Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OQKSE33s5ZwBTpHBVoimcyCA_tQ.roa
File: OQKSE33s5ZwBTpHBVoimcyCA_tQ.roa (raw, json)
Hash identifier: A0V92gGaqho3ok5qWgj5AH29RdKTGCAmtGf1avdStj4=
Subject key identifier: 39:02:92:13:7D:EC:E5:9C:01:4E:91:C1:56:88:A6:73:20:80:FE:D4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B8E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OQKSE33s5ZwBTpHBVoimcyCA_tQ.roa
Signing time: Sun 07 Apr 2024 23:52:34 +0000
ROA not before: Sun 07 Apr 2024 23:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15246 (0x3b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 23:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=390292137DECE59C014E91C15688A6732080FED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:40:92:45:15:cd:2b:c8:db:00:82:86:a2:
20:7e:0b:05:56:96:48:ce:92:7b:5d:80:a4:78:a0:
a3:8d:4a:3b:3d:ea:e4:7e:40:ec:d9:d3:8b:2a:d1:
d4:cc:15:2d:99:5d:d1:b4:2f:21:14:0d:8c:61:54:
30:c5:92:a0:2c:37:d7:ca:fe:6e:69:c3:dd:f1:57:
4d:5f:06:a9:37:20:63:24:32:d1:f5:57:37:ac:1b:
b1:85:8e:ca:e9:5f:23:f3:2c:aa:7f:9b:82:c8:68:
7b:8f:c8:b7:21:e5:08:41:0d:28:ab:d6:10:41:01:
57:ab:8d:39:d1:7e:0f:f1:f3:3c:c9:7a:ed:6d:3d:
27:a5:b0:66:ca:bd:93:b7:de:58:23:a9:5a:06:0c:
68:d1:f2:f2:a4:1a:2f:2c:95:57:d3:cf:7d:47:80:
df:bd:4c:a0:02:71:61:e3:7f:40:30:8e:e1:36:a5:
6d:50:36:3b:17:3f:c6:04:68:93:f0:59:94:cd:9b:
95:10:5e:da:9e:cf:cd:a0:73:95:ad:22:0c:93:75:
e1:5c:bf:ff:31:97:06:58:9a:f6:25:19:b8:aa:5f:
16:04:9f:b5:e8:f8:28:c5:aa:b2:d8:26:0f:19:16:
9b:c2:d2:31:95:0d:ed:4c:a1:ef:4c:e6:a8:e1:22:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:92:13:7D:EC:E5:9C:01:4E:91:C1:56:88:A6:73:20:80:FE:D4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OQKSE33s5ZwBTpHBVoimcyCA_tQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:8b:68:cf:84:0d:0c:07:3d:44:68:49:03:ce:7b:4a:ab:48:
4b:75:7d:32:1c:84:c3:33:5b:67:b3:3d:c6:0c:bf:7f:0a:75:
2e:a4:e7:4e:2c:a5:d5:ae:1d:67:f4:13:f5:a7:ec:c6:0d:de:
16:8a:3f:eb:43:a3:7d:4f:81:3d:95:89:d1:78:21:36:5e:d2:
db:ed:f6:89:9d:4f:69:cf:a0:89:ed:bb:04:54:92:fd:21:2a:
dd:49:0b:77:92:e3:53:11:3b:fa:ae:6e:26:ae:7d:6a:54:76:
9b:a2:cb:5e:71:10:d2:43:66:f1:d2:ce:f4:f3:45:18:77:9a:
72:d9:6d:1c:92:05:ba:46:d7:59:9e:b5:2f:bb:e7:7c:50:c8:
84:a0:b1:ff:fc:af:de:65:3e:67:04:71:df:fc:c1:2b:a1:29:
3a:22:2f:78:f0:e9:f4:49:82:7b:33:06:9f:19:1f:f9:00:bd:
51:0b:f7:70:db:56:23:77:9f:3f:da:cd:b4:54:6e:4f:14:49:
30:3a:0e:17:05:2d:c6:4f:e9:29:32:2d:5f:5f:68:49:3b:89:
40:1c:4d:64:9b:53:d5:34:1b:03:e8:23:f2:79:22:c4:4a:cf:
40:5e:82:17:09:06:48:14:5e:8e:6d:4c:1c:68:19:0b:c7:44:
8e:68:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:49 2025 by rpki-client