Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3b4y6Nr6xTdGRZeFV0AUNjboJ64.roa
File: 3b4y6Nr6xTdGRZeFV0AUNjboJ64.roa (raw, json)
Hash identifier: nuN8pqM5yHZr3TnFWa9q/KbdIDkIVfwqEw0MlOTvD+M=
Subject key identifier: DD:BE:32:E8:DA:FA:C5:37:46:45:97:85:57:40:14:36:36:E8:27:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CA1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3b4y6Nr6xTdGRZeFV0AUNjboJ64.roa
Signing time: Tue 30 Apr 2024 18:23:54 +0000
ROA not before: Tue 30 Apr 2024 18:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19617 (0x4ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 18:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DDBE32E8DAFAC537464597855740143636E827AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:4b:b1:d6:68:8a:65:4c:75:a2:03:db:b5:
d4:43:9a:6f:f7:13:d8:8f:16:8f:78:80:d1:62:3e:
05:40:3a:2c:5b:11:9b:4b:f4:95:79:f1:db:27:3e:
bf:67:92:4a:b3:66:89:2c:2c:d4:95:e2:7b:4d:cc:
7f:42:ab:7a:e0:a5:fe:c9:12:cf:b9:27:85:1b:36:
c0:9a:fe:56:ca:3a:5a:10:23:27:69:a6:54:d2:0d:
4b:6d:c1:8a:3c:96:b7:70:fb:7e:bd:36:8e:dd:96:
38:5c:b3:2e:57:c2:cd:b1:c9:53:2d:a4:53:ab:3f:
94:dd:19:e7:60:c9:5c:3c:11:49:5d:34:89:2f:dd:
f8:d0:51:57:28:70:9b:ef:ed:0e:6c:25:7b:e3:c9:
29:55:58:6a:c4:f2:cf:48:db:4d:57:32:ce:61:03:
6c:70:c9:e8:59:68:bd:a4:44:07:f8:59:1a:d8:85:
53:1f:0d:eb:6b:5b:60:4f:2d:7a:33:90:b0:1f:02:
79:64:99:14:4e:a2:03:b0:37:ce:f2:a0:73:96:3e:
ad:ee:97:50:06:2e:92:9d:30:32:29:e2:c9:14:a1:
0a:b1:57:db:ac:89:2c:7b:d6:14:74:45:45:c8:b7:
03:c8:31:ba:c8:d7:85:7b:5d:9f:3a:b3:3b:b9:23:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:32:E8:DA:FA:C5:37:46:45:97:85:57:40:14:36:36:E8:27:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3b4y6Nr6xTdGRZeFV0AUNjboJ64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
79:ff:6b:d8:a0:ca:73:f8:45:14:7a:83:1d:14:42:16:e2:d7:
73:4a:ff:d3:fc:f8:a2:0f:f4:71:13:17:13:9a:15:dd:2e:fd:
0b:56:f9:6f:b0:99:ab:d8:5a:7a:33:2d:70:5b:9c:76:9c:66:
02:54:e5:2b:db:1f:ff:11:e9:b3:48:b3:f6:d3:fb:82:e7:1b:
7f:32:f5:75:5d:78:1c:f0:da:9a:97:a7:24:af:a2:c3:d8:d2:
a5:4a:41:31:55:03:c4:c1:d5:74:27:0e:61:80:4d:0a:5d:9d:
28:1f:fe:35:9a:1f:31:d9:f3:58:70:dc:64:0c:2f:88:e6:c3:
92:d5:c2:3c:71:4d:4f:2c:c1:49:6c:29:3d:a6:7d:b4:0c:f0:
e5:c2:63:dd:5f:45:32:cf:b1:0d:8d:6a:af:06:c5:60:b4:a6:
de:5c:f0:e5:1e:3b:ae:cf:95:a2:c5:f0:40:b2:88:ac:d0:9e:
11:32:57:31:c8:ec:c2:a9:8e:72:d6:49:5d:2e:b7:53:26:32:
50:ff:01:e1:80:84:54:58:a6:af:47:c5:64:29:1c:3c:66:f1:
81:3e:b7:4c:55:a8:5c:ad:9d:27:53:98:28:d1:56:ce:aa:eb:
9e:39:64:64:53:98:58:de:80:d7:01:0d:3d:6c:dd:9d:05:b3:
8a:c3:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org