Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C12c2Is8TeVF1ogra7JVcb8J8IM.roa
File: C12c2Is8TeVF1ogra7JVcb8J8IM.roa (raw, json)
Hash identifier: oq/DOpca2SUX98jo/8JKz7n9xAkBSTiE8L1RDfoeBms=
Subject key identifier: 0B:5D:9C:D8:8B:3C:4D:E5:45:D6:88:2B:6B:B2:55:71:BF:09:F0:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 517D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C12c2Is8TeVF1ogra7JVcb8J8IM.roa
Signing time: Tue 07 May 2024 05:53:53 +0000
ROA not before: Tue 07 May 2024 05:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20861 (0x517d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 05:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B5D9CD88B3C4DE545D6882B6BB25571BF09F083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:21:c2:69:62:2d:6d:c7:b8:33:e7:2a:08:
b1:2e:7f:ba:d4:4e:06:71:7c:4b:d8:c3:9e:68:43:
9d:00:c1:87:9b:b5:06:4d:0e:ae:90:3e:dc:2b:b1:
b5:22:86:0a:fe:b8:e7:58:f6:7c:58:b9:e5:8d:cb:
e0:b4:8b:bf:b3:80:23:79:b1:16:35:7c:a0:71:54:
85:38:64:33:4c:45:a4:d7:d0:e7:03:3d:11:ce:3e:
63:bd:f4:a1:f8:03:20:5e:9b:67:19:98:2b:66:e5:
7e:87:58:e8:6d:43:d6:d3:a9:14:f4:69:72:3e:80:
f7:e5:c9:87:18:8d:3f:c1:cb:63:a8:a5:e9:72:37:
28:06:c8:7c:09:2c:d1:df:bb:e8:6b:56:ff:34:43:
b2:be:32:6b:0d:cb:f5:7b:5f:7c:45:a3:f0:5e:f1:
d6:4b:ce:90:a8:16:7d:ce:dc:40:53:84:12:15:c3:
a5:93:5b:8f:2e:ed:56:10:7b:06:dd:30:a4:52:85:
9b:3a:08:e6:54:64:7e:92:86:39:e6:1a:f8:c9:86:
54:a1:b6:cc:0c:9c:26:8a:11:e1:a5:88:42:5f:f4:
d7:ad:c0:57:52:d5:80:53:df:86:a2:b7:6e:63:58:
cb:c2:95:b7:31:37:3b:48:b6:4c:d0:c8:d7:2f:08:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5D:9C:D8:8B:3C:4D:E5:45:D6:88:2B:6B:B2:55:71:BF:09:F0:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C12c2Is8TeVF1ogra7JVcb8J8IM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:d2:25:ea:e3:ac:54:57:29:6b:9e:9d:af:3d:89:6c:f4:61:
44:83:ef:7d:cd:2f:56:af:d4:a0:36:c5:0a:af:46:54:ad:db:
0f:c3:e5:fa:ce:2a:bf:97:a7:8b:81:75:3f:4c:f7:74:05:6f:
8c:e5:8f:43:4f:b6:92:73:95:d7:68:b9:2d:b9:84:3c:e4:ea:
23:e7:54:79:53:8c:bb:5d:1d:f6:00:db:2d:e4:3e:e8:22:9e:
c0:51:ed:f8:21:2d:c8:42:1a:0b:be:15:10:f5:39:01:2d:c6:
53:66:d2:9e:97:ed:e2:c7:7b:26:4a:75:b7:0c:83:b2:b4:29:
d4:1e:47:b9:12:5d:df:31:d6:09:50:fe:47:25:da:3e:82:5f:
3f:d4:78:4c:94:b4:88:d1:18:3d:77:1e:51:0b:7a:07:a3:9d:
0d:65:e9:e8:0e:57:62:37:db:90:3a:d7:cc:40:f6:3f:99:df:
b1:9b:ed:17:c9:3b:8c:c1:70:a4:10:a7:14:6a:6a:81:ff:df:
b4:38:98:1b:36:f0:ba:ea:8c:f6:ff:6c:ee:2c:b4:ed:11:77:
e8:22:b3:b6:f7:0a:0b:c3:aa:85:d5:a0:91:2d:2a:05:d0:c4:
e6:e9:93:3a:6c:bc:f8:3d:0f:d4:94:3b:63:33:3f:f1:b0:a6:
c4:5f:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:23 2024 by rpki-client on console-ams.rpki-client.org