Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-5OpBTWlVmCyiXEISJ5X6zFkX8I.roa
File: -5OpBTWlVmCyiXEISJ5X6zFkX8I.roa (raw, json)
Hash identifier: 34ff+EwE4ZtPzPwNV5KQFITVyRns80Jji4RVL0TGfiY=
Subject key identifier: FB:93:A9:05:35:A5:56:60:B2:89:71:08:48:9E:57:EB:31:64:5F:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F8D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-5OpBTWlVmCyiXEISJ5X6zFkX8I.roa
Signing time: Sat 04 May 2024 15:54:00 +0000
ROA not before: Sat 04 May 2024 15:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20365 (0x4f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 15:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB93A90535A55660B2897108489E57EB31645FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:ee:d4:4a:00:39:62:df:73:f5:0b:62:d0:
bd:4e:a1:51:bb:7a:9e:c4:53:58:02:04:a5:d5:be:
cc:41:2a:e0:51:30:47:ea:65:a4:6d:0e:c4:66:5b:
b6:53:02:b1:bb:55:f7:96:0a:30:d8:32:09:41:56:
23:6a:93:76:2d:b8:c5:81:7d:1e:dd:d1:62:fb:42:
a4:25:9a:b7:40:c7:33:41:db:66:59:b0:bd:8a:b6:
4d:0c:c6:04:bb:6f:f5:44:07:1d:28:cc:24:d0:8b:
7f:5e:5a:83:56:31:82:b3:76:b4:6f:ec:22:ab:04:
c9:a0:f3:bc:3c:cf:9d:b3:53:97:74:b4:fe:70:21:
b3:de:23:23:1a:05:f1:a4:57:a8:2d:ff:f1:12:1e:
95:96:d4:85:d0:1c:b4:2b:03:c7:46:87:d7:d8:7e:
f7:3a:02:7d:5d:03:40:57:41:3a:34:56:e9:11:8a:
2f:94:f5:07:d7:a1:11:91:e2:50:30:56:cd:ad:6f:
09:d0:fb:19:3f:d1:60:e6:65:4f:50:bb:1a:72:49:
59:e6:c0:a7:23:bb:9a:36:23:23:c0:2b:52:61:99:
9e:94:05:a6:dd:10:5b:e1:38:e8:03:eb:f4:42:2a:
b1:0a:65:2d:94:21:9e:f5:de:35:e3:16:27:63:27:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:A9:05:35:A5:56:60:B2:89:71:08:48:9E:57:EB:31:64:5F:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-5OpBTWlVmCyiXEISJ5X6zFkX8I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:09:5b:46:ca:38:a9:f3:98:1e:b8:e5:df:3f:e9:5c:b7:cb:
82:71:e4:9d:87:f9:91:b7:7a:55:04:be:2b:cf:08:3d:c0:c7:
c9:75:ff:82:37:84:fd:50:09:83:d5:67:fe:47:42:4b:bf:6a:
de:62:61:24:c2:1c:89:0a:7a:27:de:1b:35:15:cb:5a:4d:cd:
c2:98:94:b4:75:b7:0a:da:9b:4c:b1:88:f3:4c:ac:05:05:03:
ac:69:b6:a9:f2:90:87:a1:80:af:5f:2e:90:4c:0c:e6:2b:85:
1e:52:65:99:32:ef:e4:1d:44:bd:3b:d6:c7:8b:20:9a:b6:52:
bf:96:3e:d1:0b:5c:18:70:01:97:5c:9b:30:d0:e6:c4:d6:e4:
80:6c:93:24:e3:48:1a:15:04:5a:ad:da:58:c1:bb:f3:9b:5c:
d8:46:0b:da:d3:93:a0:07:fc:5f:40:04:10:9b:35:45:53:97:
e6:12:32:77:d9:2f:b1:44:5f:4f:fc:38:da:d8:ff:37:4b:1e:
8b:48:15:17:b8:e2:cb:e0:c1:b5:48:39:99:f3:5d:d2:d4:40:
e2:1b:72:1e:8e:f0:ae:e2:89:e4:4c:e9:be:ba:0c:01:d3:4f:
b3:1d:e2:6f:98:ac:d6:ab:49:a7:e5:64:c0:53:d2:f6:ff:ca:
08:e1:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:07 2024 by rpki-client on console-ams.rpki-client.org