Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6CrS2lMhjx3m-qix_uh947pjvQk.roa
File: 6CrS2lMhjx3m-qix_uh947pjvQk.roa (raw, json)
Hash identifier: TY4wrlV41wD6dzhSwCR7p7L3YT8KCjy9a/D3XzmS6NE=
Subject key identifier: E8:2A:D2:DA:53:21:8F:1D:E6:FA:A8:B1:FE:E8:7D:E3:BA:63:BD:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6CrS2lMhjx3m-qix_uh947pjvQk.roa
Signing time: Sat 11 May 2024 18:24:03 +0000
ROA not before: Sat 11 May 2024 18:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21729 (0x54e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 18:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E82AD2DA53218F1DE6FAA8B1FEE87DE3BA63BD09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:7f:88:d5:67:23:65:e7:59:48:43:4c:fd:
bb:04:e9:4f:1b:d4:33:ab:3a:4f:12:1f:7a:30:d2:
20:c3:e9:2f:df:66:79:d6:46:fc:b5:e3:2f:70:66:
61:8b:e2:5d:c2:82:af:33:46:7e:c9:9c:a4:59:3b:
48:1f:07:27:0a:60:25:9d:34:9e:65:d2:5d:1c:6d:
63:ec:01:55:3b:16:0d:db:0f:71:e6:7a:92:27:7b:
3d:8b:aa:d8:83:c0:c4:f8:73:1b:86:af:d7:18:29:
21:fd:e0:b8:05:9d:45:e1:8e:9d:53:ab:a1:78:c2:
47:31:31:45:c9:67:97:42:6a:03:81:2a:a0:3a:ab:
8f:33:9e:ae:5d:a5:9b:5b:ed:12:ec:61:f8:b3:d6:
e9:4a:41:8e:a4:aa:94:17:df:93:7d:b6:6d:c1:12:
e7:a2:1e:c9:da:8e:82:de:2a:3f:7f:cc:53:13:aa:
11:e5:88:93:95:f7:17:46:57:a5:fb:a8:c3:bf:72:
1f:7f:72:39:21:8b:56:0c:be:d2:a1:90:3e:5d:c3:
f1:f7:18:7f:be:df:ec:17:da:27:6d:c6:d3:e9:f3:
17:12:55:96:48:ae:78:0c:cc:fd:df:96:93:a1:39:
12:3a:bf:ca:ae:b6:be:e3:fd:11:5f:4c:68:61:57:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:D2:DA:53:21:8F:1D:E6:FA:A8:B1:FE:E8:7D:E3:BA:63:BD:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6CrS2lMhjx3m-qix_uh947pjvQk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:27:be:a0:e8:7e:da:e3:65:0d:84:56:53:79:81:91:12:a9:
41:be:d5:22:2a:d6:76:bb:6c:fe:21:ee:9d:af:a6:2e:ba:2e:
3c:0c:95:0c:d5:13:92:44:13:0f:5c:cf:e9:29:16:cc:b6:11:
4f:ba:5b:ef:13:ef:c3:73:b9:71:64:5d:38:e7:b9:a5:a8:d5:
c9:36:6f:e9:46:38:91:e7:f9:c9:7d:d0:9f:1d:0d:24:bd:b6:
db:a6:5b:b6:13:0a:cd:ec:03:f9:86:8f:76:65:7d:86:ee:da:
fc:19:19:e7:ab:e6:4f:f3:bc:45:cc:a2:97:4f:18:13:ea:34:
52:33:b6:e5:0c:f2:21:ce:fb:85:63:41:97:cf:27:16:03:6f:
c8:64:d4:80:48:71:65:db:67:75:e6:5c:15:87:b7:6b:f6:af:
0b:b3:22:0e:9e:16:49:24:20:16:c2:d6:c5:d2:71:ea:fc:4e:
98:cd:f5:b1:ac:2f:52:68:1c:96:a5:eb:2c:38:d2:66:d4:47:
13:d7:0c:af:07:f6:3f:d9:1a:b0:a8:63:e3:38:b4:07:2d:0a:
dd:5e:00:fb:d4:f2:3b:c5:d0:ac:1c:16:04:9b:bb:e2:b9:c2:
30:38:66:23:ee:d8:54:98:bc:66:22:48:5f:8d:84:25:52:91:
66:0c:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:04 2025 by rpki-client