Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/15-HZ9G224l6NOyfe_IESztVRjQ.roa
File: 15-HZ9G224l6NOyfe_IESztVRjQ.roa (raw, json)
Hash identifier: +YQXX85dBqADu3Y+pAp6odpVNqTzgtvG6e5cznQMu8U=
Subject key identifier: D7:9F:87:67:D1:B6:DB:89:7A:34:EC:9F:7B:F2:04:4B:3B:55:46:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3711
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/15-HZ9G224l6NOyfe_IESztVRjQ.roa
Signing time: Tue 02 Apr 2024 00:22:13 +0000
ROA not before: Tue 02 Apr 2024 00:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14097 (0x3711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 00:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D79F8767D1B6DB897A34EC9F7BF2044B3B554634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:7e:d4:f5:b0:2f:31:fd:ce:93:b5:93:0b:
0f:0e:60:3a:d8:a3:5e:6d:27:14:93:01:56:77:b4:
04:88:49:cc:dc:56:af:c8:e5:f7:06:a5:b0:cf:2b:
b9:cf:14:3e:b8:f2:f3:65:69:01:de:c1:58:3d:4d:
26:9e:4c:b6:56:20:f5:14:dd:80:10:01:f8:55:21:
e4:a6:e3:d6:e9:99:a6:c1:45:14:12:4c:ae:6f:b2:
36:e6:06:a4:8a:b3:13:f5:34:91:40:88:24:42:76:
ef:34:0d:35:50:d8:82:2b:b5:66:e7:37:52:17:0d:
82:93:70:e7:79:6d:a0:74:d9:f7:57:82:a6:66:6a:
2b:79:cc:6c:46:f2:ff:2e:e7:34:85:9d:46:10:8e:
7a:ef:75:ac:e9:61:7a:e5:0c:37:d1:3b:eb:77:a2:
58:a9:ec:60:da:7b:9e:60:13:cc:a8:f0:99:07:6e:
78:68:f7:25:a9:1a:ea:5b:f9:65:5c:2e:15:66:17:
16:e2:0e:5f:cf:2a:c1:7f:f1:22:b2:a1:ac:2d:9f:
67:56:64:15:8e:4d:61:a8:5b:51:d4:d4:9d:75:d8:
06:da:e2:a6:91:4d:78:81:3d:ee:4f:ff:49:b6:7a:
c3:04:bc:bd:eb:13:4a:01:df:31:ad:8d:bb:2f:3e:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:87:67:D1:B6:DB:89:7A:34:EC:9F:7B:F2:04:4B:3B:55:46:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/15-HZ9G224l6NOyfe_IESztVRjQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:28:06:49:cb:2f:14:e6:47:d6:40:e6:57:82:e4:3d:88:b8:
3f:c9:11:d7:08:03:d6:a8:11:6a:a0:c7:ed:4f:09:13:b2:c6:
2b:2b:51:de:62:4d:9d:bf:eb:c2:b3:43:f0:ce:1e:e7:64:d0:
0e:b9:6f:67:5e:9a:b7:d5:2a:ad:c3:9c:4a:cd:5f:0d:ea:c0:
23:f3:bb:15:55:35:44:e4:90:fc:c8:16:b6:fd:24:ff:12:7c:
3f:2d:42:94:9f:4f:cb:2d:81:82:6b:19:02:5e:03:0f:34:91:
07:6b:4a:8f:5c:72:07:1f:3f:a5:20:5f:3e:2a:62:76:80:7c:
94:04:f7:e2:d7:27:bf:81:f1:f1:ba:bf:02:52:df:eb:7a:cb:
98:11:35:b9:75:8c:d4:4f:aa:46:2d:ab:b7:87:16:4a:ed:16:
b7:7d:77:fa:e0:72:51:18:dc:fe:90:50:21:2a:d0:88:cc:c4:
96:2d:10:11:6c:b0:29:e9:b1:70:7d:f4:8c:c0:5b:44:e2:4b:
ca:58:ac:4f:c0:cf:1b:88:c6:f1:67:61:80:e1:73:c1:f7:ae:
83:7c:d8:42:a0:45:99:b9:d5:17:8a:d8:a5:6b:4c:a4:cb:b0:
fe:cc:b4:8c:b0:ae:6f:41:31:69:c9:ca:38:5c:6d:1b:c7:3a:
d8:b2:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:09 2024 by rpki-client on console-ams.rpki-client.org