Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0yLKtr4B3Jt24dX09B7Xf7czh9E.roa
File: 0yLKtr4B3Jt24dX09B7Xf7czh9E.roa (raw, json)
Hash identifier: 6DGIH+w5cbBR/6252xfxy7TYb8PgZwe+ubhUidVgnxk=
Subject key identifier: D3:22:CA:B6:BE:01:DC:9B:76:E1:D5:F4:F4:1E:D7:7F:B7:33:87:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0yLKtr4B3Jt24dX09B7Xf7czh9E.roa
Signing time: Mon 13 May 2024 02:24:06 +0000
ROA not before: Mon 13 May 2024 02:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21985 (0x55e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 02:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D322CAB6BE01DC9B76E1D5F4F41ED77FB73387D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:91:c9:55:1b:9d:6a:63:98:9b:1b:77:ea:
68:7b:e5:68:87:81:4f:39:c1:f1:ea:95:51:9e:cc:
d9:d5:78:40:91:09:64:ba:8b:85:86:c8:51:c4:5d:
41:b4:e8:ab:84:f3:be:98:d5:4c:90:5c:47:8e:1c:
63:0c:fe:54:9c:c8:39:f2:ee:da:6e:f3:28:53:ad:
74:4f:59:ff:84:f2:24:aa:d9:bf:44:6d:5a:f1:c6:
5f:ee:44:87:b6:2f:83:31:0e:17:d3:61:6e:54:e2:
bd:98:54:af:68:f8:64:68:e5:52:e8:4b:2e:4e:72:
53:17:d6:d7:b6:48:97:60:4c:74:ba:d7:c3:62:d1:
12:aa:8b:91:ca:cf:aa:8c:04:bf:da:0f:f9:86:65:
7d:85:20:55:26:2d:ee:03:00:08:8d:5f:f2:d2:1f:
8e:52:a8:4e:6c:c4:fc:f2:6b:b1:8a:ae:9d:f0:b1:
03:77:fe:5f:22:df:32:7d:36:29:67:54:dc:50:47:
e4:9b:dc:83:23:63:7c:de:79:fa:8d:f1:0f:23:55:
46:51:87:36:8c:93:12:ec:57:0e:7c:d8:27:58:0a:
5b:75:4a:32:e0:4c:26:c1:9e:a4:94:52:67:ee:cb:
df:b4:6c:c6:8e:fa:91:3b:1d:26:8d:26:bc:b8:1d:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:CA:B6:BE:01:DC:9B:76:E1:D5:F4:F4:1E:D7:7F:B7:33:87:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0yLKtr4B3Jt24dX09B7Xf7czh9E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:5d:d3:9f:98:99:4c:24:a2:05:c8:cc:f8:2a:85:4b:07:ba:
15:12:13:55:32:32:6a:cd:49:64:06:c0:d0:92:1d:0c:e9:19:
40:ea:3e:5d:d7:b0:ba:02:ef:53:e6:75:11:d7:52:a7:e7:e4:
fe:af:ac:df:c4:39:7d:b2:94:52:a7:aa:2b:ab:e8:db:f7:57:
32:89:7e:3b:50:4e:27:3c:11:b0:fa:ca:59:15:f8:24:5f:71:
7f:7e:cc:8f:f5:c6:22:1f:ce:6b:93:d5:4e:0b:ff:69:9b:66:
eb:8a:03:e5:5f:c0:36:72:73:90:a7:ff:c3:53:20:92:91:dd:
d9:d7:7d:b1:dc:4f:ec:18:ba:b5:16:5d:fe:93:19:11:15:e8:
5e:66:d4:5e:d5:97:29:d6:30:8e:4b:c6:b2:52:f3:74:0a:74:
06:f4:6e:c1:27:74:d0:83:be:29:f0:4c:70:52:71:2f:1e:68:
55:21:e8:c9:c9:61:b9:71:08:e5:45:e4:2e:bd:6a:c5:9f:74:
7d:dc:16:97:8b:d6:33:12:02:fb:2d:a0:07:f4:ea:45:02:4c:
06:d7:92:e5:21:6e:dd:41:bf:84:5d:26:4d:8b:cc:68:e4:a7:
43:96:51:0a:0b:45:73:e6:22:8d:96:f2:d5:bb:77:8f:fd:a1:
a4:66:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org