Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8kJs9vvUoaJpxGYtWJoS5PGIipg.roa
File: 8kJs9vvUoaJpxGYtWJoS5PGIipg.roa (raw, json)
Hash identifier: oErav7l6JB2JS+nIVyD9D76RXR3GIUVTDfFFBr6kx4c=
Subject key identifier: F2:42:6C:F6:FB:D4:A1:A2:69:C4:66:2D:58:9A:12:E4:F1:88:8A:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C69
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8kJs9vvUoaJpxGYtWJoS5PGIipg.roa
Signing time: Tue 09 Apr 2024 03:22:36 +0000
ROA not before: Tue 09 Apr 2024 03:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15465 (0x3c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 03:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2426CF6FBD4A1A269C4662D589A12E4F1888A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:27:af:dc:b3:52:ce:b8:f2:84:e3:6c:a4:
e1:b0:36:b0:40:a4:bf:7d:27:ae:fe:90:8b:d9:e4:
44:74:4b:20:fc:53:44:71:e2:3f:23:cd:de:78:e0:
a5:b6:78:01:66:9a:ec:1f:27:c9:19:a8:22:e6:0b:
c5:11:4d:d1:b1:a0:e8:33:96:dc:ff:38:24:c2:6e:
96:ec:48:88:0b:87:36:70:4e:bf:87:18:fa:4c:dd:
ae:24:02:60:77:e6:79:f9:77:6f:fe:c0:10:db:40:
5d:a5:6d:4d:60:14:12:7a:f5:2c:4e:32:fe:3a:ce:
a0:b2:18:43:b3:d3:d4:96:10:c2:0b:79:67:15:64:
5a:e6:75:64:92:57:1a:ac:53:0e:2c:f6:4b:2c:fc:
ba:e1:12:e5:02:6c:c3:14:52:d0:91:86:af:05:e1:
0e:d8:8a:ba:bc:1f:a9:26:47:00:52:2b:37:96:79:
46:43:f8:0c:41:f3:28:99:12:04:d3:87:20:60:7b:
8d:d6:17:ca:97:45:96:bc:dc:76:d0:3a:a8:49:90:
e2:9c:06:55:c1:69:e5:82:72:82:68:4a:27:90:b2:
54:85:9b:6e:7d:77:eb:d5:80:26:5f:e3:4a:3a:ab:
a8:ee:f2:97:b8:f8:94:31:b9:fb:df:fe:0f:71:70:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:6C:F6:FB:D4:A1:A2:69:C4:66:2D:58:9A:12:E4:F1:88:8A:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8kJs9vvUoaJpxGYtWJoS5PGIipg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:ea:3a:55:16:5b:75:f9:57:dc:91:f5:e8:95:f6:8f:b5:03:
f8:f3:ea:9c:d2:3b:51:cc:14:89:b0:4e:4d:3b:d5:d4:ab:f2:
8b:61:10:47:04:40:60:65:4c:6b:51:fc:54:72:ab:9d:f5:2c:
50:0f:32:22:2a:a2:fd:22:73:ed:ae:ee:87:af:82:27:45:a1:
da:da:75:78:72:2f:28:8b:5b:ea:2b:4f:33:1a:40:d2:fb:78:
24:6a:69:25:76:67:84:a4:03:71:26:ae:f4:21:27:5a:72:06:
72:72:a4:d3:0b:2a:82:5b:0a:ce:a7:7e:53:d0:37:4b:3d:f5:
33:65:15:b9:23:9f:1f:7d:c7:71:91:fc:4b:a6:c4:31:7a:83:
b8:5b:88:53:98:41:93:05:81:47:57:cf:ad:5d:d8:6a:9a:04:
0d:dc:f2:fd:7b:61:c5:4a:f3:8f:ba:a5:1d:f5:b4:d7:94:78:
d3:af:57:13:dc:74:34:8b:f6:e6:86:e7:4d:31:71:ef:6c:6e:
ff:08:0d:2f:e7:a6:15:10:01:e0:58:68:4a:36:48:c8:47:d3:
91:39:d8:fa:27:07:33:23:7c:79:6e:df:dd:e3:df:0b:f8:2d:
34:04:22:e1:1b:94:40:32:58:cf:25:ac:42:d9:3f:35:ea:07:
64:4d:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org