Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vq0tA57pK3-Z6ggGC5yW6iAd5fM.roa
File: vq0tA57pK3-Z6ggGC5yW6iAd5fM.roa (raw, json)
Hash identifier: 9cUGll1+66adSzYBZm0Jm7YLbnZBQ0xn+AEtC/zaMa8=
Subject key identifier: BE:AD:2D:03:9E:E9:2B:7F:99:EA:08:06:0B:9C:96:EA:20:1D:E5:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 410A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vq0tA57pK3-Z6ggGC5yW6iAd5fM.roa
Signing time: Mon 15 Apr 2024 07:22:54 +0000
ROA not before: Mon 15 Apr 2024 07:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16650 (0x410a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 07:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BEAD2D039EE92B7F99EA08060B9C96EA201DE5F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:32:1d:44:24:a7:a5:a4:9b:22:79:d3:8e:
c6:9f:63:72:c2:a3:aa:4a:01:57:3d:a1:77:7c:7c:
89:5e:03:c4:28:68:59:ac:71:48:d9:52:00:f9:c9:
b6:eb:c2:43:0d:6e:1b:57:a7:80:bc:3d:66:4d:dc:
a6:3d:18:9a:9f:57:56:14:97:a4:a5:3c:3a:b9:f9:
b2:17:f7:95:59:d9:de:97:4e:a9:fb:1e:66:e3:db:
0e:83:fe:11:05:66:af:3b:98:e9:84:16:c7:f4:0f:
79:a1:66:12:4f:b1:fa:ff:6a:96:5c:63:36:90:ef:
35:c3:7e:d4:2d:78:53:52:fa:f8:08:dd:95:91:48:
de:9c:0a:aa:ca:b0:dd:05:b4:1d:85:f4:08:1d:a6:
cd:61:87:b2:53:d0:d0:a8:b3:88:ee:7a:c7:8d:1b:
61:1b:2e:46:90:10:e1:64:7a:da:67:3c:99:79:d1:
f2:7b:af:c5:09:fa:7c:20:d7:df:d2:44:9b:2a:49:
36:7e:11:ec:a8:4f:51:89:24:56:aa:08:4b:c6:24:
f2:4a:73:3c:10:d1:bf:05:f3:e4:1e:b8:35:95:c2:
51:23:d0:fd:08:76:65:c1:27:cd:9d:96:ed:22:16:
19:24:3f:71:b6:9d:8c:d8:31:19:cc:e9:c2:fd:e6:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:2D:03:9E:E9:2B:7F:99:EA:08:06:0B:9C:96:EA:20:1D:E5:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vq0tA57pK3-Z6ggGC5yW6iAd5fM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:34:e0:27:b7:32:f8:b7:04:5a:c6:49:f6:b6:5c:be:38:26:
9c:0e:3a:52:3d:ec:1c:59:82:b8:1f:f8:ca:9a:2a:5b:a0:2d:
6a:3e:54:fa:e8:1a:b4:79:1e:6a:1a:46:f6:ef:02:b2:5d:b2:
4b:69:a8:94:0a:6c:3e:7b:fd:37:b0:7f:b3:1c:64:73:c3:ef:
58:3d:e8:43:82:94:dd:fa:ff:f0:56:64:43:04:e0:2c:f4:44:
3d:66:e6:4b:5d:19:e1:d4:cc:66:47:2d:67:df:44:16:6b:12:
b8:bb:51:f4:57:5d:f8:f0:4c:f3:06:cb:e9:52:e0:ca:15:a8:
25:e7:56:d1:20:2b:b7:27:3d:1c:f4:27:44:22:47:78:bb:b1:
bb:bb:bf:dc:92:67:31:1b:cc:6a:18:f5:ab:0a:06:eb:fd:9c:
79:0a:07:0a:1f:be:90:5f:a3:c9:d6:60:ff:23:e9:7f:d6:9e:
0d:53:67:ce:a8:51:28:0b:23:c9:1a:df:53:b2:3b:a4:7e:a2:
11:57:56:6c:56:6a:13:d8:65:ea:cf:5e:4c:cc:0b:12:8f:f3:
f0:7e:f0:c7:d8:c6:4c:ea:be:f5:d0:63:20:07:0c:13:79:4b:
48:e8:72:9b:e2:69:e8:bc:1b:c3:3e:c3:f9:f5:8c:29:2f:15:
69:51:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:49 2025 by rpki-client