Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Dge10xf9ZfjblIJHZ0kA0x43W5s.roa
File: Dge10xf9ZfjblIJHZ0kA0x43W5s.roa (raw, json)
Hash identifier: Q84sfqhVon2NYu67x0RzlfqZOmYsa3/TBMQ2NUBG9KU=
Subject key identifier: 0E:07:B5:D3:17:FD:65:F8:DB:94:82:47:67:49:00:D3:1E:37:5B:9B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 513E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dge10xf9ZfjblIJHZ0kA0x43W5s.roa
Signing time: Mon 06 May 2024 21:53:53 +0000
ROA not before: Mon 06 May 2024 21:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20798 (0x513e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 21:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E07B5D317FD65F8DB948247674900D31E375B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:36:82:c6:05:b8:03:c9:15:35:f0:c1:98:
df:2c:4d:6b:31:e6:c9:16:68:ab:49:55:7b:99:32:
fb:6e:39:22:a5:ab:a4:69:53:c0:75:3b:4d:7a:09:
c3:15:73:00:62:e9:b2:0b:ef:e0:d0:52:be:59:d0:
1c:b9:66:d6:9e:b8:63:ab:5d:02:aa:dc:53:1b:d7:
57:c2:64:45:5a:89:bf:56:ce:bc:d2:0d:b5:a4:7e:
06:3c:63:a3:a9:97:bd:db:08:c0:ff:1e:4a:04:44:
7b:b1:15:27:c4:c4:e6:89:d7:9b:d7:f0:1b:1e:43:
7b:8d:73:09:99:70:13:17:5a:5e:2d:a7:86:9e:a9:
bf:ec:2c:85:d7:0a:de:5d:7e:a1:2e:e9:ae:38:78:
6e:81:f8:81:e9:02:8d:e2:0c:4f:5d:cb:e0:6e:a3:
82:ed:f1:d2:2b:f4:dc:43:cd:5c:da:7c:b7:7d:69:
65:36:f2:b7:85:88:52:61:4e:a2:ef:34:14:c4:99:
7f:fd:5a:0d:6c:2a:67:e2:20:75:f4:0c:b4:1b:1d:
85:84:3b:58:35:db:27:a2:5f:af:bb:53:96:a6:39:
64:d2:71:5d:34:93:a9:b4:ad:60:38:e6:d7:e6:d6:
73:62:c5:22:be:a3:be:c3:72:40:f2:e6:f8:61:79:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:B5:D3:17:FD:65:F8:DB:94:82:47:67:49:00:D3:1E:37:5B:9B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Dge10xf9ZfjblIJHZ0kA0x43W5s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:a1:00:a1:9c:6a:a3:14:08:8f:0f:b8:bc:d2:59:42:d2:ba:
80:f4:9f:31:41:30:80:83:3d:82:c9:4d:46:38:d7:e9:44:f0:
f4:a0:36:61:37:f6:09:31:79:80:4f:1c:af:a4:53:e4:1a:03:
fd:f8:59:f5:c0:43:7f:88:0f:f6:a5:c2:c9:9d:68:68:f3:a4:
94:f0:2c:3e:5a:b6:4d:e0:8d:57:2a:50:f0:4f:54:5b:13:c7:
4e:9f:63:c9:bd:70:0d:9a:86:73:81:8d:7a:a5:40:90:93:4a:
b5:a7:26:8f:af:4f:4b:65:d3:b7:0f:78:f1:f8:39:d4:8d:45:
42:c2:23:85:b9:f7:99:fe:14:ab:85:47:97:12:fa:69:a1:cb:
06:7f:49:39:12:62:6a:e5:1a:a3:81:ad:22:99:66:95:8b:13:
3c:e2:44:13:66:2e:1e:20:17:a0:91:68:69:44:ee:e5:ff:82:
a1:67:e8:c8:9a:b1:b2:dc:cd:c1:7d:eb:8a:5d:1e:fc:4a:3b:
9f:3a:b0:bf:d0:69:b5:5d:55:3a:b7:41:f7:5f:e1:7e:bf:47:
b3:2f:91:86:4e:e3:06:ea:d0:5d:34:b9:ff:4b:b3:1f:12:5f:
e1:a4:6a:73:c4:9d:2b:e5:37:8d:af:33:74:b8:8b:24:f5:9b:
10:34:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:19 2025 by rpki-client