Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yus_IuHIdvlXsd5GSN2Drt3KdLY.roa
File: yus_IuHIdvlXsd5GSN2Drt3KdLY.roa (raw, json)
Hash identifier: 8maEjlw/0GGr9Y0Hc/FbP5qJtv2Pq4+2Wb+8W3B0qXg=
Subject key identifier: CA:EB:3F:22:E1:C8:76:F9:57:B1:DE:46:48:DD:83:AE:DD:CA:74:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 484E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yus_IuHIdvlXsd5GSN2Drt3KdLY.roa
Signing time: Wed 24 Apr 2024 23:53:16 +0000
ROA not before: Wed 24 Apr 2024 23:53:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18510 (0x484e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 23:53:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CAEB3F22E1C876F957B1DE4648DD83AEDDCA74B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:f6:f5:46:26:46:9e:09:07:ad:de:22:7b:
d8:21:72:5d:77:bd:25:72:3b:1c:95:1f:00:01:58:
66:b5:87:6d:3a:75:b7:d9:08:f1:30:4d:49:3d:aa:
be:92:12:40:51:f2:d3:5a:33:a8:84:37:ca:e8:5a:
94:49:89:4d:f3:8e:7e:b9:c9:be:d0:e5:8b:74:f8:
b0:1b:5c:dd:26:21:ee:c8:c2:28:ff:60:68:b6:d4:
cd:43:ae:9d:5a:b6:a8:cd:ed:53:2e:8a:5e:a7:5d:
99:b2:75:aa:40:3f:98:97:bc:1d:fb:48:74:e4:6c:
db:6a:97:11:5c:c6:0a:99:40:e5:2b:90:21:15:24:
cc:98:8d:81:34:9e:cc:b7:2a:3c:a3:ba:e6:3b:30:
42:ce:57:e8:ae:10:82:5a:25:bf:af:e4:9d:17:fa:
39:f5:13:d6:02:d6:47:7d:50:dd:de:28:16:e2:81:
cd:c8:27:8c:cc:f7:6a:f5:2a:f3:d3:ab:2b:3b:a2:
64:23:25:d2:ce:3b:29:60:45:9b:00:16:ea:86:0c:
9c:4a:51:b6:56:b9:63:79:be:86:7c:63:1e:2a:f9:
fe:48:aa:04:84:c8:46:78:f7:34:d1:db:b8:e2:2c:
c5:5c:31:08:48:cf:80:3d:e0:23:29:ea:11:5c:c9:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:3F:22:E1:C8:76:F9:57:B1:DE:46:48:DD:83:AE:DD:CA:74:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yus_IuHIdvlXsd5GSN2Drt3KdLY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:10:6c:9b:26:a4:13:46:fb:08:2d:c9:cd:f0:00:7b:0c:9d:
85:5b:27:f2:08:b9:45:ba:d8:d8:f4:0c:73:1e:4c:f2:1a:4a:
67:90:15:cc:6d:a5:3f:5f:29:83:5a:a9:62:ab:56:d4:e9:7e:
6c:ec:7d:5a:28:94:5f:05:d4:03:84:2b:35:79:cf:c0:48:62:
24:b8:7c:06:cf:9d:bb:69:0b:54:da:9f:cf:d4:25:9d:c5:3d:
c2:00:10:19:d6:a7:f6:51:fc:44:db:df:1d:a0:4f:5a:1b:20:
4e:ec:c1:67:6a:51:69:93:e5:dd:4f:e0:8c:8d:79:a4:51:a2:
43:7b:70:8c:0e:58:8c:40:db:96:c7:52:4b:c2:26:05:2b:64:
fc:82:60:6e:74:89:a2:65:f6:ae:e6:e3:9c:51:57:aa:5b:12:
dc:77:86:4e:87:07:55:f4:9d:18:32:36:82:d6:8a:8f:ac:5d:
36:43:3e:87:c9:24:7d:63:cb:0d:ff:84:5a:c3:ff:0d:42:29:
75:15:b3:68:be:47:d5:bb:0c:80:0c:8c:19:d6:8d:69:9f:81:
2f:53:bf:97:42:fd:62:52:ca:3d:c7:fb:5c:e6:cc:f2:54:49:
ec:88:9d:54:3c:ba:34:9b:85:88:60:8b:26:76:98:e2:f8:71:
d4:6f:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:07:13 2025 by rpki-client