Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-IS8t00PsitdcpPyWDt5EuHWBBo.roa
File: -IS8t00PsitdcpPyWDt5EuHWBBo.roa (raw, json)
Hash identifier: J8jI3VZKHg+Yki6qIuJXVZMHjf55o9pl+hxrqcEjYHI=
Subject key identifier: F8:84:BC:B7:4D:0F:B2:2B:5D:72:93:F2:58:3B:79:12:E1:D6:04:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52E5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-IS8t00PsitdcpPyWDt5EuHWBBo.roa
Signing time: Thu 09 May 2024 02:53:56 +0000
ROA not before: Thu 09 May 2024 02:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21221 (0x52e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 02:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F884BCB74D0FB22B5D7293F2583B7912E1D6041A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:60:9a:be:db:c2:60:d4:98:40:9b:88:3c:
0b:1f:25:4a:64:64:c3:3a:69:d8:c7:b2:cc:fe:4a:
ca:6f:0f:59:c0:3a:93:2e:57:36:85:a0:5b:26:d9:
3b:04:49:a8:aa:05:ee:60:2d:e6:6f:96:b7:3b:31:
4b:97:57:cf:0c:fc:fe:8c:66:f8:80:b1:23:75:a3:
46:20:c6:9a:d0:92:c7:a4:b7:6f:c4:9b:fc:98:45:
f6:48:99:7f:4f:e0:e4:6c:3c:d2:57:a3:00:7a:4c:
43:73:9b:b0:be:df:51:f4:b6:91:1a:e0:28:86:fa:
cf:a0:c0:1a:36:c2:db:3a:d9:47:37:1a:a4:fe:e7:
ed:4f:d4:d3:9f:61:26:81:0d:1f:73:71:e7:c9:ec:
95:0a:0b:a1:1c:37:95:88:66:cf:a1:cd:16:1e:d3:
d1:93:2d:b4:46:0b:18:e1:31:d4:04:47:f1:47:18:
42:ea:a5:87:65:23:b3:cb:92:42:30:5b:c0:22:6f:
5d:ca:2f:b1:43:f6:5b:ee:39:fd:d4:f9:48:86:29:
76:3d:df:70:2f:9c:e9:de:03:2e:a6:be:13:f0:80:
6c:5e:54:81:10:94:06:a4:88:49:d9:a3:5c:61:7a:
c2:53:e5:96:b0:e7:60:75:fb:79:30:3c:ef:61:5d:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:BC:B7:4D:0F:B2:2B:5D:72:93:F2:58:3B:79:12:E1:D6:04:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-IS8t00PsitdcpPyWDt5EuHWBBo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
60:ff:22:0e:6f:b9:fc:b6:dc:03:7b:6f:cf:f1:ba:20:3b:8b:
7c:8b:71:e8:11:b6:56:ba:cb:90:22:08:67:42:62:19:e1:db:
37:d1:36:2a:ef:33:8b:e8:4c:d0:52:fd:0a:a2:04:08:0f:c9:
e2:1d:0c:a9:0b:3e:39:67:7b:bc:57:37:33:1e:3d:31:ce:77:
92:8a:0e:ee:13:34:1b:61:f1:8e:3f:30:84:c6:4a:10:b9:d9:
c9:f9:c5:26:34:60:24:28:da:13:9d:83:7e:a5:d5:37:7a:16:
1e:a8:62:b4:b5:ab:9e:be:97:79:9a:c3:b1:71:19:d6:4c:2c:
03:8b:fc:35:60:ca:64:5d:13:60:ff:b4:dd:ff:60:16:01:f3:
86:ed:b7:d7:e0:7f:2d:20:e5:10:8a:48:e4:cf:f8:e5:1f:5d:
32:46:3a:a9:0c:8f:74:9a:8e:67:92:a6:ac:6f:9f:89:91:c9:
08:9a:e5:ef:8f:1c:df:68:45:4c:da:f2:1d:df:ff:3c:8b:f6:
9d:42:ab:7b:c6:2b:6f:0c:cf:04:f1:1f:f6:d6:a2:bf:fb:e4:
42:31:05:eb:4c:b8:4b:83:7f:b7:c4:15:db:e5:d7:1f:ec:b7:
33:83:db:4b:c1:f4:91:d3:55:d0:00:dd:ca:17:be:a6:51:e4:
3c:8a:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org