Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CLYIqOBdyUvofTWlsSpqu9-9Odw.roa
File: CLYIqOBdyUvofTWlsSpqu9-9Odw.roa (raw, json)
Hash identifier: D8tHghSYzeF2Z+SmwNpH0DayVAbVrU+4mXg8SXm4lOw=
Subject key identifier: 08:B6:08:A8:E0:5D:C9:4B:E8:7D:35:A5:B1:2A:6A:BB:DF:BD:39:DC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44D1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CLYIqOBdyUvofTWlsSpqu9-9Odw.roa
Signing time: Sat 20 Apr 2024 08:23:03 +0000
ROA not before: Sat 20 Apr 2024 08:23:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17617 (0x44d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 08:23:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=08B608A8E05DC94BE87D35A5B12A6ABBDFBD39DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:a6:f3:47:44:a3:7c:56:8c:0c:de:c1:d7:
e1:25:6e:f1:0e:e6:0e:ce:53:e8:93:57:b7:8b:27:
2e:b1:0d:bf:32:24:c6:e9:af:53:12:81:87:e8:ce:
db:b6:ce:96:53:31:b1:a4:67:0d:ef:ed:2a:ce:80:
ed:fa:24:39:cf:ca:da:5e:8c:b4:9a:a9:df:db:28:
86:87:73:2f:18:13:19:f5:9b:cb:04:86:29:b8:9d:
f4:06:b5:84:4f:fc:9f:09:d7:a3:5e:a6:99:21:b8:
21:9f:f7:ec:f1:8c:df:f0:fd:a9:49:22:6d:b9:75:
91:67:ff:4e:23:ee:ce:7e:7a:09:ac:1b:17:4e:94:
ef:a4:8d:0e:3a:ed:64:34:79:5f:4a:d8:44:8b:68:
d0:11:9f:87:34:98:3a:7f:7b:7f:a4:10:f2:b8:88:
b7:6a:c3:99:02:a2:e6:ba:12:7b:31:94:9a:58:37:
9c:15:83:c3:8f:16:f6:3e:7d:c1:bb:99:7d:a5:ba:
dc:f2:23:c8:31:56:88:aa:91:db:e7:da:14:2b:3e:
b9:bb:b7:71:dc:0b:a2:6b:37:91:3c:64:0d:ab:fd:
0a:b1:78:06:25:be:f8:df:24:26:b2:80:4f:00:71:
26:72:c2:66:a9:2c:7a:79:2f:aa:36:a8:eb:0b:1b:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:08:A8:E0:5D:C9:4B:E8:7D:35:A5:B1:2A:6A:BB:DF:BD:39:DC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CLYIqOBdyUvofTWlsSpqu9-9Odw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:fe:95:32:dc:90:c8:c1:8a:bf:c9:ae:ac:90:b9:82:32:72:
3c:aa:b7:93:be:ff:6c:e8:65:d5:52:1b:ce:ee:fc:3f:89:93:
1c:14:68:2b:e8:dc:2d:47:b3:2b:97:e6:f9:80:de:6a:96:48:
90:e3:0a:94:8f:be:56:98:f0:ed:de:28:a6:d5:b3:10:22:ed:
5d:fe:94:e0:d8:4c:31:a4:f0:cc:45:86:09:41:0f:0b:17:7a:
0c:20:0f:98:fe:b7:96:99:28:bd:89:e9:ea:a0:75:36:3b:29:
96:8b:4e:cb:7b:aa:dc:e5:f4:01:31:08:27:cf:04:af:ab:ce:
26:d7:3f:4b:bc:7e:1e:f6:08:05:7f:fa:df:48:9b:70:d5:60:
52:e0:b2:12:3b:ca:5c:26:e5:c6:fe:02:5c:0d:02:d8:05:61:
3f:d3:25:a5:07:ed:26:35:58:f9:3f:e4:87:16:23:8a:0c:93:
37:b3:d2:ac:f0:71:24:6a:c0:99:2c:8c:cf:13:90:42:a3:d0:
d2:b1:e0:44:b6:37:b3:ab:70:da:eb:cc:4b:2e:e8:e2:24:01:
61:01:cc:29:1e:23:77:ab:dd:19:3a:99:3d:53:df:11:1a:9f:
cb:6b:e8:e4:9f:28:a3:04:fc:38:02:8c:e5:2b:eb:d3:80:a7:
71:15:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org