Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BNAdUkEVQ0miqJhTZQb3ZFt25vo.roa
File: BNAdUkEVQ0miqJhTZQb3ZFt25vo.roa (raw, json)
Hash identifier: wTm0JQeg6JX5eEDHs0QmvaLzv65CYoap704lY9XDNGM=
Subject key identifier: 04:D0:1D:52:41:15:43:49:A2:A8:98:53:65:06:F7:64:5B:76:E6:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D19
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BNAdUkEVQ0miqJhTZQb3ZFt25vo.roa
Signing time: Wed 01 May 2024 09:23:36 +0000
ROA not before: Wed 01 May 2024 09:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19737 (0x4d19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 09:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=04D01D5241154349A2A898536506F7645B76E6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:d6:40:77:5c:4e:ea:3a:e9:cd:01:95:8b:
ce:4f:00:fd:ec:94:8c:d1:e6:10:19:f3:47:3d:d8:
67:c0:e9:d8:96:a8:5b:ac:12:17:c8:a7:47:4c:d4:
14:ee:65:5a:d1:b3:99:84:0b:8c:0c:d5:bc:2f:8d:
cc:23:98:11:68:af:e1:f0:96:3e:7d:9a:62:9d:21:
f3:16:c4:a4:24:e6:bf:b8:19:a2:06:fa:81:3c:d3:
96:b9:ca:5d:7d:51:6c:00:7a:72:fb:82:d3:36:f3:
f2:99:df:14:b4:d0:36:fe:c1:b7:80:9b:bd:3e:f6:
cf:8c:bc:e7:3d:41:ac:e4:4a:61:42:1b:09:17:1f:
a0:a9:35:67:73:43:4f:c5:7d:4d:80:37:d4:d1:c9:
cb:63:b3:2c:e4:ae:90:cc:61:01:d9:d9:f9:75:19:
43:b2:d1:6c:d7:d0:00:f6:30:d6:c1:77:ac:59:b4:
3c:be:cb:76:68:f0:73:bc:79:e3:d5:d6:c5:2d:e4:
e2:d1:55:0f:4a:03:e2:6b:82:43:d8:98:08:9e:b1:
56:15:b3:17:11:b8:a1:31:35:02:50:7c:9a:81:18:
f4:d0:c0:3e:df:4e:aa:db:10:8f:48:6d:1c:a2:ad:
37:80:fe:7c:7a:4f:fe:39:99:81:e9:28:4b:e6:25:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:1D:52:41:15:43:49:A2:A8:98:53:65:06:F7:64:5B:76:E6:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BNAdUkEVQ0miqJhTZQb3ZFt25vo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:a9:db:80:1e:24:37:49:b6:1f:95:dd:f7:e7:91:9c:4d:e3:
67:09:72:62:2e:92:b9:d4:14:e2:2d:8f:eb:c9:41:a2:78:bd:
92:aa:c6:dd:2d:1a:bb:8a:c4:d9:7b:4f:76:a5:62:c4:35:0a:
ad:54:f1:9e:da:10:2b:59:ed:18:d5:a2:b3:c5:4f:8c:4a:60:
cd:ab:97:ef:b2:18:61:ec:b0:b3:d2:1b:3a:a3:34:40:0f:3a:
3d:e1:16:2f:d2:d4:8b:b4:7f:f8:73:28:fc:bf:9b:71:f8:74:
a8:2c:5c:dc:a3:fb:dd:d8:1a:bf:01:5b:5e:f5:9c:0f:59:b8:
69:8f:c5:29:a7:97:96:0b:13:a9:3b:09:c8:52:06:f0:e0:9a:
51:7e:28:df:47:99:95:5c:80:9b:dc:ba:25:ac:cc:00:34:8e:
06:4f:c7:1e:83:21:8e:08:da:43:5f:23:37:cb:61:a4:18:45:
41:cb:70:54:0f:8b:ac:32:20:27:e3:64:e0:be:ec:14:35:85:
ca:f0:61:49:e8:87:6b:04:6f:82:13:a5:0e:c6:c8:01:f3:22:
26:40:ce:5a:5d:1b:ed:d3:93:a0:9f:c0:eb:5d:ac:10:42:df:
a1:e6:91:9c:e5:fd:86:37:09:78:28:08:61:0c:c1:44:3b:41:
db:03:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:42 2025 by rpki-client