Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/962y7-BWBUdDx8sOMtBEVF6SK9k.roa
File: 962y7-BWBUdDx8sOMtBEVF6SK9k.roa (raw, json)
Hash identifier: Lx3gZALZfDMoZWnawGOu2pF0BckyIi9OKWoaQ6TLazg=
Subject key identifier: F7:AD:B2:EF:E0:56:05:47:43:C7:CB:0E:32:D0:44:54:5E:92:2B:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/962y7-BWBUdDx8sOMtBEVF6SK9k.roa
Signing time: Mon 15 Apr 2024 03:52:57 +0000
ROA not before: Mon 15 Apr 2024 03:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16621 (0x40ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 03:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F7ADB2EFE056054743C7CB0E32D044545E922BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:77:7d:b0:e4:e8:ce:0d:c8:1f:53:d9:7f:
f2:96:81:80:72:73:2f:32:e6:7c:2b:18:f3:56:56:
1e:ee:b6:2d:6a:af:61:4e:b9:5d:ff:bc:7e:65:b9:
c3:ed:cb:a4:e2:75:b9:1d:88:a3:ec:32:d1:0a:b6:
e4:d6:f5:64:12:6e:fc:15:fc:12:31:4e:d3:f8:be:
95:e8:bf:ff:1f:e0:e0:3e:50:1d:76:6e:6e:b6:9d:
2f:45:49:c7:16:ba:69:11:40:35:d7:b0:99:11:de:
e9:88:55:2e:a4:3a:56:b0:5b:69:11:2f:e9:da:42:
34:a6:ff:3d:79:22:21:43:1e:3f:63:74:da:d5:71:
cf:6c:ce:b0:11:ba:9e:43:08:31:b7:30:cc:0d:97:
22:f0:00:54:2e:51:4d:ae:e6:1b:9f:71:ea:1b:67:
f0:ad:05:d4:7f:18:fa:98:51:83:7f:4c:44:c9:d5:
41:8e:18:03:ca:f0:1e:0a:37:6e:f0:03:e0:c9:31:
4e:2d:79:78:f7:d6:a2:fa:9b:9f:74:84:80:25:35:
e5:8a:6f:25:42:7c:d3:34:61:d8:ce:c3:13:63:1e:
e7:11:5a:e2:a3:92:cc:69:5a:39:f7:70:75:cc:cc:
e5:2b:9f:19:96:3b:5c:54:b7:50:4c:47:b1:bd:4d:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:B2:EF:E0:56:05:47:43:C7:CB:0E:32:D0:44:54:5E:92:2B:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/962y7-BWBUdDx8sOMtBEVF6SK9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:ca:4c:fc:fb:87:e7:1f:be:f6:fe:a8:48:3b:7d:dd:55:b8:
31:be:90:83:de:ba:28:d5:be:26:50:21:e9:09:78:92:48:31:
5b:4f:bd:7c:fb:1e:c7:e7:c6:0e:ea:3e:79:db:a0:47:eb:53:
1d:f9:a2:0a:18:9d:1b:e7:b7:44:6c:0c:d7:7b:f9:dc:6d:52:
66:af:c5:41:a9:f8:1c:13:f7:14:df:7d:51:9a:16:32:90:87:
5e:21:9d:46:37:d3:84:b7:84:82:c9:b0:d2:fe:6c:0a:94:47:
00:20:03:86:b3:ac:fb:39:64:b3:60:96:3f:2f:16:ed:31:17:
60:dd:43:62:67:9b:e5:6e:78:6e:2e:a8:af:49:7e:69:39:84:
4e:af:51:e8:35:10:7f:5e:12:69:3a:cc:9c:9b:21:8a:f9:72:
3e:c3:74:db:65:8e:bc:02:91:10:fd:17:cd:cd:45:22:89:22:
df:8a:96:3b:ae:ad:74:fb:97:81:aa:62:01:62:0c:55:1f:ef:
0f:8f:7b:24:78:58:a4:c7:e9:6e:dc:5a:fe:6e:af:cb:f1:bc:
a3:b0:f3:1a:f6:9e:d4:9d:a9:24:a1:41:7a:30:87:f3:1f:62:
b4:2f:02:7c:0f:10:9e:9f:45:5d:25:39:e8:17:0b:0f:65:03:
0f:13:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-ams.rpki-client.org