Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AR8HKk9uG1UWBhUF19rNj4YC8LU.roa
File: AR8HKk9uG1UWBhUF19rNj4YC8LU.roa (raw, json)
Hash identifier: 50OuTY1KrhpL+ycVqgwl5binwT/cnAuE3pf4dc7uxcE=
Subject key identifier: 01:1F:07:2A:4F:6E:1B:55:16:06:15:05:D7:DA:CD:8F:86:02:F0:B5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D95
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AR8HKk9uG1UWBhUF19rNj4YC8LU.roa
Signing time: Wed 10 Apr 2024 16:52:42 +0000
ROA not before: Wed 10 Apr 2024 16:52:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15765 (0x3d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 16:52:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=011F072A4F6E1B5516061505D7DACD8F8602F0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:5f:46:29:d9:bb:93:cd:b4:45:36:d4:02:
c5:35:dd:ca:cb:6a:57:c0:91:2a:dc:d1:63:2f:b9:
e0:e9:2b:00:9b:75:74:01:e8:74:0b:e0:24:0d:b1:
b1:30:e4:c7:16:49:c6:5b:61:22:5d:0e:0c:0e:83:
45:cc:3d:10:88:51:63:e8:a9:f5:14:c8:8f:0a:c0:
fb:f6:ee:64:25:15:fa:6c:e4:b1:1f:ff:ef:96:36:
e2:b5:73:af:ec:da:29:d0:cd:99:c8:63:e5:14:a6:
ea:60:13:9b:34:c4:2b:5b:e9:90:65:19:8c:ec:1a:
6d:5a:96:6f:55:3e:50:6c:07:23:61:76:54:c1:e1:
87:3c:1d:a9:d8:9d:0a:1b:b3:a4:32:68:4a:18:08:
66:cd:de:fc:5e:4a:85:e9:16:6d:a1:0f:7f:43:1a:
6a:16:09:2e:5b:b6:74:a1:67:6b:b1:e5:34:1e:56:
44:6b:c4:a6:b7:2d:8f:3b:f8:49:61:17:84:6e:56:
f8:8d:35:bf:58:9d:52:ff:64:60:d0:70:c8:1c:c9:
73:6c:9e:51:91:1e:d9:1a:60:66:56:54:90:16:f7:
1d:24:fd:86:70:bf:ae:6d:45:7a:f3:35:89:9c:a2:
57:d6:2a:3c:2f:fb:a0:fc:6d:e7:b0:56:5e:a9:dd:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:07:2A:4F:6E:1B:55:16:06:15:05:D7:DA:CD:8F:86:02:F0:B5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AR8HKk9uG1UWBhUF19rNj4YC8LU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:fd:21:d5:5f:2d:0e:fa:34:13:46:ac:3c:ed:b8:9a:ae:35:
4c:53:bc:28:ae:6d:eb:6a:05:9f:a3:cd:ab:c1:90:f5:fa:60:
71:b3:0b:be:e2:67:c8:28:00:fe:34:ce:c5:dc:83:f4:f8:c6:
8b:69:47:f3:e4:39:1a:96:f3:cf:03:59:a4:a8:48:49:78:aa:
22:c8:07:1b:8c:19:1c:26:60:9c:2b:4b:7e:24:78:ba:25:fe:
75:82:1d:ba:07:89:6f:f1:8e:e4:78:ac:f1:ec:fc:f2:52:68:
e1:63:92:2b:5e:5e:1b:73:63:33:30:ec:18:b7:53:65:d9:62:
73:d0:90:6a:3a:75:69:18:f7:b5:18:c0:23:30:c5:5c:f3:12:
ea:8e:76:e1:ba:2c:5b:20:9a:9d:c1:95:c9:fd:e8:7d:15:e9:
38:68:ac:c5:cb:df:3a:37:0e:0d:4a:59:5c:9f:27:a3:6c:76:
e9:2d:01:57:97:f2:82:76:f1:da:45:94:fe:9b:55:3d:11:10:
0e:31:54:6d:d0:47:ee:09:cb:c3:9f:e3:18:e8:9d:b0:fb:2a:
77:f5:d0:89:9e:65:c3:d7:5f:ad:93:eb:f5:cb:59:92:0f:33:
94:f1:43:a1:78:69:90:6f:09:5d:b1:30:f1:29:57:72:c3:b7:
e9:e1:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org