Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cyAKSkICGlA-jPDO1MmPFu_5ReA.roa
File: cyAKSkICGlA-jPDO1MmPFu_5ReA.roa (raw, json)
Hash identifier: EOAJOZH3F8ErRHjtp54dVGb6G1Yg/tksSW0ODgRqjgY=
Subject key identifier: 73:20:0A:4A:42:02:1A:50:3E:8C:F0:CE:D4:C9:8F:16:EF:F9:45:E0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57C2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cyAKSkICGlA-jPDO1MmPFu_5ReA.roa
Signing time: Wed 15 May 2024 14:24:12 +0000
ROA not before: Wed 15 May 2024 14:24:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22466 (0x57c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 14:24:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73200A4A42021A503E8CF0CED4C98F16EFF945E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:ff:22:fc:e1:5f:f3:a0:a6:d6:7f:45:da:
31:6a:ff:9c:d1:24:ad:5a:00:be:fc:27:be:7d:ac:
15:9f:5e:00:65:17:b8:7b:22:3f:21:0f:66:c7:a2:
b2:4c:56:49:02:19:ec:fe:60:b5:38:51:3e:3e:85:
70:d1:a8:94:4a:84:ed:55:0d:36:ad:99:7e:3a:36:
e5:8b:cf:7e:3d:8c:f9:6d:3a:78:99:42:45:2a:8e:
0c:fd:e0:26:0f:7c:07:5b:8d:b3:22:19:5f:8e:84:
d3:89:41:0e:b9:1a:39:42:73:45:2c:29:99:bf:07:
1e:12:c7:58:b1:21:d0:43:f8:1a:3c:07:a7:02:cc:
66:64:0f:e3:ad:22:e1:19:97:a4:10:77:0b:d1:1b:
4a:02:a7:76:e5:00:3a:59:0d:52:7f:a6:b1:f9:04:
69:5e:f1:01:a6:9d:83:c0:9c:cd:32:f8:4b:17:40:
38:39:14:23:bf:53:6e:14:13:4e:36:a9:8e:da:d1:
8e:ef:31:dc:7b:91:34:02:a7:18:89:e6:6b:9a:f0:
a4:4b:fb:d4:5f:4a:4c:6f:8b:56:09:bd:0e:5e:f2:
ac:f7:12:c0:ed:68:68:d2:b2:ea:e9:d4:51:46:0b:
1e:e6:59:bc:09:98:e2:ad:17:08:ac:d1:e6:19:05:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:0A:4A:42:02:1A:50:3E:8C:F0:CE:D4:C9:8F:16:EF:F9:45:E0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cyAKSkICGlA-jPDO1MmPFu_5ReA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:7d:01:c2:07:81:2a:05:18:24:27:95:84:fd:c9:04:7d:9c:
9c:4a:5d:a7:fa:27:7e:a0:af:9a:5c:3e:3f:77:f9:d2:8f:08:
c9:7b:cc:31:1b:ef:7a:68:6e:1b:f5:6c:ec:b4:dd:51:e9:65:
fe:4e:7c:27:c0:2d:82:a0:c6:64:46:90:36:b3:aa:3b:95:56:
af:8b:26:64:14:05:7b:8d:99:26:0f:ec:b4:0e:81:5d:d8:2c:
cd:ef:05:3d:47:7d:93:63:5c:56:a3:70:ec:8c:a7:62:c2:36:
23:3e:b9:81:66:11:7d:57:fd:84:8c:30:25:cb:51:c4:4d:2a:
d8:dc:c4:6a:fa:b7:79:fb:14:64:bc:17:c8:f8:20:e7:75:e2:
77:6a:8d:a4:93:29:b9:2e:4d:26:21:f8:8d:64:fe:2b:73:4a:
fd:a4:f1:30:97:96:13:8f:18:e5:c7:9a:a9:31:60:90:43:1e:
9f:24:d8:88:49:47:af:b4:47:0f:8e:b4:87:45:60:1a:b8:31:
a1:ee:32:7f:79:a2:bc:99:4b:c7:ac:28:21:86:49:ad:64:82:
fb:a3:89:ab:8e:28:7d:bf:9d:44:fd:ef:e3:92:e7:ac:5a:c2:
ac:17:cb:90:e3:c0:f9:9d:6a:53:83:d4:85:fd:07:a3:4e:20:
b6:2a:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:31 2025 by rpki-client