Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8Ffjd-QzXIoDuy9ebQ9TEWzVMzo.roa
File: 8Ffjd-QzXIoDuy9ebQ9TEWzVMzo.roa (raw, json)
Hash identifier: KWD6BXWrrB0H6FlogPiROlYaPJpuCDL2IYM6k+Rhrkk=
Subject key identifier: F0:57:E3:77:E4:33:5C:8A:03:BB:2F:5E:6D:0F:53:11:6C:D5:33:3A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3571
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Ffjd-QzXIoDuy9ebQ9TEWzVMzo.roa
Signing time: Sat 30 Mar 2024 20:22:12 +0000
ROA not before: Sat 30 Mar 2024 20:22:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13681 (0x3571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 20:22:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F057E377E4335C8A03BB2F5E6D0F53116CD5333A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:38:7e:5f:5b:94:bd:22:6c:36:cf:09:5f:
ee:69:68:d9:ad:a9:01:0c:36:97:8c:1b:df:9a:d8:
90:26:d2:8e:c2:15:d0:c3:a7:45:62:b4:14:ca:b8:
46:3b:39:3b:4d:b6:64:4d:29:0a:6f:68:d4:cc:43:
66:d8:18:4d:83:e1:99:61:3b:ab:e6:49:01:09:bb:
54:a5:da:61:6a:c4:e9:ba:25:5d:96:49:51:e9:09:
ac:13:05:3a:c6:df:a1:79:c2:c8:b8:f9:45:f1:f7:
e9:83:ef:73:6a:8f:4c:d3:e6:75:6a:9f:0b:e1:9c:
3a:82:05:ed:6d:24:6f:8f:17:bf:69:fd:06:54:33:
88:a2:87:83:4a:d3:4b:7b:08:e0:52:3b:78:dd:c4:
c7:23:31:f7:0a:92:44:01:ac:d2:b2:c3:12:4b:54:
49:8b:fa:5f:d4:6d:01:22:83:88:47:82:d5:0f:10:
c2:16:20:49:33:fb:83:a2:eb:54:1a:78:5b:05:cd:
cd:95:df:c5:0d:58:2a:af:88:0d:ab:a8:97:dc:b0:
30:d6:6d:aa:26:b2:d3:11:19:03:d8:8c:c0:a9:20:
76:f5:8c:88:e4:c6:b2:a9:95:2e:4d:bf:7c:2c:91:
33:9c:8f:a5:ca:48:fe:5e:80:61:4f:cc:31:c9:e5:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:E3:77:E4:33:5C:8A:03:BB:2F:5E:6D:0F:53:11:6C:D5:33:3A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Ffjd-QzXIoDuy9ebQ9TEWzVMzo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:cf:ba:80:6d:5c:4a:ff:e9:f1:ba:a7:48:8c:aa:3f:1d:f2:
ca:68:5f:27:b9:02:d2:13:dc:8d:ee:a6:01:ad:be:f4:a7:12:
4f:3f:ea:2b:69:40:95:67:e7:c2:c7:22:fc:66:ad:c9:b7:d2:
44:55:e8:9e:80:fe:69:43:c2:06:98:7a:47:c4:ca:98:29:f6:
f4:31:b2:d3:5e:3f:a7:51:f7:69:8a:37:0c:14:da:dd:9a:38:
cb:58:be:46:cc:5c:0c:95:19:e4:03:11:a6:e2:66:75:f6:0e:
98:f5:ab:46:e0:cc:42:7d:ec:d1:33:65:14:77:a6:90:23:70:
26:9c:d3:a1:de:62:4b:12:56:4d:ca:d6:a5:22:ee:b4:28:26:
b2:90:6a:ad:b2:13:85:0b:1e:c1:06:55:0b:0b:45:69:05:49:
2e:3d:47:d0:69:cc:8f:b7:bf:c8:ce:c8:1e:d1:1a:cc:75:8b:
b1:55:6d:4c:05:80:26:5d:2e:81:e6:d9:3c:bc:04:8a:7d:27:
68:92:4b:ee:c1:20:97:d4:07:09:cb:21:e7:74:8e:3b:0d:06:
c9:c1:80:20:90:f1:b4:90:5e:b8:4e:3c:78:6c:9c:65:c5:49:
17:55:15:c9:fa:9f:09:d9:cb:68:b4:84:27:c2:e4:7e:ee:c0:
d9:88:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org