Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8VgzxX5-j8fE92qv_6a-Jr2Fk9o.roa
File: 8VgzxX5-j8fE92qv_6a-Jr2Fk9o.roa (raw, json)
Hash identifier: glR+wXUBDbmQX427slV4bxWesKMXfYckRNoUgJBNQKk=
Subject key identifier: F1:58:33:C5:7E:7E:8F:C7:C4:F7:6A:AF:FF:A6:BE:26:BD:85:93:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36F1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8VgzxX5-j8fE92qv_6a-Jr2Fk9o.roa
Signing time: Mon 01 Apr 2024 20:22:14 +0000
ROA not before: Mon 01 Apr 2024 20:22:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14065 (0x36f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 20:22:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F15833C57E7E8FC7C4F76AAFFFA6BE26BD8593DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:70:f7:c1:2a:ff:96:d1:e0:07:6e:cc:b5:
97:08:1c:b3:5b:1d:63:6b:38:d6:dc:2d:58:71:62:
21:db:76:8e:33:38:65:d4:a0:62:58:4e:ce:98:88:
03:82:1e:fb:48:4b:f7:18:c2:c1:7f:f3:8c:e5:f2:
e1:90:45:a6:d5:c5:66:0b:9f:11:65:04:67:9a:25:
f7:03:43:1b:25:9f:18:f2:56:b6:fc:42:73:20:63:
0a:57:b7:33:0a:c4:e8:d1:52:ec:c9:eb:e6:2c:b3:
07:54:e7:7b:fe:e1:08:ad:41:9a:d3:2e:44:74:d6:
ce:fd:40:9c:31:83:62:04:b0:ce:d0:31:0f:49:45:
6a:fd:39:36:41:45:86:a5:76:1c:d2:b4:bf:9e:66:
81:fd:8b:37:f1:0f:31:e5:49:fa:cb:8a:2f:db:71:
d0:d7:aa:c6:7c:61:bb:03:fd:ae:c9:5f:13:b8:21:
ff:57:a5:f3:ab:3c:32:11:69:51:12:d7:35:23:8a:
c7:22:4e:b3:b4:57:f0:a3:3f:42:fd:a2:1d:d4:06:
07:34:f4:79:e7:2d:ac:89:4e:47:c7:64:8d:d4:c1:
cb:76:26:7a:41:93:52:3a:ba:33:dc:87:e8:7c:25:
89:81:e7:23:09:ee:27:c9:8f:70:48:2d:50:3f:cb:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:33:C5:7E:7E:8F:C7:C4:F7:6A:AF:FF:A6:BE:26:BD:85:93:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8VgzxX5-j8fE92qv_6a-Jr2Fk9o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:3d:b1:4b:67:10:36:53:18:8d:b5:ce:a7:35:0e:85:77:8f:
3f:26:fa:29:30:30:1b:56:39:fa:73:46:94:ef:8e:2f:7d:3f:
8e:2d:5b:ea:76:42:f9:44:68:0b:03:0f:41:fa:08:e6:6d:5a:
aa:1c:9a:6c:a9:2c:e0:20:ee:54:c6:cd:a3:cc:50:f4:ba:c8:
d3:f8:d3:7d:bc:21:8a:56:6f:48:7e:05:d7:9a:2b:6d:ac:b2:
d2:14:97:e2:77:49:aa:d3:83:9e:21:9b:03:82:3f:1a:b8:cc:
4b:07:0c:35:a4:7e:a8:be:4e:03:56:e7:ad:48:c5:16:ff:14:
09:2f:7f:ec:5a:2d:56:58:50:18:c0:5d:fd:b9:6f:d6:e6:d6:
54:bb:ac:61:78:aa:ba:07:fa:51:91:f0:67:72:f0:78:9d:c3:
7d:db:3c:a0:fa:3a:c0:16:e9:35:d6:c1:f8:f3:fa:9a:4d:36:
63:ea:cb:ea:4e:09:bf:c8:b7:c0:d6:d1:74:d2:ce:9c:71:9e:
89:68:21:1c:30:96:6a:31:26:63:88:a3:50:a3:4b:07:fc:8d:
ef:d9:9d:7b:8f:54:d7:4c:fc:28:17:a5:9e:51:79:96:8a:15:
c2:6d:27:b2:2c:f4:52:03:13:d8:7b:ad:81:75:25:16:62:95:
7c:1c:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-ams.rpki-client.org