Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2UuRdiP31Jcdld15EJXFVJd9td4.roa
File: 2UuRdiP31Jcdld15EJXFVJd9td4.roa (raw, json)
Hash identifier: nOuJBJOHp3ao+e/OluDht89SZBklk/8ODzgOukLTHl4=
Subject key identifier: D9:4B:91:76:23:F7:D4:97:1D:95:DD:79:10:95:C5:54:97:7D:B5:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4889
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2UuRdiP31Jcdld15EJXFVJd9td4.roa
Signing time: Thu 25 Apr 2024 07:23:21 +0000
ROA not before: Thu 25 Apr 2024 07:23:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18569 (0x4889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 07:23:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D94B917623F7D4971D95DD791095C554977DB5DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:6c:02:d4:2d:a1:d1:04:1f:ff:64:c7:9f:
cc:97:52:96:31:7e:ff:9c:1c:c3:c3:7f:4d:72:16:
3f:5f:85:15:98:dc:ba:92:cd:25:dd:b4:da:94:9c:
c5:f2:0a:b0:5b:e0:73:9b:85:88:28:df:fd:4f:81:
87:a1:2f:c5:35:ce:5a:1f:60:fa:46:d5:59:7e:1c:
2f:d4:a7:5e:de:b8:1d:77:de:e4:e7:bc:35:42:88:
aa:24:e2:d4:7f:28:5a:dd:26:0b:f9:6c:f6:0e:62:
2d:29:59:33:a8:f2:3d:9b:ec:ca:2b:cb:20:45:46:
dc:92:81:dd:62:b8:36:a0:56:65:b9:5e:51:c6:13:
01:da:a8:53:49:aa:f8:21:64:6f:75:05:9c:ee:f8:
d9:a2:cd:ea:24:2a:86:c9:63:fc:43:18:9b:70:80:
15:bb:e0:14:00:ce:da:41:4e:bf:17:84:80:d2:63:
56:25:9c:0b:2c:18:0d:e0:40:ef:9f:d6:20:7e:20:
b6:06:b2:14:97:15:70:bd:0f:55:e6:50:01:05:4d:
6f:46:17:5d:2b:69:a3:5a:d5:12:59:16:c6:2d:86:
8e:16:ce:b1:78:ab:a1:7a:6d:00:a9:71:23:10:12:
66:02:a0:cc:1c:9d:8a:19:4a:02:f5:11:2e:c2:33:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:91:76:23:F7:D4:97:1D:95:DD:79:10:95:C5:54:97:7D:B5:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2UuRdiP31Jcdld15EJXFVJd9td4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:6f:56:84:b8:ac:b9:55:c9:f7:ea:7f:4a:f2:81:b1:3d:e8:
9b:64:18:a7:ee:c1:56:3a:c0:6b:7f:9d:25:32:1f:6f:4a:b4:
42:5a:0f:3a:68:ec:28:8a:2b:45:3f:2b:1f:eb:04:f2:ef:00:
98:77:6d:4c:9e:8a:9b:9e:97:f1:61:76:29:3a:40:5d:f5:1b:
3b:c9:93:6a:56:ed:73:58:7a:91:51:5b:3e:f5:7a:06:9b:eb:
ec:81:61:bc:39:5f:a6:84:57:4f:6b:93:0f:b1:1d:82:e9:1f:
bc:17:71:e5:60:a8:e6:6d:b6:12:37:9e:c4:c2:9a:76:57:f4:
fa:59:1e:40:f2:09:51:9f:9d:1c:25:fa:96:10:1c:52:24:51:
db:3e:10:1c:a0:9b:29:67:6f:f3:56:af:c1:d1:94:bf:4f:e9:
34:c8:b0:dc:9c:e9:d1:cb:34:b4:99:82:f5:a3:92:d0:a1:9f:
14:65:e9:b5:62:41:29:b6:ff:12:1c:b4:e3:7d:2f:ff:d7:0b:
33:2d:51:8b:02:94:94:c8:37:66:37:f4:b7:ee:4e:01:82:81:
4b:dc:64:af:05:54:e4:80:d8:8d:49:73:92:3a:5c:12:d5:8e:
6a:de:e5:f4:d7:ce:46:44:9d:a4:f7:55:b9:d9:a9:f1:4a:da:
95:5e:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org