Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7m3j3REHnknKsBrxXE3o-qAjT50.roa
File: 7m3j3REHnknKsBrxXE3o-qAjT50.roa (raw, json)
Hash identifier: JeREl4HNn+Skw3XUrNSbh1B7wAx9mcrhzR14Wdc10s4=
Subject key identifier: EE:6D:E3:DD:11:07:9E:49:CA:B0:1A:F1:5C:4D:E8:FA:A0:23:4F:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44B5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7m3j3REHnknKsBrxXE3o-qAjT50.roa
Signing time: Sat 20 Apr 2024 04:53:27 +0000
ROA not before: Sat 20 Apr 2024 04:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17589 (0x44b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 04:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EE6DE3DD11079E49CAB01AF15C4DE8FAA0234F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:58:b5:1c:10:52:72:1a:43:15:12:4c:e3:
2e:8a:06:b7:87:5a:bf:0c:71:8c:51:c4:4a:a0:c1:
a2:27:53:1a:e4:9f:0c:a1:3d:cd:d7:ab:b2:7e:eb:
48:31:4a:91:47:04:39:9d:29:04:c1:01:df:6f:80:
4d:d5:4c:57:58:69:58:73:ed:8a:67:2e:05:49:02:
be:f1:c3:1f:c7:c4:33:56:78:48:7c:09:ef:11:1b:
3d:a5:bf:d8:ce:10:11:74:c1:82:c1:01:b4:76:05:
d6:6e:e7:25:17:c7:0a:09:de:d5:4e:5b:c8:0b:c5:
99:82:37:59:71:8b:35:c0:a9:96:a8:5f:c1:2b:61:
53:22:2f:9f:4a:31:55:fb:46:54:cd:ef:bc:fe:dc:
13:f4:ac:72:6f:e9:5d:4d:b4:95:d0:df:24:84:83:
61:e0:77:cf:57:91:21:04:1b:ea:77:0f:21:f6:5d:
7f:8d:a4:54:a9:84:08:4f:23:4e:8f:aa:fd:43:39:
83:e3:5c:94:ce:1a:9a:32:7a:e0:f0:26:27:67:1b:
3b:a9:52:b1:2f:55:f1:d1:d4:d0:9e:f1:83:10:cb:
33:0b:03:68:e5:e2:b3:7a:74:a2:36:c7:e1:5a:2d:
3e:9e:3f:74:d0:85:3d:4c:d0:b0:dc:78:c9:78:6a:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6D:E3:DD:11:07:9E:49:CA:B0:1A:F1:5C:4D:E8:FA:A0:23:4F:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7m3j3REHnknKsBrxXE3o-qAjT50.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:16:10:e7:70:76:e2:a2:dc:c9:d5:f5:1c:02:9e:ae:91:17:
c8:50:c0:a4:c0:d1:b4:2c:97:b6:06:6b:4d:f5:24:12:fa:75:
67:fc:fe:0d:d0:2a:f0:66:1d:12:eb:9f:c1:4c:a4:88:76:af:
1d:be:20:82:31:26:ad:5b:13:91:a1:cb:f2:76:f4:a9:dc:4b:
b5:5d:1a:5b:44:06:71:8f:0b:b9:6e:99:a6:5e:9b:01:dc:1c:
67:7d:56:74:b5:33:92:2c:95:b5:06:72:ea:25:78:7c:fd:49:
6f:e6:4f:cb:78:c8:c1:77:96:c9:66:a5:6e:e4:80:d4:2e:c8:
68:ac:35:d1:6a:41:03:b4:d2:d6:a9:68:c9:18:74:f4:39:2f:
91:e1:06:2f:9a:ef:98:3a:c2:10:4a:dd:76:bd:7e:e1:f8:7f:
13:fb:eb:b7:38:fc:36:c9:c6:da:f2:0d:d5:ac:9a:de:0a:4a:
9c:72:26:ce:6e:7e:53:69:a1:15:34:ea:74:76:6a:88:b6:45:
50:9e:e0:ec:2e:ce:3f:1b:fc:13:ec:1e:c1:78:9f:1c:bc:93:
21:a5:db:fa:36:69:27:58:d9:c9:a0:f0:98:1b:eb:25:8a:77:
60:4b:2b:2a:62:eb:28:31:8a:ee:10:02:7a:a6:16:8e:f9:10:
49:e8:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org