Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A6_ThOxS_y-nUpbUmgYaNURrSOs.roa
File: A6_ThOxS_y-nUpbUmgYaNURrSOs.roa (raw, json)
Hash identifier: 5o/ina5DfAU25M9bE7O/SJ3DlqZDfN5zkmjf4OxGh8Y=
Subject key identifier: 03:AF:D3:84:EC:52:FF:2F:A7:52:96:D4:9A:06:1A:35:44:6B:48:EB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50A9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A6_ThOxS_y-nUpbUmgYaNURrSOs.roa
Signing time: Mon 06 May 2024 03:23:54 +0000
ROA not before: Mon 06 May 2024 03:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20649 (0x50a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 03:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03AFD384EC52FF2FA75296D49A061A35446B48EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:96:99:e2:e2:63:99:60:6f:e5:78:c4:51:
0e:30:3d:7d:36:df:f8:ea:a3:92:e6:e2:98:f5:ce:
ec:ae:f7:1f:ef:4e:a9:21:3a:d4:cf:a3:0a:4c:13:
b5:04:20:89:81:49:4d:ce:92:30:a0:1f:71:bd:86:
41:49:3c:d8:b9:42:68:03:b6:1e:60:fc:96:50:fd:
31:fd:1e:f3:b1:1d:a9:39:b0:56:26:55:66:cb:49:
45:45:90:82:0d:29:49:67:4b:40:dc:4d:85:3c:5a:
40:b6:1c:da:fb:63:a3:50:96:43:05:19:d7:39:31:
0c:92:2c:d9:28:9f:29:54:72:71:22:f2:e2:05:38:
15:18:af:73:5b:28:6f:9a:44:37:a4:f8:e4:8c:b8:
a2:1e:30:f0:15:f1:2c:d1:6f:35:b4:86:43:91:d3:
72:f4:ea:8c:43:a0:02:2d:36:79:73:59:e5:63:a8:
fb:f4:ab:a6:9e:80:40:a2:39:22:d3:97:d5:0e:45:
c4:83:ec:d5:c0:10:16:0d:63:1d:56:9e:f3:f0:e5:
62:a0:6d:3b:36:75:13:09:ff:92:d7:54:e8:13:cf:
0d:35:2f:f0:57:7d:07:35:77:72:66:86:91:b5:5e:
f1:c5:ce:d4:47:2b:ab:7d:9d:2a:7d:84:e7:cd:58:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:D3:84:EC:52:FF:2F:A7:52:96:D4:9A:06:1A:35:44:6B:48:EB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A6_ThOxS_y-nUpbUmgYaNURrSOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:2f:80:fa:af:bf:14:a8:99:0c:f9:e4:6a:32:c1:b4:50:8c:
b2:d3:5a:55:96:18:8d:4d:1c:81:00:e5:f7:18:cb:4f:77:66:
ea:4c:b3:7d:95:77:7a:20:6e:09:3f:ea:79:d5:b1:55:fe:40:
e1:d5:c5:0e:f6:78:d3:54:3d:d4:62:55:55:6f:ef:cc:3b:50:
0e:38:14:83:23:d9:fd:9c:54:9f:61:9b:71:28:b7:9d:3a:d5:
5b:cb:e9:c0:30:c0:8f:36:b7:64:67:1b:6c:80:55:eb:3d:6a:
01:dd:78:8f:01:87:79:79:d6:dd:07:64:aa:cc:e3:b5:dc:fa:
5f:d9:66:fd:ca:75:f2:06:4e:e6:ab:c4:b6:1f:4d:b0:bc:16:
48:9b:9e:c7:35:ea:72:a1:71:a8:58:db:21:87:39:e1:54:76:
fb:ca:6c:ef:30:5c:3c:18:00:3c:72:a5:3b:0e:d7:c6:66:15:
f6:9a:e7:08:f1:4c:2e:51:8c:a7:5f:bd:1e:65:47:ae:50:22:
22:81:35:6d:d8:3a:1b:08:76:b1:34:ad:07:0c:08:c7:ea:32:
84:4f:7f:0a:f7:b0:6a:08:03:01:b9:70:6f:23:cb:32:f6:45:
31:b4:87:de:7e:f3:56:ea:5a:41:6b:2e:c5:12:6b:7f:fa:8e:
b1:ab:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org