Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0MyevM4vBJ3mD7dpC9WH7CS5c4o.roa
File: 0MyevM4vBJ3mD7dpC9WH7CS5c4o.roa (raw, json)
Hash identifier: zGQeBX/zrqWenu8e+/YDGGlxb1Zm8/H061YmnhDByAQ=
Subject key identifier: D0:CC:9E:BC:CE:2F:04:9D:E6:0F:B7:69:0B:D5:87:EC:24:B9:73:8A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 418D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0MyevM4vBJ3mD7dpC9WH7CS5c4o.roa
Signing time: Mon 15 Apr 2024 23:52:58 +0000
ROA not before: Mon 15 Apr 2024 23:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16781 (0x418d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 23:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D0CC9EBCCE2F049DE60FB7690BD587EC24B9738A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:ed:b2:e0:d1:d7:c1:4a:26:72:f2:d3:dd:
30:ec:80:8d:71:fa:6a:4a:0c:4d:b2:6c:0b:c6:c4:
68:80:17:40:42:86:2a:80:f3:51:13:25:ef:05:41:
35:5a:1b:9a:bd:e0:6d:f7:e0:cc:81:3f:48:29:5a:
c4:9d:4a:68:f0:27:78:96:47:72:bf:7d:55:69:39:
e8:63:40:59:71:24:55:00:82:23:5a:94:a9:e8:d0:
ee:be:44:2f:37:9c:40:25:16:38:7c:ad:c9:7d:5f:
92:d7:c3:10:b6:90:bf:2a:14:07:2e:ed:d1:67:0e:
d3:28:97:d5:5f:2a:85:9f:e7:00:ee:04:aa:9f:95:
76:19:fd:e7:0a:fe:fd:97:dd:9b:4f:83:bc:33:c7:
f2:71:05:22:c1:57:d3:f0:66:67:5b:98:a7:1a:a0:
55:56:6b:35:e5:8e:d3:a0:50:8a:d1:80:ca:41:61:
f7:4b:38:9f:e7:b1:8a:74:ef:e2:28:a2:7a:c9:8b:
bd:43:a1:42:fe:c3:68:2c:59:d9:14:ca:78:9a:61:
5e:73:06:a7:72:fb:d9:58:ff:51:b1:e5:f9:0d:7f:
ee:b8:4e:c3:ee:22:35:b8:25:8a:51:0b:2d:93:74:
48:f2:5f:a8:12:3b:45:66:09:7c:bc:c2:03:a8:61:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:9E:BC:CE:2F:04:9D:E6:0F:B7:69:0B:D5:87:EC:24:B9:73:8A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0MyevM4vBJ3mD7dpC9WH7CS5c4o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:55:15:3f:32:a3:e6:6e:28:d0:0f:86:54:63:f6:19:b2:95:
fb:85:36:cb:bb:20:48:94:c9:6d:5b:bc:f0:6b:c1:98:73:e6:
94:ed:50:21:93:29:0f:83:c6:6a:5d:c3:4f:7d:c5:5f:31:fd:
c9:28:d5:9f:e3:0b:3f:b6:5c:b2:ba:59:27:09:59:8f:d5:de:
97:7f:1b:99:28:b7:13:f2:6f:d3:0c:36:94:7e:ce:09:75:91:
bc:0b:58:25:3b:23:68:c7:d1:6e:17:52:99:0d:76:2c:52:ba:
b5:fe:99:10:ad:62:25:c4:29:45:7c:eb:6e:bd:b9:19:45:45:
14:95:5a:ff:86:17:d9:25:b2:30:c3:73:93:26:68:8e:d3:56:
91:b8:ed:02:2f:ac:7a:6a:60:00:60:8f:39:dd:11:40:4b:55:
7d:d3:c2:39:c2:59:2d:cd:2c:e2:dd:02:d7:c3:fd:6c:a3:ee:
e9:81:19:6e:89:70:e4:16:9a:05:16:26:08:b0:48:ec:28:31:
73:13:d9:64:07:52:26:d5:18:ea:f2:52:aa:d2:33:1e:6f:2e:
f3:7d:f0:17:8a:ee:9e:a4:42:16:d8:c6:cc:bc:8f:f4:78:36:
75:eb:a0:85:c8:72:2d:eb:fd:00:8b:5e:cf:68:26:88:b1:88:
b4:e9:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:08 2024 by rpki-client on console-ams.rpki-client.org