Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5Thir4oIYoZNiRB_TJBFEn7wTfs.roa
File: 5Thir4oIYoZNiRB_TJBFEn7wTfs.roa (raw, json)
Hash identifier: VlTWu295vT5UqYANQPEZmBycQXeRfT5g6B2U3XUGhxY=
Subject key identifier: E5:38:62:AF:8A:08:62:86:4D:89:10:7F:4C:90:45:12:7E:F0:4D:FB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5Thir4oIYoZNiRB_TJBFEn7wTfs.roa
Signing time: Mon 06 May 2024 11:53:49 +0000
ROA not before: Mon 06 May 2024 11:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20717 (0x50ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 11:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E53862AF8A0862864D89107F4C9045127EF04DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:1d:b3:80:9d:e5:39:f1:ee:9c:6f:5f:88:
dd:8f:67:5c:70:0c:7f:52:97:9d:8e:68:b2:fa:f8:
69:de:39:1e:49:a4:f9:66:b0:3a:5b:7f:b5:47:d8:
20:02:a6:8f:f0:23:07:a8:09:42:bb:a3:4a:4e:c0:
f8:1c:53:0f:72:54:79:51:3f:d9:79:94:0d:5a:08:
1c:df:7f:25:6a:53:94:a4:aa:d8:b2:ec:09:6d:00:
6e:6e:aa:4c:33:79:05:27:80:29:79:83:68:50:9c:
2f:0b:5a:ea:24:38:0f:e7:26:03:06:30:dd:60:15:
f7:27:e4:09:d6:a7:b5:31:b5:38:aa:e0:f0:49:7b:
a2:fc:ca:75:bd:8e:d8:3c:21:37:c7:14:c1:3f:7e:
cf:34:bf:ed:b2:fe:38:ff:e5:56:7f:33:54:89:88:
01:93:31:17:df:e6:58:37:46:93:f1:d3:a9:17:a8:
50:60:47:c4:98:17:4a:79:47:49:0f:23:1a:95:b4:
8b:9c:31:69:bf:36:bf:70:11:dc:bb:82:16:ea:d8:
00:18:7f:b1:6a:a2:ce:ca:aa:4e:06:35:6a:81:9b:
a8:87:b4:4c:de:f0:64:4d:14:2a:69:05:25:24:22:
8d:41:61:2f:f6:4e:8f:67:d2:a2:cb:bb:82:0d:3c:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:62:AF:8A:08:62:86:4D:89:10:7F:4C:90:45:12:7E:F0:4D:FB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5Thir4oIYoZNiRB_TJBFEn7wTfs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:72:04:23:7b:3a:87:57:64:26:a1:96:0b:1e:89:a5:64:bf:
ae:9c:25:a8:be:4b:c1:bf:21:5e:4a:3a:f8:9c:f4:0e:ef:12:
92:89:f9:47:2a:2a:76:9f:d9:9b:a7:72:84:47:dc:cf:30:54:
cf:33:b2:96:0d:f3:45:d0:2c:a8:aa:4c:9d:5e:60:38:26:cc:
12:c6:5f:3a:93:28:69:6d:89:55:67:df:1f:16:64:c3:e3:20:
4f:b0:db:2f:9c:f0:7f:3e:74:db:d4:14:76:6e:60:55:99:fe:
0d:58:6d:29:26:1d:7a:cf:d0:e7:1f:ac:ad:0d:2e:f2:b1:c8:
28:d8:55:06:f1:9e:f8:da:16:39:0c:18:fd:75:2f:09:35:d9:
a8:94:3c:e8:54:6b:f7:0c:df:49:5f:9b:64:eb:a8:d0:c4:cc:
0e:ee:4d:d1:97:87:e0:c6:e3:39:a3:25:5b:9e:16:1b:0c:74:
53:97:9b:af:eb:6b:a2:47:c0:ab:30:1d:00:af:90:ab:8c:96:
b0:77:1f:e5:ce:63:d2:c0:4b:9b:c2:eb:75:54:0e:10:7b:b5:
bc:3b:0b:a6:b0:7f:14:58:e8:0f:84:8d:ad:e3:ba:22:86:8f:
ca:3c:aa:f3:39:7f:83:45:c4:48:b2:68:40:10:c9:ed:70:0c:
f2:d9:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:46 2025 by rpki-client