Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9vouO90olhhnSvjTYJS770XI1kw.roa
File: 9vouO90olhhnSvjTYJS770XI1kw.roa (raw, json)
Hash identifier: NBSye9ORd7qkCHh3yxTvKMbKPBY7CCt5DIwm08EGC10=
Subject key identifier: F6:FA:2E:3B:DD:28:96:18:67:4A:F8:D3:60:94:BB:EF:45:C8:D6:4C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FF1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9vouO90olhhnSvjTYJS770XI1kw.roa
Signing time: Sat 13 Apr 2024 20:23:22 +0000
ROA not before: Sat 13 Apr 2024 20:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16369 (0x3ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 20:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F6FA2E3BDD289618674AF8D36094BBEF45C8D64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:60:c8:94:04:35:07:2e:8b:71:6e:d8:f6:
bb:b3:a6:4a:1e:06:6d:7f:f3:11:07:b3:1c:b8:9a:
98:5c:83:8b:5a:d5:20:80:38:cf:0f:8e:6d:4f:b9:
3b:79:09:d3:c1:36:70:9f:e8:42:13:e5:1a:8e:8b:
5e:86:07:c8:e6:72:ec:d8:fe:7e:bd:86:e1:90:08:
fb:89:f9:e7:1a:c6:24:f1:d4:aa:21:da:5b:37:04:
aa:f3:93:3f:cb:91:78:4a:55:4d:ec:b8:e5:51:72:
d1:59:8b:0f:9c:56:b7:99:fa:be:a0:a7:bd:de:31:
27:4c:0b:69:f6:86:18:79:90:dd:70:de:b8:1e:ea:
27:86:24:30:35:ac:ce:65:b4:6a:45:78:70:99:be:
a4:d6:21:f5:31:db:4a:11:c0:81:c1:ca:e6:2f:ef:
56:f3:1c:58:33:3b:96:6e:8d:c8:c3:0f:3c:d2:bc:
91:39:04:8c:e4:ac:fa:ca:fc:f6:b9:3f:ab:0d:a7:
bb:5a:e4:65:e1:0c:03:4d:9a:ac:ff:f4:88:59:d5:
85:ff:df:1a:f8:ba:0b:cd:75:39:57:72:2b:1e:13:
76:d0:ad:03:6e:cf:1c:e6:65:a7:04:9f:68:6d:78:
09:90:69:0c:9c:11:bc:a0:ff:c5:e0:d4:66:27:0a:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:2E:3B:DD:28:96:18:67:4A:F8:D3:60:94:BB:EF:45:C8:D6:4C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9vouO90olhhnSvjTYJS770XI1kw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:76:57:a1:a9:c6:3c:7f:cb:e7:88:b3:62:4e:39:a9:98:81:
62:72:75:f7:fa:de:8d:bf:a0:25:ad:40:c6:bf:9d:ab:ad:b9:
9d:c6:39:ad:d4:b3:d0:2d:be:fe:22:a3:c5:9f:cb:c5:79:3e:
44:ad:f2:d5:8a:1d:87:76:02:e1:34:44:5d:a0:00:dd:99:4d:
a8:42:8b:6c:dc:d1:40:a9:a6:1d:c5:15:ca:1c:36:78:04:31:
0b:7d:0f:69:79:11:c3:cd:05:c4:83:ea:e9:8d:39:df:0e:b8:
c9:3f:88:d2:d9:ab:6a:3f:e6:66:c8:de:75:cd:a3:cf:64:ae:
67:f4:ed:5f:be:a9:aa:00:dc:0b:e1:e1:0a:fe:8c:57:04:4e:
ab:18:ab:98:30:6b:aa:b5:33:8a:e3:1b:6a:0e:cf:9d:78:7f:
55:15:43:53:27:c0:90:c0:61:19:00:54:7d:ef:56:a0:ff:31:
82:3e:fe:17:1b:87:41:5c:6b:e9:dd:97:d2:01:d8:76:a9:dd:
77:8d:bb:4e:63:ed:da:a4:47:15:1c:d2:34:73:21:73:e8:99:
b7:cb:93:b6:5d:27:dd:57:ed:4f:74:e5:a4:3d:5f:69:71:e8:
36:ee:9e:de:a5:2e:84:ec:b6:3e:48:a0:b7:17:55:8f:b6:2f:
26:c2:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org