Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Bso5Lldpz96HxAzen25RaJinIB8.roa
File: Bso5Lldpz96HxAzen25RaJinIB8.roa (raw, json)
Hash identifier: 4yuXr5z4H7ayae7zLDtJVSpc9f+oZO3b69znujR6ij0=
Subject key identifier: 06:CA:39:2E:57:69:CF:DE:87:C4:0C:DE:9F:6E:51:68:98:A7:20:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4081
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bso5Lldpz96HxAzen25RaJinIB8.roa
Signing time: Sun 14 Apr 2024 14:22:53 +0000
ROA not before: Sun 14 Apr 2024 14:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16513 (0x4081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 14:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=06CA392E5769CFDE87C40CDE9F6E516898A7201F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:bb:af:fc:cc:81:ff:9f:0d:e5:ff:99:cc:
aa:be:d2:60:37:5e:a6:1f:a6:7c:17:b8:1b:ff:ec:
e1:d8:97:97:dc:d1:34:2d:34:1d:a1:b8:51:b1:59:
87:82:06:28:dd:7f:96:62:e1:82:10:e6:87:71:75:
cc:e2:0a:58:f5:fe:76:76:e0:22:fa:b5:78:79:8f:
15:91:61:99:49:a2:22:36:ad:e5:31:df:05:d5:38:
29:3a:81:a7:00:c1:b6:5c:bc:92:57:f7:a4:f4:19:
35:5f:e1:c6:9d:60:2e:f6:c6:b7:ca:ba:44:54:12:
15:ec:dd:32:99:c4:91:07:c8:a1:3f:40:0f:81:63:
28:0c:d5:a9:15:06:86:1a:98:d6:72:6a:a7:e0:4d:
e7:2c:94:e4:d1:2e:21:b4:4c:ce:ee:99:64:72:b4:
e5:91:f8:41:e6:33:d7:48:07:16:32:d6:3d:a6:c4:
ef:e0:4a:38:98:58:d5:4f:73:5b:a0:a1:dd:72:e5:
fa:4d:2c:d4:c3:31:19:7a:20:c7:8b:2f:9e:56:fa:
db:09:83:2c:3c:b4:bd:a4:70:77:c6:30:46:15:5a:
b8:fc:57:32:61:4a:c8:65:4c:aa:1e:01:d0:a5:71:
00:7b:f3:69:87:23:16:cd:e7:5b:36:6d:61:64:85:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:39:2E:57:69:CF:DE:87:C4:0C:DE:9F:6E:51:68:98:A7:20:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Bso5Lldpz96HxAzen25RaJinIB8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:59:81:d7:80:14:3f:4d:d6:8f:48:4f:51:8d:aa:df:e8:5e:
9c:f7:3c:89:fe:75:1f:76:34:6f:87:27:95:3d:fb:54:16:9f:
19:48:4c:66:78:45:48:59:b9:64:78:9a:68:72:68:e4:8e:67:
59:36:f2:40:d3:de:d9:08:a5:dc:78:cd:03:e2:81:65:bb:4c:
78:ee:04:02:28:56:6d:04:81:7d:af:96:72:c1:f0:de:1a:5a:
6b:c0:ea:5b:9e:1c:26:f2:b1:c6:a7:52:59:b7:d5:62:3a:4f:
33:2a:5f:ca:89:f8:7f:35:67:5f:1b:62:bf:62:c2:90:51:19:
4b:bb:cc:b9:ec:03:38:cb:3d:d2:18:dd:b5:7f:6c:46:90:44:
dc:f0:4e:e4:db:11:f9:b1:70:ad:a2:41:18:8e:ea:a6:d3:6d:
59:22:50:3e:52:ac:d1:2d:89:f2:c5:1d:0c:4b:b9:6a:a4:22:
68:a1:2e:91:9c:f6:14:98:27:1a:68:96:ca:8c:52:38:d2:b3:
35:f6:e6:cb:20:e0:98:0e:0d:48:69:1c:5f:13:9d:8e:c1:49:
13:02:54:4f:1f:41:28:ac:e6:a5:2d:13:f6:3f:7e:b0:1f:9c:
86:50:26:c6:35:d7:5f:fe:c2:9a:31:07:12:ed:e2:ab:96:89:
6d:e9:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org