Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/14jIYroD35xdUqf70jYQNQL-kCE.roa
File: 14jIYroD35xdUqf70jYQNQL-kCE.roa (raw, json)
Hash identifier: NDakTaIZHkFAH2huUP0EAsHdcyBqIogstbMckFBmX8g=
Subject key identifier: D7:88:C8:62:BA:03:DF:9C:5D:52:A7:FB:D2:36:10:35:02:FE:90:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E62
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/14jIYroD35xdUqf70jYQNQL-kCE.roa
Signing time: Fri 03 May 2024 02:23:41 +0000
ROA not before: Fri 03 May 2024 02:23:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20066 (0x4e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 02:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D788C862BA03DF9C5D52A7FBD236103502FE9021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:bb:8e:f0:9d:74:83:db:98:69:5a:76:19:
4b:21:a0:f7:36:06:3a:fd:d9:93:e6:48:d5:04:24:
11:b2:db:8a:db:3f:82:9f:f3:a4:3a:c4:8e:55:9e:
4e:38:b7:e2:13:af:9e:b2:4c:39:d6:36:52:56:78:
17:3b:75:a6:ea:35:7f:e1:d2:f5:41:c2:bb:9c:c5:
a0:c4:39:a5:71:b5:4a:0b:89:0a:f3:49:3a:62:6e:
66:34:76:5d:07:6d:c1:69:fd:a7:36:0d:b0:7d:51:
ee:79:06:3e:b1:ba:be:45:6f:6a:c8:d4:79:c2:9a:
f3:d2:70:8b:6b:6e:6c:04:32:9d:1e:c4:69:d9:c3:
d0:92:7c:cd:e3:1a:53:90:ea:8d:d7:83:e9:74:ef:
40:ae:d7:9f:15:b5:7e:72:05:54:41:db:46:31:e6:
f3:cd:ed:28:e2:be:fe:35:4f:94:cf:2e:ee:4c:a0:
4d:61:ff:07:a3:ce:63:8d:f3:a3:5c:a6:41:81:23:
4a:25:51:66:ef:79:a8:23:26:5c:8c:d8:09:70:bc:
fa:48:31:41:dd:b5:3a:93:f3:b4:e6:8c:fa:bd:85:
80:48:b4:e1:c3:04:e3:22:a1:bc:c8:39:5c:4b:dc:
64:4a:3b:2c:82:a9:74:bd:00:aa:b8:79:64:c8:3c:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:C8:62:BA:03:DF:9C:5D:52:A7:FB:D2:36:10:35:02:FE:90:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/14jIYroD35xdUqf70jYQNQL-kCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:1f:85:b1:79:29:12:78:e7:50:ca:5a:b8:18:4c:75:9b:ef:
7a:b4:1c:b0:9a:84:5c:e9:ce:4c:a7:2f:26:5c:4f:41:3b:13:
65:e8:3c:ed:53:57:b3:36:4c:f4:c5:26:07:6d:3d:f3:3c:cf:
bc:e9:52:82:52:67:e8:b6:cb:c6:e2:50:ce:ae:ec:4f:79:f7:
6f:fa:37:ca:86:09:a5:7f:b7:64:b4:2a:32:6d:96:ef:0d:a9:
51:e4:af:b2:7f:2b:ea:ca:07:d0:ae:0a:8a:60:ab:a0:7f:d1:
62:20:9d:cb:59:64:9e:a9:28:bb:57:21:d0:d7:c5:d0:17:96:
23:eb:52:47:ab:38:ec:fd:d0:b6:7c:3a:07:4b:b6:9b:b2:7b:
80:95:e8:7d:d5:a8:e2:d9:19:c7:b1:54:d3:29:ff:92:90:5a:
9d:19:fe:dc:67:df:68:b0:e8:52:fe:40:dd:10:32:b4:30:aa:
9f:d3:4c:d3:3d:28:e1:03:0c:22:39:74:77:0a:3a:12:99:36:
9a:51:a5:3a:e3:3f:a0:08:88:ab:dc:f9:42:6e:a3:9a:9a:d8:
53:fa:7e:fd:66:42:f9:81:9d:c1:02:af:24:e8:01:0f:bd:86:
58:36:4b:aa:37:fc:0b:0b:0d:c6:d0:29:0e:91:e0:f3:48:e6:
62:c8:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:32 2025 by rpki-client