Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5kjep0rS9qftPhn-JEX-aOp2vao.roa
File: 5kjep0rS9qftPhn-JEX-aOp2vao.roa (raw, json)
Hash identifier: DCyYhmLjKiVnNMpi/9V9s/vNvxCXQz3OGPxEATXTyoU=
Subject key identifier: E6:48:DE:A7:4A:D2:F6:A7:ED:3E:19:FE:24:45:FE:68:EA:76:BD:AA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BC5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5kjep0rS9qftPhn-JEX-aOp2vao.roa
Signing time: Mon 08 Apr 2024 06:52:34 +0000
ROA not before: Mon 08 Apr 2024 06:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15301 (0x3bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 06:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E648DEA74AD2F6A7ED3E19FE2445FE68EA76BDAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:7b:47:e2:53:0b:aa:56:76:98:14:c7:d2:
97:d4:f3:ac:98:19:43:1d:b3:f1:85:66:50:1e:c4:
f3:08:bb:c5:0e:8d:63:e2:b2:40:3a:e0:37:ef:ef:
32:96:a4:e3:67:df:63:ce:06:98:97:be:52:de:c8:
5f:ed:9e:26:a8:be:17:b2:12:b3:d8:3d:b3:b8:0e:
21:a9:10:1c:b7:57:42:79:f7:28:64:2c:e2:05:dd:
02:4d:65:93:39:5f:ef:b3:57:c9:86:d5:43:3a:28:
3d:d6:4d:46:60:db:6f:ba:dc:65:1a:e7:1c:b3:89:
ca:f5:1f:79:69:70:d2:fc:95:9f:ac:a3:53:d1:fe:
c2:7b:77:77:e3:10:92:1d:b1:17:d0:13:d0:93:5b:
93:f9:f0:41:f1:ea:af:25:8f:37:53:59:bd:7b:59:
a0:87:d7:c4:8c:49:e7:8a:f1:4e:33:b8:7b:34:70:
72:f1:de:3e:39:32:61:39:d0:9d:81:93:6a:31:10:
29:64:98:9f:a9:ec:ef:85:79:36:00:ac:d6:47:8b:
cf:09:16:16:28:e7:cb:0e:bb:5a:26:e5:ec:7a:5d:
d5:c9:0d:af:7f:ce:40:00:71:f8:5a:67:b2:9f:f5:
7c:d9:78:1e:c1:f9:61:4a:97:67:a1:55:26:7d:66:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:DE:A7:4A:D2:F6:A7:ED:3E:19:FE:24:45:FE:68:EA:76:BD:AA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5kjep0rS9qftPhn-JEX-aOp2vao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:85:32:83:62:b0:2b:b9:57:e8:2d:e5:15:78:b0:bb:3d:c2:
60:8c:07:32:03:3c:bc:94:b2:33:ab:ae:15:58:a1:75:1d:9d:
6a:57:a1:7d:cf:1a:1b:b7:99:28:b3:d4:e1:47:a5:8d:82:53:
95:7e:ba:c0:c4:7f:ce:1f:77:64:fe:91:24:05:2f:56:bb:b3:
cb:11:66:af:17:89:9a:3f:c6:a9:df:26:52:d5:60:d6:c3:5e:
72:1d:2d:a5:3c:42:8b:3f:92:26:15:88:aa:59:d6:01:ea:96:
8e:21:2a:01:85:32:48:e8:29:62:78:e0:64:a8:c0:06:e4:95:
1d:46:50:da:d4:5b:39:e4:8e:6a:39:b5:c0:95:52:04:e0:5d:
03:bd:c0:d9:31:9e:a3:96:55:cb:3a:1c:79:66:22:ad:91:11:
f0:f7:42:d6:ad:83:46:3d:ea:66:01:81:11:4c:5d:8a:96:c5:
ae:90:15:27:8b:0c:3f:67:68:fb:17:36:e1:7c:7d:d1:18:8e:
17:7b:1e:ee:8a:77:cb:63:09:13:12:81:ea:85:ab:59:a0:77:
78:1d:19:4b:d4:95:c2:dd:2d:8c:ed:2b:fa:6a:10:ba:76:15:
5e:65:6f:6c:60:e7:45:4c:4f:98:29:63:6b:20:f9:f6:e2:e7:
9e:2c:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org