Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/62USY10ZMJBk4rQGcLV9Q3MFLr8.roa
File: 62USY10ZMJBk4rQGcLV9Q3MFLr8.roa (raw, json)
Hash identifier: 3e1Tj+3njDSCT0oFAHAP60bzpU6ORCuUIFLOsiawWxs=
Subject key identifier: EB:65:12:63:5D:19:30:90:64:E2:B4:06:70:B5:7D:43:73:05:2E:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EFD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/62USY10ZMJBk4rQGcLV9Q3MFLr8.roa
Signing time: Fri 03 May 2024 21:53:50 +0000
ROA not before: Fri 03 May 2024 21:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20221 (0x4efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 21:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB6512635D19309064E2B40670B57D4373052EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:b9:ac:a0:50:1e:c4:69:84:3d:4b:32:52:
c6:e1:a9:73:55:c4:0b:da:a7:e7:3c:31:4e:5c:84:
cd:c1:ca:0b:c5:b5:d0:79:8d:88:46:73:26:b7:9a:
52:1f:21:1a:53:75:43:58:f3:c6:83:f2:cd:50:5f:
cb:a2:7a:7a:c3:40:db:2f:32:02:89:55:d9:d4:43:
b6:0c:0f:ab:86:1a:c1:a5:f3:12:e6:31:2e:52:ee:
b4:50:ef:aa:f9:37:11:72:d3:1d:28:de:d0:03:62:
a0:48:5c:9a:d9:58:34:3c:2c:f0:47:8b:bb:95:d0:
fc:a2:d5:35:1b:36:74:26:49:75:6e:b1:36:5f:37:
72:57:ab:db:f7:29:c0:82:4b:a6:f5:e4:4f:ee:12:
81:85:7e:99:96:f0:87:d2:5e:68:d7:44:36:4e:df:
f7:bc:a3:3b:e8:22:f9:43:d3:e1:2f:fe:04:4a:f1:
6c:82:98:54:d3:b6:b1:c0:85:a7:30:3c:85:d3:05:
99:e6:02:80:16:7b:f2:ca:5e:d8:da:e8:f2:cf:ba:
81:66:84:fc:91:16:47:cd:10:64:c0:ab:be:e3:b1:
8b:42:22:91:4a:bc:94:bd:ea:a0:4f:eb:c1:63:e8:
db:95:56:d0:7a:2e:0e:7c:8f:71:27:3d:3b:ac:f7:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:12:63:5D:19:30:90:64:E2:B4:06:70:B5:7D:43:73:05:2E:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/62USY10ZMJBk4rQGcLV9Q3MFLr8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
89:25:e2:86:ab:93:95:2e:65:b3:a9:97:01:7d:d9:98:68:27:
10:a7:81:49:09:6a:69:03:91:3a:fd:5e:bf:79:f3:bc:7e:19:
b2:55:3a:4d:83:3f:99:01:94:12:48:c0:89:1b:0f:f2:39:85:
83:b7:db:06:18:61:f2:c9:38:e2:1a:65:c8:e6:f7:8f:93:da:
03:64:b0:45:9a:35:66:b0:9b:1d:14:7f:be:96:8a:87:ec:1b:
64:9a:1d:67:ac:81:ea:18:5d:47:37:48:ee:66:a1:68:4e:54:
22:5d:ab:b0:58:4c:1b:5d:93:d9:0d:58:c5:06:19:9b:e9:3c:
c3:bc:23:66:a7:ab:e2:b4:f1:ab:de:c2:e5:3c:75:7e:c4:ac:
fa:01:7a:27:2b:41:73:0e:f1:0e:b0:36:3c:ee:e4:d4:f7:42:
07:ed:ba:a7:f4:7f:b3:64:6b:ac:35:90:51:7d:ff:4b:63:99:
71:6a:69:1c:ae:69:59:cf:5f:e4:ae:93:53:99:7f:f4:7a:87:
d3:c9:fd:f4:ef:63:c6:b1:0b:b5:4c:21:2a:6c:97:7b:a0:df:
ba:eb:de:c1:68:e0:4a:89:c2:37:b3:e8:10:21:8e:33:04:2b:
7d:99:ba:58:9d:ce:9f:a0:a1:fd:f4:77:1c:d1:3c:70:0f:43:
3b:12:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:15 2024 by rpki-client on console-ams.rpki-client.org