Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9M9WI3_KRWCPuZDaAp8jap-UCOw.roa
File: 9M9WI3_KRWCPuZDaAp8jap-UCOw.roa (raw, json)
Hash identifier: jQr77GKfIgbktcP5HSeTrMtC8afrIf35t3TPAmjiAFg=
Subject key identifier: F4:CF:56:23:7F:CA:45:60:8F:B9:90:DA:02:9F:23:6A:9F:94:08:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4781
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9M9WI3_KRWCPuZDaAp8jap-UCOw.roa
Signing time: Tue 23 Apr 2024 22:23:18 +0000
ROA not before: Tue 23 Apr 2024 22:23:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18305 (0x4781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 22:23:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4CF56237FCA45608FB990DA029F236A9F9408EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:0e:32:12:42:0d:7c:85:76:ef:f4:19:bb:
2a:9b:92:be:84:a6:af:16:1e:80:6f:ec:40:70:a1:
68:a5:b1:c3:b5:42:a5:fe:55:98:a4:59:e1:66:5d:
97:01:42:98:cb:71:d2:cc:39:f1:b6:bf:8c:1a:f4:
fa:c8:51:44:f8:f3:6f:33:5e:ca:bd:96:8f:35:15:
2e:cf:28:93:9d:ee:e0:65:80:2d:1f:bb:65:12:4c:
c0:7b:d7:c8:57:3a:91:cd:e3:29:67:49:aa:08:15:
99:91:dc:55:66:0b:bd:eb:67:91:fe:ed:7b:75:07:
21:40:64:e9:7b:33:65:06:96:9d:15:21:f4:d3:45:
d1:fa:20:8c:ac:e8:10:d7:e1:6a:b6:42:0a:9e:1d:
bd:30:c6:56:85:6c:f2:29:b7:4c:01:d1:bf:f3:ba:
26:1b:03:02:85:0f:8c:c0:57:a3:c5:93:6e:95:49:
bf:d8:14:a8:8e:bc:a1:d0:df:28:d8:55:33:8b:66:
59:4e:ef:b9:92:6d:3b:6f:22:84:66:c1:a0:e6:3b:
82:e2:3b:88:2c:e5:d2:2c:18:d8:a8:90:dc:62:6d:
6c:4e:70:a3:27:d7:53:04:2b:f7:df:86:00:17:03:
fe:62:f5:52:1b:cb:1c:6e:55:42:2b:e6:c4:5a:64:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:56:23:7F:CA:45:60:8F:B9:90:DA:02:9F:23:6A:9F:94:08:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9M9WI3_KRWCPuZDaAp8jap-UCOw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:08:9c:ac:95:fc:42:1e:13:1e:ca:e0:6b:74:4f:35:fe:1d:
de:e4:4e:b1:fa:18:d4:2e:63:16:a0:ac:de:80:95:aa:af:e5:
91:e1:39:26:3f:d7:9d:9e:ab:73:24:85:55:bc:ce:1e:f0:84:
8d:6f:21:88:22:f2:b5:b9:ee:1a:8d:af:c0:50:29:fa:76:33:
5b:4f:5b:eb:73:77:96:45:d0:f7:26:d7:cf:7b:61:1b:ee:20:
ac:2e:56:bc:0f:27:1e:84:dd:1a:18:36:e7:7f:a0:77:f2:0b:
56:bc:5d:5f:2e:28:37:a9:c9:39:9a:d1:b9:f7:0a:b3:02:71:
b0:67:ac:6a:2a:6e:e1:ae:d6:a4:26:02:0c:1e:7e:10:de:24:
9e:76:f1:d8:1d:a0:93:41:f6:5f:96:c1:24:cf:7f:9c:bd:2a:
ba:e1:8f:0c:a0:c1:27:a5:4d:d9:c1:b9:9f:71:6b:c3:f8:61:
be:dc:8d:a9:bb:dc:db:f4:84:98:64:06:3b:47:11:9b:2e:fd:
f4:f5:a2:18:97:89:e4:d4:86:ce:d2:7f:6e:d2:61:da:4a:0d:
f7:d9:db:f6:72:eb:78:11:c7:17:e5:3a:e1:c3:0b:da:db:a2:
28:6b:ee:27:a6:ca:3a:98:07:dd:b8:59:e6:50:56:56:92:9b:
c7:e0:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-ams.rpki-client.org