Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1x-ov6DbgjftBrbepPJa48CbAV0.roa
File: 1x-ov6DbgjftBrbepPJa48CbAV0.roa (raw, json)
Hash identifier: KIoF8rMftcBRcXt6uyyBmlXFhrQNPVWVzwsXAdUBSJc=
Subject key identifier: D7:1F:A8:BF:A0:DB:82:37:ED:06:B6:DE:A4:F2:5A:E3:C0:9B:01:5D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FF5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1x-ov6DbgjftBrbepPJa48CbAV0.roa
Signing time: Sat 13 Apr 2024 20:52:51 +0000
ROA not before: Sat 13 Apr 2024 20:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16373 (0x3ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 20:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D71FA8BFA0DB8237ED06B6DEA4F25AE3C09B015D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:4a:a2:a2:71:9b:ed:f1:86:1c:d7:16:12:
4b:22:9d:c9:e8:42:48:2f:c5:cf:c9:f7:ca:b8:15:
61:bc:d9:82:6a:8f:4a:6a:4d:34:ca:7c:2d:8a:09:
f5:b6:75:8d:de:11:93:c9:3d:3c:f1:72:6b:cb:a6:
69:e6:c6:fe:37:a9:4f:4a:c8:63:b0:01:a2:d7:25:
b6:a8:73:57:32:8e:8a:b0:43:59:75:1f:b1:4e:eb:
36:62:cf:9e:8d:25:87:94:41:07:dd:5a:ac:a4:cc:
08:25:80:67:d0:cc:4b:9f:04:35:4a:8e:26:ce:39:
83:98:64:f1:a3:c4:9c:50:ec:09:40:2b:87:cb:3c:
58:86:a2:f3:4c:16:8c:3f:dc:88:a7:dd:b8:63:1b:
10:f2:4d:ca:b5:34:8e:70:22:e9:41:d3:69:ec:ab:
fa:9b:2b:ad:21:b8:95:be:d8:6b:bd:7b:3e:da:92:
9a:cc:6a:7f:bf:55:c0:4e:d3:fe:6d:50:2d:f6:e0:
9c:5e:ae:e4:c2:f7:c7:fe:ca:dc:0c:6f:51:41:ff:
9f:39:3e:f2:c0:73:9a:cc:2d:3e:34:77:a5:ba:7a:
27:fa:84:19:81:1c:35:b9:97:37:d8:d1:21:fc:b0:
7c:f6:2f:de:38:f6:31:cb:3e:a3:01:eb:c5:c7:50:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:A8:BF:A0:DB:82:37:ED:06:B6:DE:A4:F2:5A:E3:C0:9B:01:5D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1x-ov6DbgjftBrbepPJa48CbAV0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
58:3e:9a:24:37:32:9e:a4:ef:3c:63:99:bc:71:a8:5d:83:80:
1b:4a:18:48:ff:3e:2e:0d:d1:f2:af:dc:f4:04:bb:57:46:ca:
b0:21:bc:c5:f0:0e:1d:88:92:af:89:d7:03:92:ef:23:33:f9:
b0:bc:fa:a1:0a:e9:51:19:40:30:1d:fb:63:46:2c:2d:49:22:
56:6d:56:5b:cf:16:d6:47:a3:1d:99:9b:14:a3:ee:a9:24:f2:
2c:bf:fc:72:17:28:78:9e:e9:98:68:c9:73:ef:7c:db:e2:38:
b1:da:78:8c:b8:57:05:18:d1:e4:14:b1:3d:d4:3d:f0:6b:e0:
a2:d2:33:e9:0f:41:28:61:27:c2:05:3f:62:79:5e:12:dd:70:
ad:24:59:fb:17:8a:35:10:f9:a3:73:8d:0a:82:46:d6:60:cb:
40:d8:c9:ab:8c:e3:94:1e:72:ef:4f:db:29:96:53:b1:12:01:
83:41:4f:7d:71:de:f7:67:64:6d:c1:d0:26:5c:09:1e:74:f6:
3d:d3:a4:d3:50:3a:f4:28:ad:27:d4:a9:7f:41:eb:17:ff:da:
e6:80:6c:5c:58:c2:f4:c8:78:e9:b3:d2:74:d1:2c:60:0f:56:
c1:29:9c:ed:97:7a:47:d1:09:19:3e:02:2d:5a:03:4c:5b:33:
56:10:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:11 2024 by rpki-client on console-ams.rpki-client.org