Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3whlUQ94-anP68oKDX0sI1I71cg.roa
File: 3whlUQ94-anP68oKDX0sI1I71cg.roa (raw, json)
Hash identifier: A15K68I7TZlytrety+xhdxFIfuwyn8s+uBM4qb4KIBc=
Subject key identifier: DF:08:65:51:0F:78:F9:A9:CF:EB:CA:0A:0D:7D:2C:23:52:3B:D5:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C71
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3whlUQ94-anP68oKDX0sI1I71cg.roa
Signing time: Tue 30 Apr 2024 12:23:33 +0000
ROA not before: Tue 30 Apr 2024 12:23:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19569 (0x4c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 12:23:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DF0865510F78F9A9CFEBCA0A0D7D2C23523BD5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:a4:1e:0d:90:42:4c:8c:8b:22:65:b4:c3:
cf:4f:15:2c:38:26:f3:78:f5:f8:cb:cc:ed:df:d0:
82:03:0f:7e:f0:d1:25:02:ed:0f:b8:b9:64:14:24:
15:ec:39:bf:49:83:a4:bd:53:f9:a3:3c:ec:ae:79:
dc:38:10:6f:0a:ba:af:17:93:9e:0d:ad:9f:47:9b:
33:64:44:04:df:ed:4a:ee:7b:1d:65:58:f4:0c:84:
d0:c0:03:3a:e0:da:ff:fb:9e:1a:9c:63:d2:62:71:
2c:a9:97:b2:01:01:ae:08:19:d4:24:cd:5e:9b:f7:
6d:09:dc:01:c7:74:76:ec:24:57:4b:c2:5f:46:bb:
1a:3b:58:fc:79:ae:5e:b4:ad:7e:b6:48:64:b0:ac:
4f:e7:09:1a:a4:bb:0b:16:2c:e6:8b:ae:6d:1f:3f:
59:2f:e6:74:4d:7b:0c:31:79:60:a5:71:19:90:88:
17:9d:6a:3c:b5:8a:b3:2a:d0:e9:8d:84:ec:71:69:
15:83:61:5c:b2:37:14:08:55:6e:aa:51:cc:3d:2a:
3c:fb:67:4a:9f:89:f1:9d:be:d1:e7:61:c6:38:89:
f1:2c:d1:f9:c4:63:4f:c6:ce:7a:60:23:5c:4e:a9:
53:e2:5a:55:65:cd:57:97:df:f0:b2:d3:71:85:7e:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:65:51:0F:78:F9:A9:CF:EB:CA:0A:0D:7D:2C:23:52:3B:D5:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3whlUQ94-anP68oKDX0sI1I71cg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
36:f0:4f:ad:9e:65:ba:c5:be:79:cc:ef:87:de:55:2a:db:a3:
80:ad:97:c6:c5:b4:91:27:bf:ce:62:57:c4:e6:6f:71:30:78:
ad:82:7e:b5:61:1d:b2:21:a3:4c:39:0d:64:72:63:88:3e:c8:
70:9d:2f:fc:f1:0c:69:b2:07:6b:65:61:b7:27:c5:2a:a2:48:
24:b1:63:3c:13:99:f2:3a:7c:0e:2a:97:90:98:6b:71:f9:77:
61:32:2d:45:eb:77:7f:e7:97:b1:c8:74:93:74:0f:09:48:e0:
5e:e7:9b:27:80:76:84:5b:5b:95:d4:e2:62:c5:79:2c:b6:20:
d3:3c:70:04:f9:92:c7:ba:53:4d:c4:bc:8b:67:7e:29:61:b3:
18:cc:51:ae:10:1b:51:27:0a:c1:8f:aa:86:d1:9e:a3:b7:b8:
4a:f2:92:30:fa:6b:14:a5:84:df:df:cf:cb:bf:15:9a:e9:5e:
f4:b9:aa:65:2b:da:45:4f:b1:e6:f9:09:96:55:0c:48:64:78:
8c:0e:08:d7:8f:93:e6:d3:bf:12:36:a1:3c:c3:c9:4b:a4:b7:
d3:2e:1c:ef:2c:cb:e6:b8:21:05:e5:fc:26:f8:f2:fd:40:18:
78:7f:ea:56:4c:ff:a4:dc:0a:52:38:78:cb:ba:cb:60:4e:ff:
05:55:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org