Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/57p-uSUYfQjBbq5ATqo7Apw9m3Y.roa
File: 57p-uSUYfQjBbq5ATqo7Apw9m3Y.roa (raw, json)
Hash identifier: I0u8SZSmik3/U+2stz+y+xDJuvfRCNoBchuHGEFI1/M=
Subject key identifier: E7:BA:7E:B9:25:18:7D:08:C1:6E:AE:40:4E:AA:3B:02:9C:3D:9B:76
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4139
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/57p-uSUYfQjBbq5ATqo7Apw9m3Y.roa
Signing time: Mon 15 Apr 2024 13:22:54 +0000
ROA not before: Mon 15 Apr 2024 13:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16697 (0x4139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 13:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E7BA7EB925187D08C16EAE404EAA3B029C3D9B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:b2:be:f9:8d:cf:97:73:98:19:8f:46:17:
4e:54:99:9e:c6:39:a3:5d:5a:e2:65:c2:31:ab:28:
6b:6c:64:ec:ea:fc:4a:96:58:de:c8:40:82:42:15:
89:a3:18:2e:e0:45:f5:b8:c7:c3:2e:b9:7c:11:99:
7b:a6:5b:9c:c3:f9:33:6a:0f:4e:56:3b:2e:99:d4:
92:23:6c:5f:33:37:77:ab:c9:47:37:da:0d:28:f3:
ce:c4:e4:83:65:35:45:8d:1c:83:5e:60:74:fc:fc:
5c:e9:92:cc:fc:1d:e6:d6:ef:44:e1:19:44:82:c4:
5c:f1:c9:dc:25:07:74:f6:1c:9c:45:2b:0e:47:e5:
b3:e5:66:03:73:65:5b:78:49:9d:19:9f:e2:3a:d1:
b5:3d:56:d4:fa:98:67:52:89:0d:9d:1f:87:34:e6:
30:e9:83:50:6b:a4:70:d9:c0:d1:e2:da:10:23:f5:
4b:20:98:55:9e:f5:61:30:86:9c:68:0a:1a:4e:38:
14:77:4b:e5:13:13:2d:c4:47:b7:70:19:5c:a7:65:
44:7b:fd:c1:c3:a1:9d:e0:e3:91:c8:08:4f:05:67:
95:e0:45:2b:e4:84:0d:44:23:fd:1b:13:00:55:ed:
a4:e0:73:06:5d:b2:b4:61:ef:15:2f:71:b7:c1:62:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:7E:B9:25:18:7D:08:C1:6E:AE:40:4E:AA:3B:02:9C:3D:9B:76
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/57p-uSUYfQjBbq5ATqo7Apw9m3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:61:9f:ab:d1:b8:6d:d7:2a:01:7c:2a:14:19:66:32:d7:30:
63:27:34:1f:ce:f4:b1:c4:4c:da:c7:67:66:1a:00:4b:72:aa:
d7:cb:2c:9e:bf:ef:4c:90:17:64:a0:a1:aa:d2:0b:dd:f6:d8:
1e:7e:e0:2e:81:ad:38:24:88:21:3c:d9:2b:73:ff:3a:ae:2a:
0d:16:64:9a:d1:55:df:45:bf:f2:d4:78:85:07:82:df:17:30:
62:78:37:23:f2:e9:c1:33:76:45:86:a8:a8:87:bb:ec:92:2a:
13:5d:2b:f6:91:f1:8f:fd:98:b2:06:5a:63:e1:a2:33:2a:b8:
78:d0:4a:8f:d7:19:8a:ca:05:70:91:5c:2c:54:0a:5e:c3:09:
98:1f:c2:d3:67:70:3e:c1:69:69:90:ab:74:2a:37:65:c5:d9:
87:bb:c5:09:36:56:7d:c2:33:3f:f4:56:f2:9a:32:81:32:88:
35:d3:4e:2a:ea:f0:99:fd:54:a4:56:23:36:69:16:7c:da:7b:
8d:f8:97:92:e5:51:ed:22:93:75:b5:4b:9d:b1:5e:1e:7f:9a:
2d:1e:4f:ce:67:5e:53:9b:e5:2a:2b:bf:72:c2:f6:68:38:79:
46:5a:49:ee:d3:a1:24:de:6f:ad:1b:f9:9f:36:1f:6b:7f:b3:
f5:2c:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org