Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0eu2JXuAtwAc03fwa1tOGTUKtxI.roa
File: 0eu2JXuAtwAc03fwa1tOGTUKtxI.roa (raw, json)
Hash identifier: uLha7WtfpCXfyUymE6MMzDo8UkU7wDdjYQT3YdmEtEM=
Subject key identifier: D1:EB:B6:25:7B:80:B7:00:1C:D3:77:F0:6B:5B:4E:19:35:0A:B7:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EA9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0eu2JXuAtwAc03fwa1tOGTUKtxI.roa
Signing time: Fri 03 May 2024 11:23:44 +0000
ROA not before: Fri 03 May 2024 11:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20137 (0x4ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 11:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1EBB6257B80B7001CD377F06B5B4E19350AB712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:52:d2:9a:de:92:65:54:6d:7e:99:c9:c9:
63:04:84:71:70:b7:0f:b2:31:6b:dc:14:c1:1e:5a:
25:fc:b8:f7:74:3f:04:8e:b6:40:46:51:8f:3d:24:
a2:17:2d:c6:86:73:9d:9a:ec:93:42:6c:c2:f3:e7:
56:d4:d7:a0:68:de:2b:8a:71:88:11:d4:96:bd:ef:
13:33:1d:7b:0f:98:01:80:ba:9d:be:19:f1:7e:df:
a4:42:df:f7:69:85:52:4a:54:87:80:cb:a8:4e:82:
40:94:98:13:b9:e3:0b:f9:02:1d:8d:8f:9c:21:22:
47:02:0a:c5:95:11:80:4e:e2:d9:11:c5:60:ee:3d:
23:cd:47:54:20:68:b6:82:6d:c2:15:f7:d1:8b:89:
d0:2b:3a:30:84:74:34:cb:54:67:35:30:69:b6:de:
e4:0b:1b:47:24:1e:6e:11:b5:ba:43:3a:f2:df:e6:
90:66:17:ca:9b:82:96:62:25:37:e2:87:97:0b:60:
38:fc:c9:35:28:ba:ea:69:c1:50:f2:d4:a3:19:2b:
46:aa:70:82:b8:2e:01:32:4a:e5:1b:84:88:99:39:
ce:0c:39:c6:1c:ec:05:69:f2:6a:38:48:ec:7f:5e:
bc:03:8d:84:f0:6e:cc:1f:1b:d4:f6:9b:af:4c:98:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EB:B6:25:7B:80:B7:00:1C:D3:77:F0:6B:5B:4E:19:35:0A:B7:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0eu2JXuAtwAc03fwa1tOGTUKtxI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:cb:41:eb:6b:3f:f5:7b:36:7d:ca:dd:51:10:0f:bb:92:0e:
94:80:43:cc:a8:48:4e:83:0a:17:98:c7:96:45:45:96:0a:c4:
18:28:0c:f6:0e:f8:c9:47:4f:28:6c:12:93:ac:6c:96:e9:02:
6f:ca:77:b2:57:5b:74:44:a9:28:79:c4:b8:df:59:82:f6:da:
3b:10:c9:92:09:8a:32:25:e8:8e:00:e9:39:26:4b:a6:80:d6:
08:d0:3e:65:0a:55:97:a8:8d:04:1a:1d:f5:33:6a:cc:23:5d:
cb:39:09:98:56:0e:da:4e:59:4a:eb:5a:41:d1:38:4c:d1:b9:
c5:dd:c5:7c:9d:3b:15:ff:72:e3:f9:24:d1:9e:ff:d4:d5:6d:
68:76:d5:08:5e:37:72:7a:50:82:73:bc:3f:d7:9c:fb:98:80:
c2:46:88:49:75:a4:30:58:f8:9b:29:49:a6:ab:f5:cc:24:d8:
1a:2b:a5:13:9c:42:af:de:38:12:ea:12:52:64:44:e7:6e:04:
97:e9:a0:a3:0a:a7:d5:4d:cc:36:0c:f2:b7:ba:59:77:ca:46:
d6:89:a3:2b:41:3b:0e:bd:94:1f:6e:f7:59:ad:8c:00:72:28:
44:34:c2:45:43:25:1b:aa:5f:0c:f9:e8:49:1a:d0:c1:34:83:
34:d4:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org