Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CKmjK_cg4KPJxigL77nATDsmlf0.roa
File: CKmjK_cg4KPJxigL77nATDsmlf0.roa (raw, json)
Hash identifier: G+Stguuptt9wxR5soR/4ur0ioiFXNhGEvxforWCNVUs=
Subject key identifier: 08:A9:A3:2B:F7:20:E0:A3:C9:C6:28:0B:EF:B9:C0:4C:3B:26:95:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42F9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CKmjK_cg4KPJxigL77nATDsmlf0.roa
Signing time: Wed 17 Apr 2024 21:22:57 +0000
ROA not before: Wed 17 Apr 2024 21:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17145 (0x42f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 21:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08A9A32BF720E0A3C9C6280BEFB9C04C3B2695FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:76:2c:bc:db:bb:16:d0:e7:81:d3:01:e9:
26:ac:46:9a:42:02:4e:75:dc:45:83:79:6c:10:d8:
33:d2:30:1d:c3:71:53:04:0b:92:cb:15:e0:b2:c6:
05:d4:8d:af:41:a9:4e:8d:7d:0c:9a:c5:3e:e8:26:
a1:cd:ef:de:0d:58:71:2e:e4:eb:13:0f:75:78:05:
2e:31:48:2b:34:da:23:80:7d:99:d7:73:2d:e6:e1:
1d:bf:a1:7a:50:91:79:e6:1c:1e:cb:64:28:73:48:
82:ee:4d:15:47:db:6e:6f:b3:1b:20:15:7a:f2:5d:
7a:27:6e:5c:8e:42:18:5c:5e:66:6d:a4:9f:f9:41:
1a:88:06:5b:d6:ed:52:6a:09:d0:80:dc:14:5d:d2:
f1:52:bf:1a:a0:0b:8f:14:7f:15:2c:5a:d6:de:ed:
0d:e3:72:32:8e:3b:5b:69:7a:58:4a:44:4c:22:62:
01:dc:9e:61:81:7e:d8:ba:5e:87:8e:6d:6f:e8:f7:
d3:50:1e:08:95:07:37:33:37:98:98:f6:69:1c:36:
a2:88:cc:40:0f:8e:79:60:26:25:de:91:94:dc:2a:
4f:16:c4:24:80:5c:a1:ce:38:e8:bd:99:43:84:5f:
89:b1:9d:10:ca:b2:b3:9d:e0:89:9e:15:a1:9b:b0:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:A3:2B:F7:20:E0:A3:C9:C6:28:0B:EF:B9:C0:4C:3B:26:95:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CKmjK_cg4KPJxigL77nATDsmlf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:60:46:91:64:2d:5b:1a:91:4b:77:c4:3a:5e:46:ae:b9:d4:
4f:42:aa:03:53:95:84:c7:01:30:62:00:e0:5d:3f:7f:85:85:
82:f5:7b:71:28:4d:a1:a2:c0:41:6f:eb:dc:47:c4:bd:51:79:
b0:e3:5d:6e:53:db:74:53:f5:be:b0:48:62:76:b8:84:0e:06:
7f:66:3e:5b:f3:75:6f:91:e3:b9:1b:b8:e9:c9:65:48:6d:61:
f0:b4:8a:e9:e2:87:1f:72:ff:f3:32:08:67:83:87:6e:7b:e5:
36:f1:7f:0c:98:d5:bd:b8:4a:c7:81:20:d1:c8:ce:9b:f8:b5:
b4:4f:16:cb:78:bc:e1:39:17:31:f9:7f:f7:48:1e:99:65:1a:
e8:88:48:55:00:9a:e8:21:cc:73:50:0e:53:4c:dd:5e:32:93:
71:02:02:9c:a0:5d:6e:81:2b:9d:e9:b7:b0:30:d8:76:23:1a:
3a:65:fa:a3:ae:69:01:16:c2:b1:26:74:38:98:66:ec:1d:0c:
bf:99:b7:02:65:38:d2:1c:f2:ba:be:e5:54:61:68:a6:c8:6d:
c8:2f:86:8d:43:ac:c4:90:60:12:83:1a:fa:7e:8e:1b:b5:bb:
02:05:b8:94:29:a2:52:7e:23:f7:6b:d0:84:8c:78:b0:56:0c:
02:59:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:23 2024 by rpki-client on console-ams.rpki-client.org