Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AcltYAxiWJ9NKoFeiadceu2DTC4.roa
File: AcltYAxiWJ9NKoFeiadceu2DTC4.roa (raw, json)
Hash identifier: mtb0PHLWU77IrB0i0qh0KM62HleD5x0HqxB0iw9OBlI=
Subject key identifier: 01:C9:6D:60:0C:62:58:9F:4D:2A:81:5E:89:A7:5C:7A:ED:83:4C:2E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 490D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AcltYAxiWJ9NKoFeiadceu2DTC4.roa
Signing time: Thu 25 Apr 2024 23:53:19 +0000
ROA not before: Thu 25 Apr 2024 23:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18701 (0x490d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 23:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=01C96D600C62589F4D2A815E89A75C7AED834C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:93:1e:2e:e9:16:d7:00:7a:ce:aa:b9:9c:
b0:d7:e3:63:6f:5b:b8:08:a1:d0:1f:15:dc:4c:1d:
12:50:16:e3:43:5f:5a:7f:24:a7:d7:f5:54:b3:e1:
0f:b2:a9:75:25:fc:d7:76:66:3b:82:7b:78:44:46:
18:a6:1b:7c:2c:d2:e4:bc:79:44:c5:7b:7d:d1:cf:
42:46:5e:54:8c:27:e1:7c:34:fa:a7:94:b7:7c:7f:
0a:47:06:2d:e2:2a:c1:64:e1:89:22:80:18:eb:e8:
7b:2f:2d:39:82:c5:d6:e9:cf:50:c6:b9:22:64:80:
85:a8:27:5b:97:ca:c4:92:4e:a0:6c:9d:2d:e7:28:
73:21:95:32:0d:dd:ab:fe:35:d6:99:66:d2:81:b5:
40:8b:95:22:a8:c0:d5:a9:81:4e:5c:66:e2:d8:79:
08:d4:f8:c6:c4:d4:e2:60:0a:2b:fc:4d:5d:77:2e:
29:e5:88:86:59:7d:3e:ae:21:38:b9:74:e8:bf:a8:
d2:41:d6:a6:b7:d2:bb:05:ae:03:fd:29:6f:01:82:
49:46:90:a5:86:4b:05:84:01:4b:de:28:f9:90:3f:
b8:e3:fb:ba:2b:03:63:95:58:5d:d3:a6:25:66:77:
9c:22:e7:ab:94:2b:49:5f:30:3e:8a:dd:f0:33:58:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:6D:60:0C:62:58:9F:4D:2A:81:5E:89:A7:5C:7A:ED:83:4C:2E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AcltYAxiWJ9NKoFeiadceu2DTC4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:9e:8d:11:f9:8d:0e:c3:50:8c:3a:8e:5f:bb:3c:a0:ab:ea:
8c:73:d2:27:e3:6f:de:59:3f:f3:d6:40:bf:9e:ed:5e:89:c2:
60:73:68:e9:4d:73:e2:0a:17:5f:1b:f1:aa:0a:72:cb:a4:33:
3d:1a:95:df:3a:21:b1:ec:ac:a8:a3:cb:da:de:6e:f1:45:6d:
98:d0:ab:2d:8d:70:48:45:20:13:f4:7d:d0:d0:79:65:02:37:
ef:84:09:0e:93:7e:35:68:4f:02:38:be:1f:7c:3e:f8:da:5a:
34:16:b5:aa:d5:96:cd:2b:22:82:d0:ab:33:33:88:f8:bf:a0:
39:23:64:09:59:51:fc:64:31:8a:67:51:38:23:2f:0b:a3:af:
ed:a4:8e:47:d1:fd:97:2c:01:db:74:c5:23:e2:7c:08:bf:a9:
b6:e5:0b:bd:28:dc:6a:81:23:a1:a7:6a:cc:be:7d:94:7f:40:
85:be:de:94:5a:26:ad:f8:49:47:c1:05:ac:24:26:29:7b:c8:
b2:aa:22:0b:d7:09:2d:a1:96:a1:8c:da:e3:85:0a:5f:1e:31:
f1:6e:ed:10:f5:d8:39:2a:05:e2:65:67:3f:16:83:f0:1a:34:
fd:1f:a8:74:39:07:27:04:f8:65:d8:18:5d:dd:fa:e3:eb:08:
1a:ab:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org