Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2VeeMY1JuJn2AEQcmnLHGAXJXnw.roa
File: 2VeeMY1JuJn2AEQcmnLHGAXJXnw.roa (raw, json)
Hash identifier: fHlFAav0ouYh/2tZtlN7mAJdO2eYjF9h4x5/sDLQRso=
Subject key identifier: D9:57:9E:31:8D:49:B8:99:F6:00:44:1C:9A:72:C7:18:05:C9:5E:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 373D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2VeeMY1JuJn2AEQcmnLHGAXJXnw.roa
Signing time: Tue 02 Apr 2024 05:52:16 +0000
ROA not before: Tue 02 Apr 2024 05:52:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14141 (0x373d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 05:52:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D9579E318D49B899F600441C9A72C71805C95E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:de:74:ed:bb:06:0f:72:f7:8b:33:f0:26:
12:92:76:9f:8f:cb:32:c7:4e:b8:a4:60:43:f8:26:
64:84:4f:4d:cf:7f:04:c1:1b:28:b4:95:d0:05:bb:
25:3d:24:80:d2:b1:90:13:71:e2:d0:3b:ad:4b:8b:
cf:40:29:a6:52:44:e1:60:b1:af:7e:a2:27:38:3b:
85:5d:03:86:33:b0:dd:54:fe:84:8c:ef:3d:ca:32:
08:09:1f:17:c6:c8:3e:e3:3a:80:62:bf:71:27:73:
4b:5b:c5:1e:5e:79:fa:0e:57:1a:fa:0c:a6:c9:c5:
9e:e1:10:69:38:eb:8a:5a:b8:fa:d5:c2:b7:08:f7:
d4:e4:f3:d1:63:3e:dc:52:a3:63:f8:c6:01:16:fc:
66:6b:73:0e:06:d6:28:ce:7a:88:d6:0a:59:28:67:
fd:8c:44:b7:e7:5c:f9:df:40:9e:c0:e1:c4:6b:da:
0d:77:a0:ef:89:c9:a5:d9:51:ce:2e:36:2c:fe:5e:
ff:9b:1f:63:41:09:94:84:f2:96:2f:68:bc:4a:ae:
18:62:cd:0a:b1:6f:8f:a5:bc:a0:0f:63:e3:72:ef:
e7:81:6d:eb:02:a3:44:f4:4d:90:36:19:a5:7f:04:
58:f1:66:74:8c:5c:a8:5d:11:0a:05:e9:eb:f5:f3:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:57:9E:31:8D:49:B8:99:F6:00:44:1C:9A:72:C7:18:05:C9:5E:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2VeeMY1JuJn2AEQcmnLHGAXJXnw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:f1:36:b1:5b:5b:6d:b8:73:d3:55:56:6e:b0:b9:6a:c9:df:
7a:68:06:b0:fe:76:94:73:4f:5c:56:ab:ce:03:64:87:6b:1d:
65:5d:d7:67:22:1c:b3:ab:a8:5d:95:e9:87:ed:54:f2:47:e8:
17:ed:b4:8d:39:9a:84:74:b4:0b:b9:5a:57:4a:a9:df:af:b4:
f8:7e:26:b5:94:60:3f:c1:71:6c:57:d0:a2:e0:a2:88:e1:ee:
dc:9d:62:6f:ff:39:09:a6:59:a0:df:ab:ce:eb:3e:9d:34:61:
d1:43:c2:73:96:08:bc:63:ce:45:70:bb:0b:59:fe:84:c0:73:
72:0e:78:5b:40:ad:cd:df:24:10:1f:4d:39:c1:79:e2:1a:b8:
e8:19:97:0c:2d:f6:bd:7f:e1:39:cc:b1:59:ca:80:20:ad:d3:
24:52:cf:85:ae:ec:53:3d:dc:bc:66:a2:23:4b:9a:75:ec:15:
1c:3a:b3:48:24:01:48:f0:2f:0e:b4:08:da:02:1f:d6:78:51:
1a:7e:1d:f6:33:4b:ea:15:00:46:26:63:1d:05:1d:57:1d:eb:
e3:5a:2a:8a:e2:3d:19:ed:74:1f:c9:60:a8:11:86:b6:3b:26:
9e:b2:5c:0b:41:80:2d:f9:35:d9:83:b8:44:e0:04:5f:85:65:
d2:2c:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org