Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MqtlELShrBhaSN5pdJV-QXZGAv0.roa
File: MqtlELShrBhaSN5pdJV-QXZGAv0.roa (raw, json)
Hash identifier: SmCvjCJm767nbfVoDUCDZwHMECt6PJd+Nsq6ioWtrnQ=
Subject key identifier: 32:AB:65:10:B4:A1:AC:18:5A:48:DE:69:74:95:7E:41:76:46:02:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E42
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MqtlELShrBhaSN5pdJV-QXZGAv0.roa
Signing time: Thu 02 May 2024 22:23:54 +0000
ROA not before: Thu 02 May 2024 22:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20034 (0x4e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 22:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32AB6510B4A1AC185A48DE6974957E41764602FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:bf:17:89:f5:92:a4:b6:44:66:e6:eb:e3:
64:50:4a:7c:7d:56:06:8f:59:e9:3c:d0:1a:a8:2a:
b1:90:f7:1e:16:cf:29:9a:6e:e2:65:96:7d:35:57:
c5:cf:c9:6c:94:4e:6f:32:a9:d7:e7:9c:24:bf:be:
47:eb:f6:d8:23:89:a2:18:da:39:4b:75:3b:4e:0e:
a4:3c:88:3c:ff:73:2b:c7:c7:fe:11:fa:61:6e:da:
5a:3b:b6:d0:9b:cc:47:1f:c0:66:98:32:fe:9c:b0:
c1:cb:2d:14:c1:21:b0:4e:b2:24:0f:4d:69:20:90:
dd:9d:a2:f9:ad:ea:3d:30:bc:1a:da:01:6e:73:e2:
07:ee:da:07:51:51:87:a5:6a:77:ef:fb:d7:81:f6:
2e:4e:27:0e:fa:c6:d9:9d:45:34:fd:c0:ec:b3:44:
25:11:4a:14:86:62:a2:0f:2b:09:2c:f2:2a:41:bd:
ab:83:98:7e:97:34:36:54:ef:a5:a4:2e:22:e8:3f:
f6:06:27:cd:c2:2b:a6:d3:1b:5e:af:38:d9:7c:20:
a8:c6:7b:b0:08:c5:b4:fd:9a:69:41:c0:55:51:b3:
ff:21:11:5a:86:6c:97:a5:26:a8:c5:e7:47:4a:ce:
db:c4:9f:13:e1:53:65:88:71:47:bf:8e:0c:2d:5e:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:65:10:B4:A1:AC:18:5A:48:DE:69:74:95:7E:41:76:46:02:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MqtlELShrBhaSN5pdJV-QXZGAv0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:be:cc:d6:27:ec:71:5c:f1:56:6c:d2:45:0b:11:52:0f:23:
cb:13:c2:5d:71:16:37:c1:a6:be:45:16:08:88:90:82:38:4d:
0d:b9:7d:71:fd:fd:42:a2:3c:a3:f0:80:b1:be:50:dd:00:ae:
8e:b5:38:6a:7f:81:c3:16:b7:ff:13:12:f7:4e:53:75:95:3f:
42:4e:57:c6:b0:29:2b:57:26:fc:27:90:40:ac:24:c5:9e:59:
e2:78:fa:3d:92:ad:8a:bc:94:53:fe:6b:c6:c8:2e:d5:70:4a:
ce:32:cc:ea:37:8b:be:56:6e:e3:65:aa:65:0d:75:71:9f:85:
1c:13:a0:bd:f1:2b:9c:c7:c4:ee:be:ef:73:5d:d0:46:85:f8:
c8:21:37:3d:30:11:10:ad:ed:10:52:76:7f:f4:12:70:e5:ca:
a6:24:45:23:51:8f:af:7d:27:e1:78:1c:9c:06:be:20:4b:f4:
41:2a:a7:eb:fa:79:05:0b:fa:ce:fe:09:76:43:10:32:81:e3:
1d:8b:39:be:12:9c:71:2a:25:ac:6a:d3:2e:ee:63:64:92:3f:
f4:d2:93:f9:9e:08:00:ba:d5:c9:b7:78:c5:d0:1e:26:4b:65:
ae:61:e6:37:e1:b5:89:68:b6:c8:e8:e1:70:9d:06:dc:e4:96:
5d:a8:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:32:20 2025 by rpki-client