Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/31nXQiyCFNN-GfWgT70KD9Smww8.roa
File: 31nXQiyCFNN-GfWgT70KD9Smww8.roa (raw, json)
Hash identifier: PLu6t4m3GOhHKKxPJLys92Ydu72ZxkSR6HWyibTFUT8=
Subject key identifier: DF:59:D7:42:2C:82:14:D3:7E:19:F5:A0:4F:BD:0A:0F:D4:A6:C3:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F99
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/31nXQiyCFNN-GfWgT70KD9Smww8.roa
Signing time: Sat 13 Apr 2024 09:22:52 +0000
ROA not before: Sat 13 Apr 2024 09:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16281 (0x3f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 09:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF59D7422C8214D37E19F5A04FBD0A0FD4A6C30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:7a:89:23:18:ae:87:a0:99:82:b8:03:77:
d5:14:22:cd:68:70:d6:11:fc:3e:ad:f4:27:19:08:
0d:b6:db:7c:8e:c6:20:29:b5:43:a6:bf:a9:81:08:
42:bf:f1:f1:e0:97:5c:10:15:4d:81:5c:c9:7e:f7:
83:6a:a4:26:73:3c:fa:7d:94:87:47:7d:d8:76:04:
f2:66:40:b6:70:43:70:9d:71:47:1a:52:2a:af:8d:
be:30:f5:ec:30:9d:7e:65:29:74:7f:73:d9:89:50:
1d:8a:4d:f8:6b:7d:d2:60:39:d1:64:62:5b:27:e9:
7c:18:05:a7:89:44:6e:c6:20:d8:81:ca:98:e3:b0:
4c:f5:55:df:11:05:67:c8:50:6f:a6:93:c9:e7:81:
29:a4:9a:4e:05:44:53:fe:07:c7:95:42:ad:fb:58:
54:0a:61:6c:cc:f2:f3:9d:5b:fa:17:16:98:ca:41:
83:1f:85:83:ee:26:35:87:c7:ae:73:53:06:42:3a:
ea:c5:9f:a5:a8:ca:e3:1e:ba:3b:e4:45:e9:10:ad:
f3:6c:3a:8b:9b:ff:4e:81:04:d7:f8:10:d5:5a:43:
f9:ab:f5:ad:d6:29:69:80:0d:d0:ac:c5:c5:5c:6b:
28:a4:54:b0:bf:20:c0:80:c3:84:c9:22:00:98:6f:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:D7:42:2C:82:14:D3:7E:19:F5:A0:4F:BD:0A:0F:D4:A6:C3:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/31nXQiyCFNN-GfWgT70KD9Smww8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:85:0c:e3:aa:4f:41:3a:f6:9b:03:73:48:cf:db:57:a9:3d:
d4:20:06:07:06:e6:4c:93:b4:a6:0a:32:f8:7e:f1:98:af:3d:
9d:e6:2f:fe:ee:a6:39:0c:b3:86:77:84:4a:42:8e:78:96:1d:
99:dc:f2:c4:23:7a:ed:c1:e6:09:dd:96:fb:45:e4:29:15:0c:
d3:ab:2a:95:1d:7e:e4:18:de:12:40:c3:80:56:92:1e:9a:21:
b4:9f:e9:37:37:3b:12:1d:6b:45:b8:ca:fe:5f:5c:1b:2a:d2:
84:9d:17:5a:e4:fa:81:15:62:4a:5c:95:27:9e:7d:e4:a7:89:
5d:cb:3d:77:31:bc:ee:4a:3e:55:6f:a8:ee:d7:58:0b:20:95:
85:35:17:dd:60:57:db:c5:50:bd:67:41:7a:a6:3a:b7:0a:2e:
4f:89:75:73:ed:0b:da:a6:41:92:2b:64:a2:62:e8:f1:48:a7:
1c:9d:b1:54:0b:03:9b:58:10:87:77:7c:06:3c:57:2d:45:ee:
4a:38:5c:ad:20:35:99:6a:8f:18:db:b4:8c:62:07:45:8d:13:
32:bf:96:80:7e:80:86:2f:ae:24:5d:ff:33:fa:a7:cc:3c:11:
37:98:a3:da:6b:90:21:2c:36:71:64:8a:5c:8f:9b:c9:2c:c9:
65:d8:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:04 2024 by rpki-client on console-fra.rpki-client.org