Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DvmTvlhEDQDfiW6PSBZ2UF5wLEk.roa
File: DvmTvlhEDQDfiW6PSBZ2UF5wLEk.roa (raw, json)
Hash identifier: HzUe0kj8htvo0Eg1HI91Hp4jYR3tBfaSHD/4yzB8PTM=
Subject key identifier: 0E:F9:93:BE:58:44:0D:00:DF:89:6E:8F:48:16:76:50:5E:70:2C:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DvmTvlhEDQDfiW6PSBZ2UF5wLEk.roa
Signing time: Wed 17 Apr 2024 17:52:59 +0000
ROA not before: Wed 17 Apr 2024 17:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17118 (0x42de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 17:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0EF993BE58440D00DF896E8F481676505E702C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:12:f3:3a:3f:c3:b3:a1:02:80:35:2e:49:
20:86:8f:00:c1:91:f9:2f:6f:72:98:d6:96:ce:0d:
e4:fd:94:3b:fc:9f:84:06:56:5c:5f:56:b5:40:7f:
7f:14:52:a0:8c:6c:aa:c0:17:8e:79:5b:d3:c7:36:
f3:ca:a6:b5:f6:36:47:6d:70:c6:25:49:2a:bd:11:
77:36:8d:fa:79:cb:71:bb:27:2f:60:d3:13:04:93:
48:ed:6d:27:f5:aa:89:d2:ea:e1:2b:1b:db:cb:9b:
7b:53:f5:5b:0b:49:67:c4:92:bb:38:b0:5d:b3:af:
ad:db:38:bb:d8:9e:08:77:8a:1c:10:b6:6d:78:7f:
1a:94:cf:80:10:e0:02:ac:ec:48:c7:19:4e:3d:a0:
62:fc:a5:ad:cd:5b:8d:02:df:3b:26:1a:6e:6c:27:
38:0a:41:38:fc:46:7f:22:74:87:a0:24:25:77:07:
90:b7:41:26:e0:59:a9:0b:d4:a7:9c:30:64:88:77:
21:b3:19:d5:63:ee:a5:d5:73:9c:34:16:15:19:9f:
cf:f6:63:25:39:4c:00:6d:d0:51:70:ce:03:cb:98:
c1:84:a1:e5:e3:cd:f1:9d:95:2d:4c:77:20:1e:b4:
68:4c:84:52:db:1c:cd:37:57:1e:97:06:57:1d:2c:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F9:93:BE:58:44:0D:00:DF:89:6E:8F:48:16:76:50:5E:70:2C:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DvmTvlhEDQDfiW6PSBZ2UF5wLEk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:05:d7:a8:54:9a:9f:40:b3:de:d2:69:03:0a:2d:e4:d5:fa:
cc:ad:6f:c7:b9:72:51:78:84:b7:ee:8c:6a:92:a5:45:0b:08:
df:0f:f7:d7:6a:cf:d6:7e:2e:3d:71:fe:2a:f7:c4:da:81:f0:
45:f4:00:b7:05:23:e7:84:77:08:de:05:44:d5:f5:5e:38:d9:
3b:4c:91:37:e6:ec:d0:a7:7e:49:91:8e:2d:7d:63:89:ca:53:
27:63:61:3b:74:1e:be:ba:1e:c9:83:61:43:6d:36:e6:52:47:
f9:a9:de:ba:2b:08:dd:68:c4:82:40:02:54:62:68:f2:ff:79:
09:be:35:43:cf:e0:92:7e:1b:4a:bc:61:69:94:0d:0c:11:86:
2e:14:3b:32:8d:13:22:7f:91:37:b8:ae:0c:73:c0:bb:58:d2:
ad:b7:38:cd:db:0e:80:8c:19:d1:5d:35:fe:2e:43:86:8c:ac:
61:00:00:1e:64:2c:d5:0a:a0:d4:8b:e3:4e:3d:9e:0c:98:53:
ba:19:53:1e:04:8f:d9:23:2a:b1:43:0c:67:73:2e:d1:3d:c7:
15:f9:fa:e6:a2:6f:8a:0e:63:a5:59:65:de:18:f2:6e:4f:9a:
ef:8c:94:1c:28:ec:b1:2c:66:7a:a4:a1:58:cb:26:1e:59:64:
f2:02:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:51 2025 by rpki-client