Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0iBc5R0pQk0AebNSSbktqRn2hTQ.roa
File: 0iBc5R0pQk0AebNSSbktqRn2hTQ.roa (raw, json)
Hash identifier: JW21tYD79MvIcYccbB9p7Lgb+2h8H4m7e0Xmpnv7z9k=
Subject key identifier: D2:20:5C:E5:1D:29:42:4D:00:79:B3:52:49:B9:2D:A9:19:F6:85:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EC1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0iBc5R0pQk0AebNSSbktqRn2hTQ.roa
Signing time: Fri 03 May 2024 14:23:44 +0000
ROA not before: Fri 03 May 2024 14:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20161 (0x4ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 14:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D2205CE51D29424D0079B35249B92DA919F68534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:38:02:3a:7c:ff:1a:1e:d5:ae:ad:50:31:
74:41:4a:89:71:cb:82:db:25:23:61:62:0f:88:04:
b8:a7:ee:8f:ba:de:eb:b9:7a:e9:b2:0f:20:d0:77:
eb:f3:00:8b:04:09:88:f8:57:80:70:8b:42:cb:a5:
5d:5b:93:77:b8:40:d5:d8:00:a5:fd:e1:50:b3:03:
45:81:d7:fd:f7:6f:53:b8:2b:a3:d5:5d:e7:92:ab:
19:55:e7:d3:99:bc:f7:3a:64:12:93:e3:0f:86:83:
b3:77:a7:44:1f:72:ee:b9:91:ef:92:9a:c8:fc:f6:
48:77:f6:ac:46:23:55:01:17:73:84:ca:37:d4:06:
7c:88:3c:b8:38:57:bd:9d:a1:ab:49:8a:33:79:f5:
3a:2d:42:25:e2:87:62:1a:f6:e4:d5:40:ae:dd:3e:
e0:42:0f:fa:44:26:3e:16:71:1a:e5:73:1d:d3:e6:
43:75:08:25:b2:03:bb:bb:2f:b2:34:5b:4f:14:61:
de:bc:c4:1d:09:60:91:9d:33:c3:cb:84:a9:5c:6d:
63:2e:58:16:9a:7c:d6:f8:4c:e8:da:eb:68:f3:cb:
c8:a7:41:ba:c0:fd:c1:6a:37:eb:c2:50:39:cd:ab:
87:86:7f:f4:43:f9:97:39:b4:51:a9:11:bb:39:72:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:5C:E5:1D:29:42:4D:00:79:B3:52:49:B9:2D:A9:19:F6:85:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0iBc5R0pQk0AebNSSbktqRn2hTQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:42:e5:be:71:4b:be:aa:7e:64:a6:c8:94:12:f7:8b:61:73:
77:72:ba:a8:c3:e6:da:44:c8:0f:60:f7:6c:54:c0:49:4e:30:
1c:ce:25:89:f3:b9:56:bf:d0:ff:b8:86:90:4e:b9:1e:4b:8d:
eb:16:e2:07:a3:de:04:d4:2f:04:cd:67:6f:44:cc:0c:67:36:
c7:39:70:29:c1:30:aa:16:fb:c1:f2:cc:2b:d9:11:b6:ed:4e:
74:86:48:6e:f6:d2:80:33:1b:1a:cc:01:a2:99:f3:54:81:26:
f6:78:ed:d8:3e:0f:7f:20:e8:c9:36:03:d8:e1:e0:5e:aa:34:
a9:e9:77:b3:4c:1d:f0:56:3d:4f:5b:bf:7b:3a:b4:e9:1f:b4:
85:2f:83:eb:6f:7f:4c:57:31:ab:a6:5c:ca:1c:6a:a2:01:74:
44:bd:a0:33:59:26:51:79:91:f6:5d:3f:aa:32:60:c9:82:58:
a6:21:99:fd:85:3b:70:0a:71:4b:7a:27:fb:6d:d5:b2:07:9b:
cc:17:1a:0d:5f:68:48:22:ae:aa:18:a3:2f:84:17:03:5d:49:
d9:d8:b4:b8:6f:47:56:88:95:76:ba:7f:0d:eb:dd:78:a1:0e:
ed:ec:a2:0c:82:5e:87:b3:fb:fe:33:96:e3:c9:f2:bd:48:4b:
ad:08:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:08 2024 by rpki-client on console-ams.rpki-client.org