Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZdUN3-89nxwb9d9woPjHBeD1DEs.roa
File: ZdUN3-89nxwb9d9woPjHBeD1DEs.roa (raw, json)
Hash identifier: i1gSAGACVx9CX5ThDWPN2CVDXqt1m3gfKz9jIcrl8JQ=
Subject key identifier: 65:D5:0D:DF:EF:3D:9F:1C:1B:F5:DF:70:A0:F8:C7:05:E0:F5:0C:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4449
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZdUN3-89nxwb9d9woPjHBeD1DEs.roa
Signing time: Fri 19 Apr 2024 15:23:00 +0000
ROA not before: Fri 19 Apr 2024 15:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17481 (0x4449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 15:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65D50DDFEF3D9F1C1BF5DF70A0F8C705E0F50C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:38:08:51:b3:a0:15:09:47:70:eb:e2:0d:
62:1c:9e:ef:c0:b6:5c:2a:af:72:38:62:47:f0:5f:
cd:77:91:56:30:09:9a:7a:22:1e:01:99:ea:1f:f7:
51:2e:a8:63:aa:33:36:e4:e1:de:d6:81:3d:79:26:
44:90:47:1e:1b:21:5a:a1:b4:e4:9b:f2:f7:c1:55:
bd:13:58:2e:05:1a:fe:b8:b8:e5:2b:50:74:04:58:
c1:90:8a:24:bc:04:02:03:86:ab:34:5c:e9:98:b5:
3f:5b:7e:b0:b9:38:18:57:5f:e8:86:a2:81:ad:30:
61:58:6f:6a:06:70:44:d2:f8:ba:cb:76:ad:c9:fc:
1e:c6:8c:3b:fd:57:4f:2a:bc:56:f1:ac:52:8d:3e:
b3:b6:0b:17:ad:6b:88:f3:2f:23:21:ae:10:44:1e:
34:08:64:5a:29:6d:42:11:bd:b4:1e:57:a8:db:7a:
a9:98:74:ea:82:a6:71:aa:8b:1b:f0:ee:ef:27:e0:
c8:f3:20:93:2f:40:17:95:c2:7b:e1:10:56:05:d9:
21:c2:5c:c2:98:d9:d1:51:fc:b2:95:7c:81:e9:8f:
56:fe:86:8a:a2:3e:90:e7:2c:d9:20:95:06:53:17:
00:a1:ed:dc:4e:16:3a:55:4c:33:1d:d7:c6:7c:27:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:0D:DF:EF:3D:9F:1C:1B:F5:DF:70:A0:F8:C7:05:E0:F5:0C:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZdUN3-89nxwb9d9woPjHBeD1DEs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:ff:16:20:b1:4e:d1:44:0a:fe:f0:e7:ad:7a:b0:c2:fc:b1:
05:dc:bd:81:97:ce:96:90:98:e6:3a:82:21:f6:b7:04:82:04:
e7:f7:67:fa:bc:07:1a:3c:49:16:78:00:b6:74:b8:1b:9f:f3:
dc:a5:3f:f3:09:33:ab:7b:85:89:cb:ac:da:ca:37:55:37:d3:
15:6e:77:41:83:6f:44:55:a4:55:ad:85:30:e9:c6:7b:37:e5:
0d:74:62:b6:a1:16:fb:96:81:f0:9c:63:b8:aa:47:7b:d3:31:
56:60:a2:15:0d:d9:35:2b:a6:12:cd:fa:61:67:b5:7d:d2:a6:
1f:6b:0d:6c:46:d0:fd:93:a7:59:78:fe:a1:86:4c:17:06:a7:
7c:5e:bf:0d:7b:5f:85:4e:ea:5b:a0:53:d9:8a:f2:48:23:66:
ea:b4:36:d2:38:17:e1:8e:5c:59:73:25:c6:a4:f6:2b:7e:54:
1e:9b:c8:6f:bb:c1:f5:eb:9b:23:5d:c5:44:45:ef:89:c6:c6:
fb:e0:c5:9f:c9:aa:fc:a3:c0:ff:54:bf:0b:1e:4f:bf:b6:b9:
dc:72:58:04:d4:47:a8:b2:52:94:88:15:ff:65:21:fa:8c:63:
01:39:fc:bb:7c:8f:e3:8a:ac:da:44:7d:b6:b6:ab:05:e9:90:
0e:f2:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:14 2025 by rpki-client