Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZtH9KQ7DCTW3HrB2Tl_8hAeuH8c.roa
File: ZtH9KQ7DCTW3HrB2Tl_8hAeuH8c.roa (raw, json)
Hash identifier: szsSkkPzM0lUyXBCGYxiU8GnZQJlSBMZf5xFxW6sOqw=
Subject key identifier: 66:D1:FD:29:0E:C3:09:35:B7:1E:B0:76:4E:5F:FC:84:07:AE:1F:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 447E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZtH9KQ7DCTW3HrB2Tl_8hAeuH8c.roa
Signing time: Fri 19 Apr 2024 21:53:12 +0000
ROA not before: Fri 19 Apr 2024 21:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17534 (0x447e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 21:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=66D1FD290EC30935B71EB0764E5FFC8407AE1FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:18:85:fe:8b:09:ff:79:2b:73:b9:12:7c:
e9:d5:68:d7:74:ef:2f:c7:01:da:d3:6d:6e:96:78:
a7:2a:e3:e4:97:fc:7a:f4:e0:62:ca:91:a6:af:b7:
2b:34:c9:94:14:4c:4c:6c:28:f8:a0:60:6a:20:be:
45:05:85:6a:65:82:20:18:7d:40:5d:da:f4:4c:56:
5a:4a:c2:50:72:a0:a9:1c:fe:06:95:ff:99:e2:d5:
fb:09:02:74:3d:68:2b:c8:e2:de:12:51:70:68:99:
59:5e:43:b6:87:08:81:08:34:0d:d2:db:58:52:c9:
fa:4d:39:76:ec:dd:bc:b3:90:87:23:6b:e4:10:e0:
7a:69:e4:7a:de:03:a0:32:8d:6a:36:63:26:33:e5:
08:62:f0:6b:2b:a4:1f:9f:3f:14:fb:22:bd:e0:29:
88:6a:08:81:76:62:53:b4:43:e1:09:62:78:bd:67:
da:58:0f:27:80:db:b8:8a:c9:a6:5c:4c:40:35:ed:
09:ea:a6:71:c5:63:67:3e:a0:4c:70:41:b9:58:af:
47:dd:af:2b:77:87:ba:e9:ce:e1:d9:21:1d:e6:ec:
9c:13:2b:2f:cd:9b:62:ff:37:02:45:82:b4:f2:be:
4c:84:9f:7e:ff:0b:9b:41:4a:42:d0:ec:86:cf:1e:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:FD:29:0E:C3:09:35:B7:1E:B0:76:4E:5F:FC:84:07:AE:1F:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZtH9KQ7DCTW3HrB2Tl_8hAeuH8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:fc:ba:58:7e:ae:2f:96:b4:b9:b4:6c:66:87:d3:3d:6c:48:
48:c4:98:68:5b:57:c1:fd:31:b4:20:8d:40:dd:78:21:91:6b:
a0:ea:f6:cc:be:44:86:05:6e:d6:8b:ee:d7:20:71:da:b8:51:
fa:c3:27:07:a1:7d:27:00:aa:46:59:ea:33:70:b5:be:04:b4:
71:55:6d:9f:7e:b6:37:c7:6d:cd:b6:ca:51:0c:31:f7:39:99:
2c:91:c1:33:d5:9d:48:df:2b:9c:3f:6d:5a:19:0e:93:75:8c:
5b:93:e9:06:99:74:50:d2:c0:54:40:7a:d1:3c:08:dd:af:56:
b7:95:4a:6f:6d:7c:ff:e7:00:6b:9e:83:7a:33:e2:c4:44:52:
69:16:e6:d4:76:43:b4:b6:55:5b:1d:7a:42:19:4a:a9:d5:29:
75:e1:f7:31:63:0f:64:f5:8f:2f:e7:40:51:7d:9d:7e:c1:7f:
39:9a:32:35:d1:bb:bb:d6:8d:fa:99:e5:92:c8:59:1d:8f:8c:
f9:7d:90:0d:89:78:78:55:7f:37:ae:eb:fc:df:ce:55:db:42:
01:51:dd:a5:05:3b:40:2c:58:33:90:f7:9a:2b:f7:26:59:22:
b2:54:66:7a:d8:99:24:ba:66:32:e6:ef:7b:09:31:a0:7d:5f:
1e:f3:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:42 2025 by rpki-client