Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5WLrsvpB-8rjb4VYVwnWtpEZjjg.roa
File: 5WLrsvpB-8rjb4VYVwnWtpEZjjg.roa (raw, json)
Hash identifier: EelQSR2VdiPvO2H2J3BpmhrvK/daQOIdrWtXXUxKb+M=
Subject key identifier: E5:62:EB:B2:FA:41:FB:CA:E3:6F:85:58:57:09:D6:B6:91:19:8E:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5WLrsvpB-8rjb4VYVwnWtpEZjjg.roa
Signing time: Thu 04 Apr 2024 11:52:20 +0000
ROA not before: Thu 04 Apr 2024 11:52:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14573 (0x38ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 11:52:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E562EBB2FA41FBCAE36F85585709D6B691198E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:75:b0:0a:a9:8c:86:79:0f:c0:84:55:57:
89:a7:09:29:9f:ba:7f:a7:6d:8d:41:16:ac:91:65:
8e:06:9e:2b:fb:b1:8b:a0:91:00:78:10:de:ec:61:
95:fc:a7:0d:e3:0e:2a:cd:90:1d:f7:ff:56:f3:4e:
45:e5:5c:e4:d8:6b:e6:d4:c5:83:51:6c:65:4e:a3:
2c:d5:40:7d:5d:97:fc:15:25:3e:18:92:b7:4f:73:
77:0d:57:a7:66:df:7e:01:23:79:6c:ff:1a:2c:e2:
4d:63:a4:b5:c4:26:29:4b:d9:f5:ad:dc:cf:56:17:
85:3e:7c:99:8a:4b:9f:5d:3d:75:d0:4c:12:92:08:
32:fa:16:bc:4a:c8:85:73:fe:c4:52:b9:53:e1:8a:
66:97:1a:17:6a:3d:07:0e:2f:60:c8:e8:20:52:0a:
92:c4:d5:72:c0:be:86:89:67:40:f5:fb:ef:80:86:
9c:32:d4:7b:e1:34:18:82:93:54:3b:24:db:62:81:
fe:63:ce:b2:8f:0e:f8:74:9d:d3:71:83:9b:e9:f1:
e7:81:ee:4a:2b:1d:0d:c1:79:53:85:a6:c7:77:6b:
86:db:86:62:58:48:9b:e3:98:70:b6:cc:93:ff:16:
3e:d7:b5:17:43:33:8b:13:24:a9:5e:0a:8e:fa:b8:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:62:EB:B2:FA:41:FB:CA:E3:6F:85:58:57:09:D6:B6:91:19:8E:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5WLrsvpB-8rjb4VYVwnWtpEZjjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:8a:cd:86:32:7e:26:ea:18:60:03:56:57:5f:55:b0:68:ae:
9d:d6:88:a8:d2:f9:23:f4:4b:19:25:c5:66:bb:e3:d2:a3:59:
94:72:85:dd:72:1d:6e:b6:23:52:1e:dc:84:00:0b:3e:f5:60:
37:f7:21:da:a6:65:6a:f5:3a:69:42:f9:e3:34:0a:b2:fa:dc:
9a:0c:61:27:19:28:28:e1:df:55:08:76:89:26:ec:08:30:41:
2b:41:f1:61:64:74:9a:1e:db:71:82:90:37:ed:2b:c2:c3:47:
9d:fc:0e:1c:39:60:34:4b:d1:13:d7:f9:df:cf:df:cf:77:9e:
3f:80:da:b4:0e:39:86:3d:23:48:93:e8:ec:57:22:be:4a:a9:
20:68:ac:9e:eb:44:2c:a9:f9:80:4e:8b:ec:a6:5b:f2:6a:57:
a4:b2:9e:ac:d4:88:92:fa:de:9d:b0:6e:de:9c:8d:41:e4:b9:
66:76:26:c2:66:27:f8:99:64:f3:34:35:eb:f4:7d:3d:2e:2b:
a6:79:76:39:da:cf:59:47:83:07:a9:44:f7:af:5c:12:5a:4a:
9b:7e:c9:f5:46:1e:b7:f0:17:a2:6d:30:8f:b4:7f:ef:2e:c7:
63:bd:24:2c:f7:e8:bc:78:56:cc:d0:13:4d:3d:6b:a9:ee:95:
45:87:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:15 2024 by rpki-client on console-ams.rpki-client.org