Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ao_0DDGAB263-YL9jd3qmAreeHo.roa
File: Ao_0DDGAB263-YL9jd3qmAreeHo.roa (raw, json)
Hash identifier: i0nP0QGyuU1sL7w5vHhUQuzBmsJmmi3WMLFqP0He4wE=
Subject key identifier: 02:8F:F4:0C:31:80:07:6E:B7:F9:82:FD:8D:DD:EA:98:0A:DE:78:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B1D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ao_0DDGAB263-YL9jd3qmAreeHo.roa
Signing time: Sun 07 Apr 2024 09:52:32 +0000
ROA not before: Sun 07 Apr 2024 09:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15133 (0x3b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 09:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=028FF40C3180076EB7F982FD8DDDEA980ADE787A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:56:78:8a:e4:e6:ff:44:b2:a5:a8:ce:0a:
af:dc:ff:1b:aa:05:6d:8c:f3:cd:79:70:cc:b8:99:
b2:f8:08:e4:b4:2b:5a:a8:7e:71:0e:e8:20:2a:d6:
d7:d7:cc:08:a8:12:30:01:bb:6a:7d:04:ff:7e:b9:
f5:db:bf:eb:aa:2e:44:0c:77:83:8b:e0:74:a2:6e:
33:f3:2f:62:ae:5a:78:77:bf:0f:7c:70:54:62:cd:
2a:a8:bd:1e:51:9f:fb:56:c2:1a:68:48:0f:d0:89:
a4:cc:2c:e5:eb:0e:57:7a:e4:1b:36:64:c9:03:b8:
36:1a:8a:50:91:61:8a:cc:cc:f6:20:6a:e5:92:0a:
6d:7d:d9:e0:00:6b:89:7b:6f:33:23:6d:f2:a8:ab:
6a:b7:96:22:9b:ff:3e:9c:d2:ea:a8:ba:bf:6b:03:
a4:4b:8f:f4:06:8a:d3:1a:f8:87:2b:50:16:96:e1:
c6:10:fd:af:ad:06:35:54:fc:6b:70:ee:00:e9:8b:
84:94:f2:0e:37:bc:14:a2:14:f2:ac:77:93:62:35:
d0:4a:c1:1b:4a:b6:77:21:6d:66:8b:98:af:22:36:
4e:ff:c5:7d:7a:96:aa:3d:0e:01:16:f9:84:86:1f:
47:0f:11:43:13:8f:10:55:66:d5:61:05:33:e0:c8:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:F4:0C:31:80:07:6E:B7:F9:82:FD:8D:DD:EA:98:0A:DE:78:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ao_0DDGAB263-YL9jd3qmAreeHo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:3a:4d:4e:4d:b1:c2:50:59:eb:03:e5:39:08:58:96:9f:01:
b4:51:3a:d8:56:b4:31:00:6f:b5:0d:ce:71:93:a1:db:4c:d9:
67:d0:62:8a:6d:5b:4b:ad:33:e6:fa:c5:88:67:d0:56:df:3c:
56:27:d0:8b:39:30:3e:68:6d:ec:65:60:04:2e:32:b7:77:70:
b2:72:78:eb:c4:9e:d6:10:fd:1c:50:00:05:78:3d:f6:98:83:
b8:d7:bd:f9:8b:38:e3:c3:62:6d:32:e0:9c:a4:4d:67:1d:f2:
77:c7:0f:a1:d8:04:f7:f8:3f:64:ce:e3:e9:cc:7a:c0:d5:8e:
c0:bf:5f:3c:7b:58:33:9d:9d:0e:b8:a7:58:3e:53:7a:ed:7f:
d1:98:58:a7:e1:16:5c:34:f3:89:1f:ef:db:ad:29:85:41:bc:
61:03:08:a3:1d:c4:5b:51:31:07:8c:9e:35:78:51:5d:d9:e9:
e3:af:8a:4e:23:19:1c:4d:9d:97:96:f6:8d:9c:48:75:b8:a3:
45:3d:3c:61:a0:4b:d9:c2:cd:dd:33:f7:7a:4d:37:0e:4b:8d:
f4:d0:fe:09:3e:7e:32:ea:2f:75:45:de:1b:8a:73:01:64:bb:
13:2b:07:b8:e6:4c:00:53:8c:8b:d2:53:b7:c6:de:26:7e:54:
d9:67:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:22 2024 by rpki-client on console-ams.rpki-client.org