Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-xa2YudlzQ4w4St-zTJMv65efEg.roa
File: -xa2YudlzQ4w4St-zTJMv65efEg.roa (raw, json)
Hash identifier: aBZ2uMNWS4trP/qMtnj03xH54ScYKMXorEtqAogaSIc=
Subject key identifier: FB:16:B6:62:E7:65:CD:0E:30:E1:2B:7E:CD:32:4C:BF:AE:5E:7C:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54D9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-xa2YudlzQ4w4St-zTJMv65efEg.roa
Signing time: Sat 11 May 2024 17:24:03 +0000
ROA not before: Sat 11 May 2024 17:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21721 (0x54d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 17:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB16B662E765CD0E30E12B7ECD324CBFAE5E7C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:27:1d:16:4e:32:e4:b5:72:b0:35:7d:0c:
9f:2a:f3:99:83:88:05:37:72:79:b1:d6:1b:a4:4f:
e8:16:2e:d9:49:43:29:00:a2:d6:8b:83:21:d8:2e:
3f:8e:68:54:1f:20:46:1c:9e:23:b2:65:fa:87:66:
f1:e3:ee:4f:4b:f6:0b:76:05:86:68:e4:08:e0:25:
24:3e:1f:4f:2d:a2:e0:11:86:7b:cd:39:00:00:0c:
ae:06:5f:e2:23:e0:17:c0:7c:74:ac:6c:8c:4f:f6:
f3:cc:fa:b7:95:31:b9:e6:bb:56:ba:ec:53:74:82:
c8:ea:47:b4:4c:58:d3:c2:33:36:fd:55:32:90:36:
59:c2:fd:36:81:31:33:d0:bc:e7:78:8b:b6:28:3b:
62:ed:8b:91:2c:94:6a:9a:0a:a4:f4:97:04:86:18:
c2:4e:f0:bc:02:5b:e5:a6:c3:58:9e:7e:92:f8:aa:
2b:f0:a9:3d:33:cc:37:a2:87:c7:2f:58:70:8e:31:
1c:13:c0:91:66:a7:12:d6:3a:cd:7e:08:6d:ca:30:
34:f4:db:53:e1:60:86:81:04:51:b9:04:58:18:3c:
96:c0:f2:05:78:70:32:ec:5c:48:a2:8a:34:7d:9a:
fb:0e:cc:e5:ba:e1:d2:16:86:d1:2e:2c:52:8c:19:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:B6:62:E7:65:CD:0E:30:E1:2B:7E:CD:32:4C:BF:AE:5E:7C:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-xa2YudlzQ4w4St-zTJMv65efEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:60:ad:09:9b:c9:ef:22:10:9d:28:42:33:3b:0f:98:20:1c:
35:5f:27:6d:0e:d9:09:0a:d6:33:20:c9:0d:4f:01:6d:3b:cd:
84:d5:5f:a5:52:35:73:02:99:48:30:46:f8:e5:4a:46:4f:5a:
91:34:e9:3c:e7:69:0c:75:82:b5:f4:d2:bf:72:1b:26:9e:e3:
89:a5:3b:27:27:ef:01:5b:6e:21:b2:a6:dc:af:fa:04:8d:0b:
96:d1:14:45:64:ad:f7:36:f6:76:9d:8d:56:d7:66:e5:9a:5a:
c2:f7:8a:f2:72:4d:42:38:8b:65:9e:39:b0:a5:c4:eb:97:89:
f4:21:4f:8f:a8:42:58:9a:37:53:4d:b7:45:3a:4d:47:71:90:
61:c2:07:93:bd:a8:93:8b:e9:27:59:35:03:42:06:a5:1a:5d:
2b:d4:d6:ad:ea:a9:0f:ac:e5:02:f4:fd:ca:08:e6:0f:b3:18:
2d:d8:ab:57:66:1a:4c:52:b9:a6:ee:07:c8:74:46:78:18:24:
6b:82:cb:c4:a9:4e:9f:06:9e:f1:a8:87:a5:d0:86:d0:29:fd:
4e:7d:df:fa:a9:fe:8f:7e:cd:73:13:47:33:dd:6d:23:9f:63:
d0:0d:aa:f4:4d:03:60:d6:0c:f6:63:2e:75:31:f1:d9:dc:e2:
b1:cd:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org