Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GdGgFz442wYILnKTFNrEcXmgmBk.roa
File: GdGgFz442wYILnKTFNrEcXmgmBk.roa (raw, json)
Hash identifier: WE36yGEK6Gadx9D8UMs7rQ4upNMOB88PyOjhnfMjro0=
Subject key identifier: 19:D1:A0:17:3E:38:DB:06:08:2E:72:93:14:DA:C4:71:79:A0:98:19
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53CA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GdGgFz442wYILnKTFNrEcXmgmBk.roa
Signing time: Fri 10 May 2024 07:24:02 +0000
ROA not before: Fri 10 May 2024 07:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21450 (0x53ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 07:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=19D1A0173E38DB06082E729314DAC47179A09819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:c5:8a:e1:c0:ed:65:dc:64:b4:a4:6f:ca:
f7:2c:6c:1f:39:56:31:63:83:24:86:b1:93:c3:db:
ea:68:04:14:b2:a3:22:25:8b:5c:a6:8a:48:22:53:
50:17:ba:1b:74:c0:38:7c:19:30:5f:f2:22:bc:fc:
51:0e:ea:50:8a:fe:6a:4b:3d:88:85:53:8c:76:8b:
ba:40:c7:c3:d1:2d:db:16:03:90:37:40:be:77:88:
22:fc:c8:ca:3a:19:83:97:c4:03:ff:e2:c9:22:7f:
b0:88:2c:2c:c0:1a:a2:57:22:17:65:9d:76:a2:2b:
33:08:58:1d:b4:cb:0b:61:4d:fd:49:ee:62:a2:59:
6c:4d:9b:09:33:14:fd:2a:66:ab:50:cc:71:6c:bd:
6c:41:46:a9:8e:9e:7c:9e:bc:cd:00:1c:40:d7:6f:
f2:61:66:0a:c1:ae:f2:ac:81:1c:4b:c2:37:3d:f0:
7a:97:b0:94:70:89:7d:e9:b8:11:d6:d0:8f:97:c9:
7d:6a:e2:23:af:f4:28:63:ab:20:8a:6c:f9:5b:9d:
fb:55:16:f1:93:b5:6d:4e:5e:1f:c2:f3:40:59:45:
b2:96:56:c6:55:57:6a:0a:76:fc:7f:33:50:1d:da:
9e:17:56:14:71:10:6c:50:90:11:37:ca:94:7d:3c:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:A0:17:3E:38:DB:06:08:2E:72:93:14:DA:C4:71:79:A0:98:19
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GdGgFz442wYILnKTFNrEcXmgmBk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:62:1b:ad:0d:38:09:64:cc:3b:62:eb:52:f0:96:5b:8b:c3:
2e:41:43:0e:81:57:54:c7:45:d5:6a:84:40:6d:96:18:e8:8a:
83:91:64:d1:8d:cb:5a:cd:69:8e:51:dc:b4:29:8b:83:43:04:
a5:a5:86:55:5d:78:7c:6d:e0:1e:48:c8:1d:8a:d8:0d:20:a7:
4c:d4:6b:f7:b0:13:22:ba:30:9e:f6:2b:99:4b:c4:36:78:05:
3f:91:c9:16:5b:f4:60:72:cf:dc:9c:17:5f:02:4e:8b:a3:b3:
d8:13:cc:96:fa:0a:c6:25:4c:54:9e:3f:74:19:b4:43:1f:f5:
53:24:d9:be:37:3f:75:13:30:ab:c8:24:a1:cf:12:eb:40:77:
60:02:0a:68:86:bb:83:6c:be:f1:dd:4d:0d:7d:4a:12:7c:dc:
46:c4:de:41:99:1b:a2:89:f2:b0:4c:46:19:67:bf:11:8a:a6:
02:06:5b:82:04:a1:ea:f9:ce:fa:e7:3c:a9:70:4a:7f:f2:f3:
9f:e7:37:f7:43:73:e5:10:d3:98:0e:39:7f:73:94:34:d8:1a:
ac:cb:16:13:6e:d3:e3:9c:29:f7:44:66:e0:95:07:0d:a0:59:
71:af:f4:48:fa:99:43:a4:78:ae:bc:f3:6e:ed:93:49:68:2a:
56:d8:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:41 2025 by rpki-client