Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4bWZO1AQs5rtRWNa4kJ8jIDOpgM.roa
File: 4bWZO1AQs5rtRWNa4kJ8jIDOpgM.roa (raw, json)
Hash identifier: YaSWVuns2xkpx98/ah2+8hrJs344QNvMD4NJ8qnjqNY=
Subject key identifier: E1:B5:99:3B:50:10:B3:9A:ED:45:63:5A:E2:42:7C:8C:80:CE:A6:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4035
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4bWZO1AQs5rtRWNa4kJ8jIDOpgM.roa
Signing time: Sun 14 Apr 2024 04:52:56 +0000
ROA not before: Sun 14 Apr 2024 04:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16437 (0x4035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 04:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E1B5993B5010B39AED45635AE2427C8C80CEA603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:5f:b9:a9:c5:5b:ff:d8:55:bc:e8:93:33:
63:f1:67:46:9d:9d:ac:f9:03:c6:7d:02:e3:e7:9d:
34:08:d3:55:34:ed:0f:36:4f:4f:3c:9f:80:21:fc:
a6:94:39:52:45:87:f6:ff:cb:07:c8:93:f7:97:23:
b2:d0:cb:31:e1:c0:21:cd:95:cc:28:a8:d3:35:1a:
6e:ed:f2:e5:4c:8f:2b:19:9e:40:30:02:a0:3c:b0:
c2:03:d9:fe:0b:af:0e:4c:15:e0:2a:cf:b3:d7:26:
68:be:91:54:f9:38:f7:26:71:ea:32:66:c7:3b:05:
1b:80:5a:44:99:5d:ce:34:a3:a5:8d:1e:d3:ae:e1:
11:27:0a:6f:d1:46:cb:67:c7:30:bc:5d:ef:03:8d:
f3:03:ba:69:bf:bd:43:f5:54:23:57:47:49:59:55:
9d:5d:da:e0:3e:58:c4:ef:60:b1:18:94:34:62:c0:
12:2a:a8:ba:de:63:40:8f:82:db:a1:5d:7b:cd:fc:
98:81:33:b2:3f:75:fd:af:ac:c4:d1:4c:8f:6c:96:
de:f8:7b:69:2e:e8:36:f7:9a:46:62:d4:70:1b:99:
01:c6:06:01:c2:50:56:18:88:92:93:07:60:d7:20:
55:1d:33:14:3d:61:31:13:2d:54:00:35:22:3b:c0:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:99:3B:50:10:B3:9A:ED:45:63:5A:E2:42:7C:8C:80:CE:A6:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4bWZO1AQs5rtRWNa4kJ8jIDOpgM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:f9:74:6d:3f:3e:16:83:87:8c:02:5f:4b:e9:34:6a:e3:f8:
02:ba:41:42:11:23:1e:41:49:6d:42:21:df:1c:da:ef:00:cd:
ee:18:cb:4f:98:cc:7a:4c:f1:bd:2a:c2:cd:ee:81:7d:3b:6a:
ba:6c:be:eb:07:16:a1:4d:10:a8:00:91:26:1d:b8:ab:8d:d3:
22:2b:a1:42:b3:6f:65:7b:01:8f:36:11:40:5e:33:54:bd:f1:
20:ec:62:e1:fe:a3:86:35:5e:6b:5d:72:34:98:17:fe:ab:67:
45:43:7d:8a:aa:01:b6:1a:83:0c:94:8a:55:9c:35:bb:3e:e6:
a0:a5:8a:23:37:10:24:7c:df:e9:84:0b:05:94:80:07:6d:d9:
aa:58:e7:a0:11:a3:b9:79:b8:18:22:9a:aa:ba:c3:cc:e5:e8:
df:7d:e4:ee:0f:70:32:e9:87:24:d8:71:75:10:07:45:6e:32:
f7:3a:c7:02:1b:46:b4:92:62:01:df:5a:b1:59:e6:0f:8e:dd:
e2:ae:6f:bf:3a:2b:d6:73:e9:56:6a:9d:e9:95:80:88:86:eb:
5e:bf:e0:99:0f:40:da:d3:92:d3:65:bc:e5:0b:b2:9b:24:3c:
d5:d5:37:6b:23:dd:da:8a:63:f4:d3:64:47:09:ec:8d:96:39:
b7:2f:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org