Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7Cp9_ViWQnPKWtW00fttttEZhak.roa
File: 7Cp9_ViWQnPKWtW00fttttEZhak.roa (raw, json)
Hash identifier: YEzBRF2Z5Q+Isg6SKbrEfVBRzL+eA2/K9fcTfTKIbyk=
Subject key identifier: EC:2A:7D:FD:58:96:42:73:CA:5A:D5:B4:D1:FB:6D:B6:D1:19:85:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41C1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7Cp9_ViWQnPKWtW00fttttEZhak.roa
Signing time: Tue 16 Apr 2024 06:23:28 +0000
ROA not before: Tue 16 Apr 2024 06:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16833 (0x41c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 06:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC2A7DFD58964273CA5AD5B4D1FB6DB6D11985A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:23:ca:4a:b3:ae:55:8d:66:84:71:f2:ec:
2f:b6:cd:94:59:44:49:7c:09:4b:f1:ef:eb:82:57:
8a:50:80:b5:6c:7c:87:58:03:e7:06:bc:8d:43:d1:
48:f6:cd:da:6d:91:56:37:73:77:4a:41:b9:db:98:
ac:0a:0c:a6:7f:6b:2c:83:69:84:69:25:ed:b9:6d:
90:16:c1:53:44:0e:9d:25:ef:f8:78:78:a3:06:e5:
c3:c3:19:70:30:5a:12:b0:2c:8b:f5:2b:f7:9a:f6:
c3:10:3e:be:92:46:cc:8a:87:c1:7e:73:36:d9:24:
0a:ef:99:f5:7d:46:44:4c:8c:28:50:e0:77:ba:ed:
6c:c7:70:7b:99:2b:11:e5:90:8c:7b:9d:9b:d0:d2:
72:3f:5b:63:63:d6:4e:ce:5a:48:aa:1b:7e:89:de:
b2:02:29:61:ce:43:39:09:b8:5e:a8:7b:44:89:96:
6b:eb:a0:b7:75:c9:02:91:34:20:ae:db:fe:1b:36:
41:68:b0:71:8b:27:e7:fa:84:21:00:cf:13:a6:34:
44:6b:60:fd:aa:4a:3f:2e:40:0c:c5:d2:b1:4f:29:
7f:ac:21:07:20:5e:0a:d6:48:a2:b6:74:7a:b4:7d:
8a:67:e2:a9:48:e7:2d:f0:ff:ce:a8:18:7a:eb:29:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:7D:FD:58:96:42:73:CA:5A:D5:B4:D1:FB:6D:B6:D1:19:85:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7Cp9_ViWQnPKWtW00fttttEZhak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:d3:80:51:8c:39:99:61:44:ae:83:7f:c1:60:51:0c:a7:8f:
14:78:ea:18:95:bd:11:05:56:c2:ab:25:0e:49:0a:15:55:f2:
e2:f5:20:53:61:57:f9:cd:9f:cd:2e:9b:5b:b7:05:a9:bd:e0:
04:65:71:14:92:a7:8b:3f:1e:6e:a5:1c:72:13:7d:cb:b1:e3:
f9:06:33:e5:af:24:98:4f:68:70:82:e5:0b:74:e2:85:3f:c5:
7f:81:ea:f6:8b:0f:f7:1a:77:b9:be:72:f6:f0:6b:99:fd:35:
6b:a4:ea:39:6b:cf:41:c5:85:8e:3f:2e:0a:0c:88:e3:bb:6f:
f8:a0:b7:ad:4f:f4:9a:b8:d5:f7:74:b1:6e:c1:de:dc:95:f2:
66:63:30:1b:32:8d:89:8f:bf:37:09:28:0d:9e:97:f8:ce:ea:
1f:bd:c4:0c:dc:08:90:d9:4a:be:fe:a8:02:b8:e0:37:55:2b:
2b:9c:11:41:a6:45:07:13:aa:8c:e4:33:0f:83:97:cd:87:a9:
d5:4b:b1:1f:0f:29:cb:7a:cc:5a:ce:c9:3d:c6:c6:16:c8:59:
06:2e:86:18:d2:32:bf:bf:99:85:64:b6:4d:15:f2:71:24:58:
73:58:c8:35:4b:3a:58:30:2a:e3:2a:59:a3:e6:a1:7a:0f:1c:
04:e3:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:17 2024 by rpki-client on console-ams.rpki-client.org