Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0z_PAHix8uRSQ_Xm826LoORFTJk.roa
File: 0z_PAHix8uRSQ_Xm826LoORFTJk.roa (raw, json)
Hash identifier: eL6g62L+POg+L/pas28UzNfhEmgCh97kpte3x9WYJ/A=
Subject key identifier: D3:3F:CF:00:78:B1:F2:E4:52:43:F5:E6:F3:6E:8B:A0:E4:45:4C:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55E5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0z_PAHix8uRSQ_Xm826LoORFTJk.roa
Signing time: Mon 13 May 2024 02:54:20 +0000
ROA not before: Mon 13 May 2024 02:54:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21989 (0x55e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 02:54:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D33FCF0078B1F2E45243F5E6F36E8BA0E4454C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:07:72:0b:a7:50:8a:f8:a6:c7:b9:00:bd:
0d:bc:41:2f:76:3a:eb:32:d1:74:57:96:d1:cf:13:
c6:0b:bf:c6:cf:ae:2a:00:79:3d:4d:70:2b:a2:7e:
48:5a:90:3b:e3:3a:50:18:9c:95:39:69:77:33:18:
bc:42:24:4e:ed:3d:99:c3:68:e6:01:c8:3d:74:b2:
c1:6f:bc:e1:7f:77:3f:6c:f8:0e:d3:d0:50:c1:a8:
b6:55:47:c4:9d:42:33:f2:3b:37:38:03:df:0f:3d:
a7:58:ac:7f:56:8e:ee:b5:2c:75:c7:94:00:54:f0:
56:70:30:02:8f:39:66:82:1b:81:1e:d6:c0:a5:4e:
b7:7c:bb:57:a8:43:1b:a8:cf:8f:35:fd:cd:d0:69:
ac:8b:1b:af:a8:b1:a5:d1:1b:02:37:d1:41:b7:c5:
88:b2:ca:a0:82:f6:0d:9e:bf:b7:58:5e:6f:36:f4:
ff:50:61:c7:7f:96:1f:53:ba:c6:80:3e:11:e9:47:
08:43:2b:25:71:47:bd:74:0a:95:c2:93:dc:84:f2:
d3:26:51:e6:dc:2a:cb:38:1c:95:51:12:d4:75:b9:
b3:57:46:ae:be:2c:3c:a8:69:e6:21:b5:31:7c:0e:
d3:5b:10:70:ea:d4:68:3e:43:b7:66:07:0d:3b:76:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:CF:00:78:B1:F2:E4:52:43:F5:E6:F3:6E:8B:A0:E4:45:4C:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0z_PAHix8uRSQ_Xm826LoORFTJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
36:18:4a:57:99:4c:1a:fc:32:13:23:68:72:5d:aa:0d:28:ef:
8d:66:19:2d:c0:c7:f1:a8:ec:84:44:ee:d2:3b:f0:f7:eb:5b:
c4:30:d3:da:55:a9:29:c7:00:49:d5:3d:f2:0b:6c:71:65:39:
7e:60:f8:39:bf:e4:0c:2c:17:03:4d:a1:48:63:17:a1:e0:09:
59:b6:81:4b:93:0b:85:57:04:01:29:ba:88:29:e7:3c:f9:2c:
f7:90:30:e5:56:1d:6b:b7:d6:f0:a6:73:27:26:13:b9:bb:17:
dd:b2:ae:75:6f:ba:ba:1e:05:ed:eb:ae:4d:ea:8f:96:4b:2d:
64:3c:8d:50:16:2e:ce:71:82:dc:c9:89:4f:b8:57:ee:94:3b:
5f:c2:44:e6:29:b9:43:c2:d0:2c:6d:b7:a5:51:bb:c4:d6:56:
34:06:7c:61:a3:7f:d4:78:90:6b:98:48:c9:92:91:bf:62:ca:
a7:ce:9e:cb:ec:d8:8f:8e:79:b7:94:3b:0b:a2:94:24:ad:14:
8f:21:a1:50:27:2f:0d:0a:d4:a8:bd:8e:4f:25:40:06:79:f9:
21:f6:b1:98:08:a9:8b:45:3c:d0:3c:e5:ba:96:77:2a:36:00:
f5:dd:42:17:32:f7:67:56:10:c6:bc:b2:8b:d1:2d:c1:b0:2b:
ea:b3:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:09 2024 by rpki-client on console-ams.rpki-client.org