:4b:5f:51:2e:44:a3:af:c1:
6e:74:0a:51:cd:fa:d9:69:d6:3b:af:0d:8f:d8:3e:
18:f5:0b:c0:30:a0:29:ca:15:86:c8:9d:2f:7b:32:
dd:58:69:a5:a4:2c:ea:81:68:9b:9c:1b:d7:50:ba:
19:3d:87:0a:bf:19:17:88:4e:ae:9c:42:a5:91:91:
9c:7a:57:08:fc:9e:b9:e5:ab:39:b6:8d:01:c8:8a:
b6:02:82:ab:6d:6f:95:c6:6c:6f:cc:4b:d3:8d:03:
fc:9d:a7:a0:4a:aa:02:98:91:6b:f1:9c:fc:19:63:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:EE:B5:33:0C:FF:13:1E:02:D6:0C:EE:FD:99:DA:D5:7C:DE:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CZjutTMM_xMeAtYM7v2Z2tV83h0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:3f:65:d1:3f:b0:26:d3:c8:38:e6:32:f7:ef:c8:ab:bf:71:
00:d5:bb:4e:00:f6:c7:38:a4:44:1b:8c:38:75:f6:d6:20:a1:
a6:35:9e:35:26:74:0f:fa:35:64:e1:62:08:04:7b:9d:e2:59:
0f:25:49:0c:cf:f1:41:ea:07:cd:88:d5:ac:d5:90:c4:0a:98:
81:f2:e0:e6:12:35:2f:98:b0:87:c5:69:5e:8b:09:57:54:f1:
3a:7b:39:b4:33:54:a6:4d:8d:35:e7:6d:e8:3f:08:c0:06:ab:
a3:2a:fe:75:35:45:86:ca:53:79:1d:9b:9d:f2:35:ad:48:93:
2a:0f:7a:f3:4b:4d:03:1d:21:13:cc:4f:5c:e2:ba:a5:de:5d:
28:d0:07:b8:01:e7:e7:68:3a:c3:52:eb:fb:96:cd:0f:e0:62:
de:f4:d1:c4:d9:32:48:23:31:33:f0:00:80:13:10:dc:a2:6d:
b4:37:9f:59:fd:fb:b4:62:c9:75:56:ca:ca:0a:11:5b:78:8d:
7f:66:64:04:cd:97:b6:ff:d4:19:71:00:4f:9e:14:c3:df:1f:
38:40:ae:40:a8:ac:c9:1d:23:fe:3d:cf:e2:21:81:99:a1:15:
09:bb:64:d8:bd:b7:14:b6:6d:04:6a:63:c5:3b:aa:5f:b7:3a:
5c:83:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:23 2025 by rpki-client