Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6FdUxtpZtH3I_ykeYAxyyZ63DIY.roa
File: 6FdUxtpZtH3I_ykeYAxyyZ63DIY.roa (raw, json)
Hash identifier: usQDpl9zxjaOHXgLB/LWmb7fhFBp/JOsWtyQLVQgJiY=
Subject key identifier: E8:57:54:C6:DA:59:B4:7D:C8:FF:29:1E:60:0C:72:C9:9E:B7:0C:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4AC5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6FdUxtpZtH3I_ykeYAxyyZ63DIY.roa
Signing time: Sun 28 Apr 2024 06:53:24 +0000
ROA not before: Sun 28 Apr 2024 06:53:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19141 (0x4ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 06:53:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E85754C6DA59B47DC8FF291E600C72C99EB70C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:ff:86:62:c6:88:2f:a0:c8:dc:4d:95:35:
cf:b2:fb:bf:81:85:06:af:bc:0b:d2:6d:4b:4c:e0:
4d:c9:99:eb:fe:28:be:cf:0a:a4:7f:24:d8:d9:63:
2b:f1:66:da:05:07:ef:a8:0d:62:86:bc:cf:3f:ba:
8f:5f:5b:ac:cc:f7:d0:8a:38:9d:01:da:ac:88:a0:
a4:6a:86:67:e7:e8:81:e8:62:5a:7a:3d:ed:05:34:
46:b6:f8:ea:ec:cb:15:98:f3:07:fc:cc:ed:af:27:
7a:d1:2a:68:d5:75:d9:4c:6d:ba:a6:4c:fb:26:51:
49:6e:71:6c:df:30:e2:bf:b6:d2:97:02:1e:f5:21:
6f:0f:a8:fa:2c:ba:0c:5b:e7:32:1e:17:2a:db:8a:
24:c1:56:c8:87:c7:fc:dd:1d:76:6d:66:72:1d:d4:
71:dc:ef:5a:2f:62:94:02:c5:ee:b2:bb:2e:c0:c8:
90:a3:b4:b3:36:af:2a:f4:17:36:60:f4:66:ec:06:
01:65:21:d7:7f:9c:7e:a8:bc:fb:83:11:55:5f:fe:
5d:3a:18:c3:c6:7c:02:c8:3e:2b:e8:95:d8:73:2c:
44:db:11:85:25:a5:91:67:a3:00:dc:36:3e:b5:7a:
05:f9:65:d1:2e:5b:a7:fd:f3:a4:60:94:d6:af:fd:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:54:C6:DA:59:B4:7D:C8:FF:29:1E:60:0C:72:C9:9E:B7:0C:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6FdUxtpZtH3I_ykeYAxyyZ63DIY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:cb:09:ce:63:a2:03:ba:4e:9a:33:07:e2:b7:11:e4:fd:c2:
a9:c7:0e:2d:7a:82:8d:dd:3e:3f:a6:9d:15:c6:b5:56:3d:33:
3c:a5:a4:29:59:61:85:92:71:df:b8:b4:e3:09:7e:3e:23:18:
bb:d8:17:d0:dc:6d:7f:35:e3:ef:42:e7:43:08:0c:2b:1f:ff:
a4:5e:3a:89:66:03:89:df:d7:44:30:1a:91:3a:a6:64:9e:d7:
d4:28:2d:6a:15:4c:cc:42:d2:7f:16:22:ca:4a:ef:8d:7b:4e:
db:86:01:f4:e8:ba:2d:f1:e2:f6:69:07:bf:cb:89:ca:1a:7e:
98:5b:7c:82:43:58:94:01:20:24:b6:fd:1a:df:70:07:4e:4c:
ce:98:bc:c6:40:fe:78:c2:94:f2:f2:f3:80:9a:be:70:d9:82:
33:73:85:18:b9:bf:71:a8:b3:f2:21:3d:8c:fe:c5:73:69:7d:
89:4c:bd:15:f5:31:94:06:6a:36:b1:45:a3:03:62:d8:44:d2:
96:e5:79:b8:23:c3:80:ab:ca:d3:d6:4f:c3:60:4f:da:12:d0:
b2:21:2a:6e:8e:7b:be:d1:58:e5:81:07:70:b0:3b:c5:82:c0:
98:91:a6:6c:e3:cd:9f:7d:3e:21:40:22:68:b3:6a:6d:a9:c1:
bf:7d:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:51 2025 by rpki-client