Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2x2lx4RK8Vrkl6zQs6yXLZLCPXw.roa
File: 2x2lx4RK8Vrkl6zQs6yXLZLCPXw.roa (raw, json)
Hash identifier: TRhXBNESNlRV+WfNC0fzmXc3tPZrnmTX1XyFZVmLe/g=
Subject key identifier: DB:1D:A5:C7:84:4A:F1:5A:E4:97:AC:D0:B3:AC:97:2D:92:C2:3D:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4859
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2x2lx4RK8Vrkl6zQs6yXLZLCPXw.roa
Signing time: Thu 25 Apr 2024 01:23:17 +0000
ROA not before: Thu 25 Apr 2024 01:23:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18521 (0x4859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 01:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB1DA5C7844AF15AE497ACD0B3AC972D92C23D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:a7:af:56:86:9c:2f:f6:95:70:45:71:a6:
82:8e:b2:3e:1b:d5:a4:c5:db:1f:b5:9c:4a:4c:57:
d3:8b:87:44:3f:6b:3f:e4:aa:be:24:a6:2b:98:7d:
78:3f:bf:e3:7b:49:46:75:6c:4a:56:a7:f3:6e:bf:
3b:93:ea:4d:fd:5e:4f:45:6d:40:34:cd:59:9b:c2:
06:62:43:02:ca:e2:2f:92:38:9c:80:7d:0c:97:9e:
57:f5:e2:c2:0f:31:a5:d1:90:e9:93:74:1e:f9:4c:
d7:de:c8:e5:99:c0:63:fe:86:cf:cd:37:c0:b7:8f:
1d:a7:c3:dd:3a:a7:9c:ac:db:d2:14:73:74:20:a0:
30:79:9c:c1:17:84:98:f9:e5:c6:24:cc:12:89:47:
c2:c7:0c:b4:26:d0:bc:2d:47:3e:8f:8a:4b:16:0f:
73:75:67:d3:7c:87:e8:01:a3:bc:69:4c:1a:10:10:
43:43:d4:e9:39:cf:0e:fe:af:c9:21:ea:89:09:c9:
27:73:39:15:65:9b:82:b2:98:f7:0f:6f:95:9d:5b:
c3:75:4b:c9:8e:0e:03:1b:b6:af:51:f0:17:c1:40:
90:c5:1f:dc:a5:f8:f0:ab:69:cc:c9:c6:10:79:2c:
b6:41:3c:fd:37:e6:58:8e:56:f7:73:69:e6:c5:9b:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1D:A5:C7:84:4A:F1:5A:E4:97:AC:D0:B3:AC:97:2D:92:C2:3D:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2x2lx4RK8Vrkl6zQs6yXLZLCPXw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
76:c5:88:5b:db:74:d4:bb:14:a7:f8:cb:17:29:44:8a:4e:11:
8f:7e:a8:ba:d6:57:fb:7c:35:50:77:40:f1:5f:9d:fb:f2:20:
7b:59:65:2a:27:da:5d:7f:4a:a9:e9:0c:b0:9b:ca:0b:e6:e8:
da:37:7f:66:d9:b6:e3:ec:c9:c0:28:2e:d6:32:b2:43:44:46:
21:99:80:f5:08:de:5f:b0:61:d3:e9:4d:87:bc:9a:ef:b8:14:
58:d7:d1:70:12:0a:23:78:ef:a7:62:6a:b1:bf:81:24:54:9a:
26:bc:cd:d3:24:ae:e1:47:77:cd:07:77:45:44:36:71:60:eb:
67:ec:c5:e1:5f:fc:25:21:d9:cc:04:88:07:d1:65:de:5c:f0:
41:51:4c:24:a9:ab:a8:42:50:1b:ad:5b:7d:c0:76:d3:9a:af:
60:b2:da:5b:ff:38:a4:c4:b8:9d:e4:10:90:bd:ce:20:e9:af:
d6:cc:8c:4c:9e:b5:2a:11:4c:2f:5a:69:81:c1:80:64:53:05:
02:96:f9:06:43:20:3e:e3:cc:7c:71:d6:2d:c1:56:6b:4d:72:
8c:5a:56:43:05:8e:f4:24:d9:42:6c:45:8a:54:e9:51:64:f8:
77:c3:06:ab:61:bc:5d:bc:bd:68:e3:d2:aa:01:7f:6b:2d:34:
f3:1e:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:04 2024 by rpki-client on console-fra.rpki-client.org