Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RePqUzB8HgBOqgQOcYRUiKATqj4.roa
File: RePqUzB8HgBOqgQOcYRUiKATqj4.roa (raw, json)
Hash identifier: usaI4WQUK4y0yFVnTjtbd76tdk6tD91mK0QF9LhVZJ4=
Subject key identifier: 45:E3:EA:53:30:7C:1E:00:4E:AA:04:0E:71:84:54:88:A0:13:AA:3E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 423E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RePqUzB8HgBOqgQOcYRUiKATqj4.roa
Signing time: Tue 16 Apr 2024 21:53:23 +0000
ROA not before: Tue 16 Apr 2024 21:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16958 (0x423e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 21:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45E3EA53307C1E004EAA040E71845488A013AA3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:2e:37:81:1d:86:f9:44:d8:2a:99:b9:86:
99:ad:d1:55:d5:a9:37:95:52:c5:02:1e:61:db:67:
77:d9:b6:5d:81:b1:f5:68:c9:d3:e8:79:e4:e3:38:
71:0c:4c:47:89:bb:f0:f0:60:fb:ae:b9:dd:ad:fc:
34:11:85:a8:8e:1e:50:63:52:12:d6:ea:b4:fd:69:
1d:7e:99:39:22:4f:d0:9f:d6:5a:dc:b5:18:cc:74:
b0:11:52:ac:5f:f5:9c:bc:85:1b:5e:5f:66:fa:b7:
8e:44:99:b6:5f:f9:82:eb:80:b2:21:37:bd:03:a7:
9e:1b:b0:29:3c:34:63:f3:c5:92:56:eb:83:b6:39:
08:58:da:42:92:37:46:ae:e9:cc:71:b8:b7:d3:75:
9e:8f:8d:46:b8:33:43:22:fb:02:61:34:6a:89:f2:
b6:b8:85:75:2f:2e:f2:9e:ed:e3:e4:80:ec:52:92:
1f:9f:e5:98:3c:1c:88:f9:77:cc:34:12:84:d8:d0:
7a:b2:7a:40:8a:90:18:39:fe:0e:a2:91:13:17:7c:
29:fc:a6:df:e9:fb:02:ef:d6:f7:81:f1:8f:9b:37:
e4:28:b4:4e:08:c4:ec:26:7e:a4:62:39:a6:12:cb:
27:5c:06:c5:80:c9:f2:48:00:a3:3a:8e:e3:b2:c8:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:EA:53:30:7C:1E:00:4E:AA:04:0E:71:84:54:88:A0:13:AA:3E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RePqUzB8HgBOqgQOcYRUiKATqj4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:10:dd:26:fd:58:3d:e3:43:0b:b5:2a:4c:b1:7f:06:01:be:
a9:08:cf:5c:f4:d3:fd:ce:15:1d:c8:d1:8b:28:d8:b7:89:f2:
80:4c:bc:a0:0b:43:e3:78:4a:d4:65:be:a9:c0:93:c8:1d:62:
d2:04:34:94:c4:48:27:5b:b0:86:a3:91:26:28:9e:e2:98:b9:
90:4c:cd:6a:d8:1b:8d:69:d5:34:b6:8b:58:15:c6:b4:f3:48:
71:09:69:50:10:c8:9d:e7:93:9a:9e:bb:1b:9f:76:7a:4e:47:
43:39:73:38:eb:df:fc:a6:94:33:37:02:5b:11:eb:1b:1a:e8:
e3:b3:97:f4:20:50:d2:2a:3f:54:5f:f6:a5:b7:26:4a:fa:58:
a8:b9:3b:8e:21:96:5e:ad:b4:c5:f6:91:9a:de:0e:86:81:ad:
82:0c:be:67:39:ab:9f:84:eb:0c:59:c1:7c:2a:d8:40:76:93:
a8:e5:46:51:db:a8:f3:05:22:b8:2d:98:aa:cd:de:ee:c4:67:
55:3f:3e:f0:38:4d:aa:e6:69:71:7a:ee:d0:76:be:81:8d:29:
9c:f8:48:e0:9a:2d:8f:ab:70:75:06:c6:56:81:7c:53:65:35:
00:10:a2:e2:b5:3b:53:02:94:71:53:aa:6f:69:e2:53:cc:6b:
54:7e:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:25:31 2025 by rpki-client