Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4DAdhiXe-R5Jt2GTcl4ezhNWmkM.roa
File: 4DAdhiXe-R5Jt2GTcl4ezhNWmkM.roa (raw, json)
Hash identifier: Ep7miMvZxWNmfNBZKJ1fT+QZkZbK5oqy3jqOMT/XZQo=
Subject key identifier: E0:30:1D:86:25:DE:F9:1E:49:B7:61:93:72:5E:1E:CE:13:56:9A:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E8D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4DAdhiXe-R5Jt2GTcl4ezhNWmkM.roa
Signing time: Thu 11 Apr 2024 23:52:49 +0000
ROA not before: Thu 11 Apr 2024 23:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16013 (0x3e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 23:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E0301D8625DEF91E49B76193725E1ECE13569A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:7b:ee:40:99:4d:64:6f:69:6d:7b:d3:bc:
9f:19:f9:de:56:92:7f:18:49:7a:2b:5a:80:90:41:
3c:c1:8f:40:9a:1e:f4:23:eb:cc:7a:3c:f2:d9:b5:
99:1f:32:76:58:a7:bf:0a:ea:1b:62:f7:1a:38:61:
56:e5:72:f3:59:09:da:27:f5:6b:a6:2d:e0:6b:9f:
57:8e:6b:88:26:5e:b3:b4:69:2d:43:04:05:2d:4c:
65:0b:3d:f6:b1:6f:a5:b6:df:13:4b:90:74:6f:9d:
c9:e9:b2:62:ad:f4:fb:01:f4:48:89:bf:49:7d:2c:
a1:6b:56:52:c0:54:7a:dc:cc:bd:5b:00:f5:6d:5a:
c4:3f:bc:ed:b9:a7:ce:32:26:e9:28:a8:db:09:e4:
7c:59:26:2e:de:84:93:57:52:0c:98:b1:c5:c2:6b:
b2:c9:cd:da:77:ce:a8:2b:ef:49:95:09:58:82:41:
c4:dc:1f:90:66:e4:2b:ef:ae:20:6d:c9:db:f4:df:
02:ce:3f:8a:c0:18:a9:ef:2d:2b:7f:91:dc:f1:94:
75:fb:83:81:60:72:55:53:7b:50:20:af:94:34:45:
16:c3:b8:4d:9b:a9:c1:a1:be:28:f8:70:15:83:be:
8f:06:dc:bb:ef:b1:d4:c5:7a:0f:10:db:0c:48:3e:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:1D:86:25:DE:F9:1E:49:B7:61:93:72:5E:1E:CE:13:56:9A:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4DAdhiXe-R5Jt2GTcl4ezhNWmkM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
19:b4:5d:26:70:ed:7a:d4:6f:8b:0b:2d:39:22:cc:e1:6f:1e:
6e:a7:f0:dc:f8:fb:c2:52:ab:4c:e2:0a:d2:7d:ed:9a:ad:08:
5c:b1:2e:62:4c:ff:41:99:bd:1a:f3:97:81:5b:28:1e:d2:d8:
d3:05:e1:40:c9:94:58:be:a1:ec:e5:12:16:25:ab:d1:b8:9e:
68:13:c5:60:22:88:a4:cf:8c:97:bb:f8:6f:60:c1:89:f1:7e:
80:fb:39:1f:2d:fe:75:87:35:c2:4c:49:a9:d5:6f:5e:97:08:
3a:32:85:3e:61:e5:e6:9c:72:f9:42:77:9e:a0:04:54:65:d8:
52:04:4d:39:ab:17:aa:6b:8c:79:d7:3e:d7:11:21:3b:32:77:
f8:36:6e:1b:1e:b0:d4:85:07:d5:f3:33:46:2a:e5:63:3e:6e:
43:dd:4e:dd:9d:39:13:1a:da:d7:89:55:d2:5f:c1:05:eb:e2:
3a:02:52:c4:bf:7d:6a:94:7a:f1:02:d4:67:e1:d7:69:4a:86:
7f:ae:be:94:ae:6b:38:d7:3b:61:3b:0b:83:e2:37:20:c1:cc:
f6:52:1b:8f:ae:cc:83:40:6a:6e:a8:6d:28:95:68:82:12:68:
7e:b8:ee:9a:ed:5f:64:42:cd:b2:88:b4:f8:ee:f4:bd:a2:55:
6b:6e:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:23 2025 by rpki-client