Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8QMzsUYROMD7Zmy2_ljMFnz5Cgs.roa
File: 8QMzsUYROMD7Zmy2_ljMFnz5Cgs.roa (raw, json)
Hash identifier: sb1ble0lPn9Hz71YBIDoQg6e0Hu+HT2oz+lzM1MeNhw=
Subject key identifier: F1:03:33:B1:46:11:38:C0:FB:66:6C:B6:FE:58:CC:16:7C:F9:0A:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41FD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8QMzsUYROMD7Zmy2_ljMFnz5Cgs.roa
Signing time: Tue 16 Apr 2024 13:52:56 +0000
ROA not before: Tue 16 Apr 2024 13:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16893 (0x41fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 13:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F10333B1461138C0FB666CB6FE58CC167CF90A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:f3:f3:08:ff:9f:ff:6c:e3:a9:14:5c:f0:
9f:aa:e3:64:36:ad:1e:6b:dd:c1:2a:6d:24:e4:a0:
bb:81:ad:d6:85:72:16:6b:63:00:ed:67:21:c9:4a:
72:84:f9:76:2c:2d:bb:1d:a2:b0:04:cf:31:4d:68:
2c:9f:ec:17:f5:ed:80:98:34:f2:5a:ba:c7:fe:32:
4d:62:6f:8d:dc:09:51:7d:f2:88:ed:48:c9:70:ab:
78:b0:46:f9:cd:94:e3:62:c4:dc:96:45:c3:35:7d:
35:0c:6b:11:cb:a7:d9:ba:1d:ba:f9:b0:10:81:f5:
91:53:2a:10:6d:ea:96:ae:fd:f5:2f:90:d9:dc:ec:
e8:74:e4:4c:1b:18:a8:87:f5:1d:1e:30:a2:aa:8b:
bf:54:d6:a9:df:88:63:f8:0e:8d:e3:1d:87:d5:2f:
34:05:63:6a:aa:be:e2:a0:46:1b:4b:2d:48:6f:e8:
bb:3f:56:75:4f:7f:af:fe:dd:93:4b:07:a2:0b:62:
31:52:35:05:40:c0:53:a0:8a:e4:7c:10:4a:10:49:
6e:b8:d4:43:4e:a3:e8:2e:c0:06:50:ad:da:30:4e:
9b:4b:d7:85:d3:9f:3e:81:6c:5f:9e:70:5d:84:36:
31:db:f6:e2:dd:c4:47:27:12:1d:c2:51:3a:39:ea:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:33:B1:46:11:38:C0:FB:66:6C:B6:FE:58:CC:16:7C:F9:0A:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8QMzsUYROMD7Zmy2_ljMFnz5Cgs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:e3:16:2a:9d:b3:12:4d:4a:73:18:61:51:d8:2d:66:13:cb:
09:0d:f7:ba:aa:d1:85:88:eb:45:d6:65:3a:44:04:8a:c9:45:
03:2f:e8:8a:b8:bf:86:8b:de:83:b7:b6:1d:70:b3:07:ef:65:
68:83:43:cc:cf:3f:a0:68:b0:e3:e6:b8:0a:c6:4c:d6:bd:27:
65:4b:d8:81:8b:4c:fe:5a:eb:2d:53:2b:30:59:4c:16:38:57:
9d:3d:60:0f:d5:35:00:02:42:c6:a9:9a:ea:e3:ba:ae:44:af:
7d:6a:09:7c:22:54:ae:fc:46:0f:ef:35:31:ea:5c:a2:b5:57:
bb:c6:aa:11:31:eb:2d:82:90:35:22:37:4c:a5:f4:ac:51:c9:
e3:6b:e3:b9:0f:32:ce:9a:c4:13:b4:5d:c6:1a:1c:f6:dd:b6:
50:f5:b3:8a:28:9b:5a:11:8d:b3:9c:a8:33:e2:51:6b:2d:16:
0f:07:0e:4a:2f:05:85:c2:7e:47:6a:fd:44:be:42:2a:80:a8:
de:51:10:71:13:50:9c:fc:8b:d7:b1:ad:94:1d:7d:a9:2d:69:
ed:7f:3e:b0:26:39:b3:48:ed:da:ba:87:64:e8:30:9d:c5:12:
9d:e1:55:2a:fd:af:f7:5c:ec:f2:ef:a2:b5:7a:ff:29:78:b5:
d6:d0:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org