Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fWyuq1ZledFn6QX7fEvWkb0DXmM.roa
File: fWyuq1ZledFn6QX7fEvWkb0DXmM.roa (raw, json)
Hash identifier: 0+MZ60uMEr+/d0nNc5IPgfwzcSgzsiDwg4hIyRWnKcs=
Subject key identifier: 7D:6C:AE:AB:56:65:79:D1:67:E9:05:FB:7C:4B:D6:91:BD:03:5E:63
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B82
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fWyuq1ZledFn6QX7fEvWkb0DXmM.roa
Signing time: Sun 07 Apr 2024 22:22:36 +0000
ROA not before: Sun 07 Apr 2024 22:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15234 (0x3b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 22:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7D6CAEAB566579D167E905FB7C4BD691BD035E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:33:1c:4e:47:65:b8:8b:bc:86:eb:60:dc:
f7:fb:58:cd:42:f2:92:0a:b0:29:94:5e:2d:dc:5f:
f5:fd:6d:df:b9:b8:6e:74:a1:36:ae:d6:cd:01:5e:
bb:fa:bc:83:46:ad:ff:31:12:61:0a:7f:22:3a:56:
21:be:50:56:1e:83:78:fb:6f:5b:72:66:9e:53:52:
a1:33:fa:af:dc:a4:14:4b:cc:ae:00:35:8a:5b:9f:
03:89:18:ce:37:2c:09:69:b1:d4:46:7e:91:9d:eb:
68:c8:71:3a:11:e8:19:85:68:c0:c8:5e:5b:94:ec:
42:af:2e:d6:3e:90:28:cf:f6:90:d8:e5:0e:27:b3:
49:58:c3:b9:a9:c5:d3:b5:b9:47:9e:f1:5e:27:2e:
0c:8d:7d:c9:30:20:4c:f3:86:26:a5:f8:35:01:f4:
1e:99:db:13:d2:45:24:4c:fb:9c:01:5f:4d:1f:91:
ba:0e:3b:36:50:fb:d8:8c:28:98:23:75:96:b2:ca:
06:02:5e:78:3c:2c:f9:10:78:cd:76:86:57:0f:b5:
f3:23:e1:b0:c1:39:eb:13:46:8a:13:de:c0:84:0b:
fb:4c:91:5f:65:a4:14:e6:c0:bf:7b:79:cd:1b:84:
38:8f:52:a8:51:ea:1e:72:b2:cb:12:22:e6:ac:04:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:AE:AB:56:65:79:D1:67:E9:05:FB:7C:4B:D6:91:BD:03:5E:63
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fWyuq1ZledFn6QX7fEvWkb0DXmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:ef:db:14:ee:a6:27:f2:a5:5f:c9:4e:2c:5c:26:cd:4c:27:
20:5a:9c:e4:50:38:6e:eb:5d:8a:9e:23:a1:f4:98:d0:74:8d:
3e:8b:f6:62:9a:42:db:34:43:bb:30:aa:79:60:63:1a:08:c8:
f6:f2:c4:e0:e6:d6:05:ff:ee:11:4e:81:28:9f:9a:ee:72:af:
f2:bc:4b:37:54:b5:b1:dc:c8:61:f3:30:3e:cf:18:5d:7b:5b:
40:c0:bb:a9:f9:8c:9f:23:af:85:84:69:89:07:9a:ee:a7:3e:
85:90:43:71:52:ff:04:0d:e3:3e:ab:8a:8e:b2:05:18:b0:f8:
c5:8e:72:7d:cc:f0:ff:58:56:a0:fb:d8:37:f2:a5:b6:f8:62:
c1:c0:11:87:5f:13:4e:47:2f:00:b2:31:a4:3c:94:8f:0e:6b:
64:f7:ba:53:50:fe:c3:61:12:f4:e1:08:3d:12:94:4d:c8:ee:
fd:e8:b2:10:5f:f7:b0:82:64:29:61:51:a6:27:78:0e:97:f5:
55:e7:27:7d:98:4c:0c:c9:76:a3:4f:d0:10:d9:a4:0c:cd:05:
1b:e0:bb:86:af:db:01:bb:1f:66:cf:d6:d4:b5:31:0b:aa:9c:
06:19:15:1f:93:08:02:03:8f:e5:55:12:9e:79:34:1e:da:4d:
7b:9b:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:59:09 2025 by rpki-client