Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4D6Q0CV_Kgm7IOKjWHLt8BXe70Q.roa
File: 4D6Q0CV_Kgm7IOKjWHLt8BXe70Q.roa (raw, json)
Hash identifier: k7CBoUQu4yz5ZcdnAqSAhuPgsEGs6KdBikbypwuYRpw=
Subject key identifier: E0:3E:90:D0:25:7F:2A:09:BB:20:E2:A3:58:72:ED:F0:15:DE:EF:44
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48B9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4D6Q0CV_Kgm7IOKjWHLt8BXe70Q.roa
Signing time: Thu 25 Apr 2024 13:23:31 +0000
ROA not before: Thu 25 Apr 2024 13:23:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18617 (0x48b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 13:23:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E03E90D0257F2A09BB20E2A35872EDF015DEEF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:43:d0:9e:e2:e9:73:6a:12:d5:61:c3:4f:
54:00:9c:c8:8e:06:ab:80:2f:c1:98:25:5d:07:04:
2a:10:a7:f4:8b:3b:bd:f1:dd:d6:83:f8:b4:07:38:
af:66:54:9e:5a:0b:a0:64:1f:b0:17:21:98:3a:3e:
7f:cb:bc:35:ce:a8:70:cd:be:19:70:0f:b6:b6:db:
2b:d4:ea:a6:a1:17:75:aa:e0:6d:15:ed:57:1b:2e:
4c:2f:bc:10:86:7d:5d:98:c3:8f:bd:26:5c:bd:e6:
26:c7:c1:c3:2a:b8:65:a3:9d:1e:f3:4e:a6:14:2c:
28:1f:df:1a:08:db:e6:74:7d:d9:57:de:49:aa:89:
ca:be:96:4f:ec:a5:cc:1a:34:c6:37:35:9c:1e:3a:
d3:90:a2:a2:83:39:24:10:9e:52:36:8d:50:63:e9:
80:8f:ce:68:82:89:22:30:f9:7d:03:14:9a:23:ea:
ff:11:de:9c:8c:25:a8:48:a1:ea:07:df:46:b2:d9:
02:cc:2c:ed:f1:8c:f7:60:bb:0c:ad:74:d6:96:4e:
d7:69:97:24:2f:f0:45:e0:45:06:f0:d1:6f:d4:a8:
b9:89:cf:7a:d1:e9:2a:2c:42:99:4a:b1:6c:5b:fe:
90:52:45:a2:59:33:21:91:fa:7c:40:46:d7:7e:d2:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3E:90:D0:25:7F:2A:09:BB:20:E2:A3:58:72:ED:F0:15:DE:EF:44
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4D6Q0CV_Kgm7IOKjWHLt8BXe70Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
89:24:fb:47:f3:07:38:06:31:2f:30:ec:7a:fc:fb:a1:83:2c:
88:74:9a:12:0e:38:32:fa:81:4e:f5:be:f8:20:32:11:21:1f:
ab:09:fe:7b:9f:48:a3:7f:e1:f5:c2:b4:eb:3f:ba:ab:63:0c:
82:24:1c:f2:a0:40:88:8b:dd:f8:78:bb:7a:d6:19:f5:d4:24:
dc:cd:47:a5:6d:59:b4:ae:36:29:33:fa:e0:80:09:ec:6a:54:
0c:7c:c4:9f:48:f6:04:8f:0d:af:58:5a:a9:27:f3:b5:b2:40:
06:ef:b5:d3:cb:9f:9f:65:5c:81:f6:24:b9:9a:fe:fa:78:3d:
c3:78:c6:ee:47:ce:04:f0:0a:97:df:b6:a1:50:9b:c4:60:3a:
fa:95:22:ac:1c:7f:34:a6:3f:ed:9c:14:03:06:ae:94:1a:7b:
32:75:1a:48:de:5a:6d:44:35:08:9c:87:06:d4:fd:ee:de:cc:
32:87:6a:8e:29:1e:a9:ae:62:f2:45:f7:0b:62:7b:05:9d:0a:
fe:e8:79:09:e5:98:2c:c8:4d:07:56:c4:31:72:07:c4:77:62:
b2:52:3d:26:85:a5:51:63:2a:58:f4:c1:c9:ef:22:3e:6b:56:
ab:9c:44:c9:ba:5b:ee:9e:b1:d7:fa:f3:d9:88:14:6c:6a:40:
be:0e:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:23 2025 by rpki-client