Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/E7c6ICGKn5SIP-8iHqyOf5YCK6w.roa
File: E7c6ICGKn5SIP-8iHqyOf5YCK6w.roa (raw, json)
Hash identifier: qiF6JtUvDWpSBElSRArJ4lfxOMVHdpfE+UqtBo6Qwms=
Subject key identifier: 13:B7:3A:20:21:8A:9F:94:88:3F:EF:22:1E:AC:8E:7F:96:02:2B:AC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3806
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E7c6ICGKn5SIP-8iHqyOf5YCK6w.roa
Signing time: Wed 03 Apr 2024 06:52:22 +0000
ROA not before: Wed 03 Apr 2024 06:52:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14342 (0x3806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 06:52:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=13B73A20218A9F94883FEF221EAC8E7F96022BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:f9:0a:78:42:d6:cc:df:a2:bc:a3:54:93:
29:8f:62:e3:e4:4f:69:08:e3:24:73:2b:03:03:ef:
27:16:18:7b:5d:0e:85:c5:45:d9:e6:55:e1:e1:bb:
dc:09:d9:ba:e9:10:87:02:74:22:fd:6d:06:85:ea:
43:5f:9d:4d:a7:40:af:38:18:3a:78:ca:a3:f4:8d:
fe:f9:c7:f9:61:a6:02:b7:c6:3b:66:38:82:c6:f1:
ae:e2:72:91:58:0a:68:64:76:5c:ee:50:e8:43:3d:
63:3c:59:69:d6:9e:64:40:24:fe:20:be:bd:8f:72:
23:a9:8c:ca:5a:6e:ee:79:fd:75:8d:48:0a:7c:b8:
7d:28:22:20:f4:57:10:a9:cb:e4:fa:9e:f9:ec:ea:
49:51:dd:82:44:22:53:44:ad:c1:88:ab:01:e5:67:
9b:33:4c:5f:13:14:5e:7c:31:ea:dc:5a:a1:16:51:
c1:af:b0:f3:7b:6f:ca:81:f7:43:30:d3:05:c3:7a:
7a:a1:da:59:81:f6:20:d0:13:29:76:38:4e:57:db:
55:43:cb:c9:71:24:00:d6:32:16:64:e6:ea:75:10:
ab:c3:ab:b7:68:69:e6:e9:8e:c6:40:2a:b1:fb:4a:
66:8f:45:8b:07:2b:29:3a:f0:66:43:6c:06:ee:d2:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:3A:20:21:8A:9F:94:88:3F:EF:22:1E:AC:8E:7F:96:02:2B:AC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/E7c6ICGKn5SIP-8iHqyOf5YCK6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:aa:ee:36:1f:53:2a:9f:cc:45:0f:77:d9:76:d0:b4:b7:ba:
43:cd:b0:8c:61:90:4c:29:f0:4b:02:ba:70:9d:5d:b2:a5:f9:
9c:3b:d8:90:80:45:a1:2b:fa:63:d7:5d:d3:3f:97:64:55:ff:
44:f2:3b:d7:c0:f6:ee:72:1a:3e:d6:94:f7:8b:70:77:8c:23:
17:ef:b6:fa:01:f3:6e:01:a3:1d:e8:a3:87:b7:0a:c5:d0:90:
d4:87:76:11:c4:9c:8c:b6:9d:e2:0d:1e:55:6d:e0:5b:f3:de:
d0:51:11:44:cd:13:d8:23:57:05:5a:2b:56:7f:e0:86:6c:8e:
02:aa:2a:f8:b8:83:01:34:ac:51:ab:71:41:f0:99:84:ff:d5:
30:f6:2d:be:23:9d:63:87:eb:88:b2:9d:8c:da:5e:e8:7b:1f:
bd:34:22:17:da:2a:45:b9:61:37:b7:b9:b1:4f:35:20:3b:36:
87:fb:dc:8c:64:ad:98:28:93:6a:f4:df:22:da:81:3b:64:eb:
b2:03:44:be:d9:f0:85:e5:d4:be:25:d8:3d:48:bb:02:46:60:
97:57:bc:6d:26:d8:ce:e3:60:0e:b5:84:78:b9:08:23:1e:9a:
cf:c2:21:5e:3d:7f:84:5c:f4:c1:ad:c6:8a:a6:b4:35:89:b5:
0c:97:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:16:17 2025 by rpki-client