Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dGmvepiV0ZrTfqDjYJr2_CCn0Rc.roa
File: dGmvepiV0ZrTfqDjYJr2_CCn0Rc.roa (raw, json)
Hash identifier: rMg0C1in9wFl92bnc2wRJYCdDD24cyxxnOSzTZOQ4gw=
Subject key identifier: 74:69:AF:7A:98:95:D1:9A:D3:7E:A0:E3:60:9A:F6:FC:20:A7:D1:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43BA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dGmvepiV0ZrTfqDjYJr2_CCn0Rc.roa
Signing time: Thu 18 Apr 2024 21:23:09 +0000
ROA not before: Thu 18 Apr 2024 21:23:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17338 (0x43ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 21:23:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7469AF7A9895D19AD37EA0E3609AF6FC20A7D117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:69:2d:85:af:16:ff:16:71:75:9c:17:d0:
8c:ae:e1:a7:59:cc:2b:c2:3c:db:3d:1c:61:fc:5f:
e7:e7:03:52:d8:3f:8a:48:e6:1a:07:fa:62:f5:0b:
7c:0a:7c:a2:01:c1:37:b8:4b:fb:1e:91:ad:f9:09:
79:53:40:cd:8b:e7:7d:d7:2e:fa:92:b0:80:c1:bf:
e8:5c:86:06:12:74:75:b6:59:db:8a:70:1f:4a:85:
a7:e4:ea:da:6b:97:ae:57:03:02:e2:61:f6:8d:de:
d8:fc:d3:eb:a7:f3:a1:87:20:d9:22:26:b8:93:1b:
f7:ce:3e:36:14:85:18:20:be:d1:57:3e:d0:58:54:
4f:b7:b6:e2:8f:d4:2a:89:6d:ae:40:50:9a:53:df:
37:19:92:83:b7:07:ea:6f:ea:89:bf:06:70:75:6b:
b7:b8:bd:fe:dd:f9:90:48:bf:c7:69:6c:30:8c:13:
03:e6:ec:d6:c5:94:8d:bc:e6:96:49:da:6d:74:59:
77:1d:89:40:00:81:f1:f9:50:19:6c:f3:8c:19:0e:
e9:de:88:e1:de:fc:e5:f1:9a:42:26:15:e6:9d:06:
d3:3a:e6:f5:83:83:55:8b:99:2e:35:3a:68:8d:0d:
bf:84:d9:34:e6:ba:39:64:59:de:8f:85:93:5f:6d:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:AF:7A:98:95:D1:9A:D3:7E:A0:E3:60:9A:F6:FC:20:A7:D1:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dGmvepiV0ZrTfqDjYJr2_CCn0Rc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:ee:1a:9a:66:78:c5:5c:02:c7:e3:50:db:56:47:8d:7f:5f:
9a:6e:23:7b:aa:e4:23:74:a6:ea:1a:8c:1a:08:09:2d:0a:2a:
08:45:ad:ce:7f:85:ab:31:47:9e:7c:e1:39:c1:f4:1b:28:59:
d8:d0:bc:7d:1d:c5:39:48:e8:a7:2e:de:21:97:93:5e:8d:d0:
70:68:dc:53:c7:01:6d:6c:25:f5:66:4f:9c:38:a3:c8:9e:7a:
45:fc:a1:86:6c:03:36:df:36:20:8c:6e:ef:24:5f:01:a5:52:
ed:25:56:df:cd:ec:d0:36:77:64:be:55:c1:d3:89:02:cd:22:
3e:67:41:34:f2:1f:23:4a:08:20:7f:84:56:cb:8e:11:5c:27:
81:d4:b1:c8:35:fd:50:df:46:07:92:69:7d:3a:73:9a:54:ca:
25:86:a1:03:9a:a2:af:83:8e:57:1d:35:87:89:e6:ed:82:da:
e8:51:ca:b1:73:e0:76:73:7e:c7:e8:b3:3c:9b:96:58:cf:17:
9f:a5:79:f5:63:18:a8:5c:8b:6b:4a:77:2b:a9:27:d6:89:74:
a3:b2:2e:fd:49:f1:9a:f1:31:20:10:73:e2:07:21:43:66:66:
fa:a1:e9:6d:de:05:fb:08:99:4c:a1:9a:88:b0:a9:44:23:50:
fb:b0:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:26 2025 by rpki-client