Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CijXgQFs5DVqP8Y7eI7pirHKEAo.roa
File: CijXgQFs5DVqP8Y7eI7pirHKEAo.roa (raw, json)
Hash identifier: Is35yjp4+yA6hcNoCxDqckaXY2omB3NmQtOhugVUQxg=
Subject key identifier: 0A:28:D7:81:01:6C:E4:35:6A:3F:C6:3B:78:8E:E9:8A:B1:CA:10:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 368D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CijXgQFs5DVqP8Y7eI7pirHKEAo.roa
Signing time: Mon 01 Apr 2024 07:52:13 +0000
ROA not before: Mon 01 Apr 2024 07:52:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13965 (0x368d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 07:52:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A28D781016CE4356A3FC63B788EE98AB1CA100A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:d0:52:fc:0a:a0:0c:ac:54:4b:7e:37:d5:
bc:d0:29:24:b3:04:e4:4f:13:89:f1:37:0e:1c:53:
1c:f4:f5:a2:7f:93:62:f5:b5:91:08:9f:85:6a:dd:
7b:e5:69:6e:80:73:06:20:b1:58:5a:56:18:47:7a:
e2:2b:22:09:60:24:a8:da:f7:fc:7e:ef:01:b6:f5:
8c:e2:97:9c:52:87:61:b8:bc:5c:b2:87:06:63:34:
8d:16:a4:be:23:e7:b9:a1:e1:cd:ac:fb:2f:25:2f:
8e:83:ab:5f:2e:e7:3f:00:da:b5:56:a2:67:7b:db:
7e:26:40:40:94:5b:e1:31:f8:27:1f:2c:b8:87:f6:
d9:46:d3:bc:e1:9c:9e:59:74:d1:4d:59:b4:19:d1:
57:51:1d:a7:3f:fd:95:ff:c2:6f:d9:20:bb:94:70:
26:7a:44:f8:26:37:39:80:e7:bd:c7:af:78:bd:a5:
c1:51:c6:28:dc:cd:9b:aa:36:31:12:dc:71:8f:aa:
c7:67:de:cd:20:85:c1:09:9d:5f:d6:19:7a:39:bc:
bc:be:70:35:26:f5:87:a5:0f:70:06:46:28:2c:45:
8b:15:bb:42:3f:9a:d8:cc:b6:5b:86:cf:ae:4d:8e:
59:45:e1:ef:ab:78:06:dc:39:a4:a2:39:fb:af:e7:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:D7:81:01:6C:E4:35:6A:3F:C6:3B:78:8E:E9:8A:B1:CA:10:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CijXgQFs5DVqP8Y7eI7pirHKEAo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:82:88:e9:f5:61:84:d2:23:a2:13:8f:58:4b:aa:53:a7:72:
0d:9d:04:15:85:fb:e9:30:b5:e6:77:8e:72:5c:b7:e0:a8:ff:
9a:71:0f:a8:28:c4:43:27:77:37:8b:26:ef:fc:2f:5a:34:01:
0c:d8:f7:4e:0b:d5:1f:c0:96:0d:a7:60:17:42:db:ae:d7:23:
c4:b1:a9:28:d7:e6:47:b1:b1:32:2f:3d:b8:05:df:d9:9f:57:
f9:7c:a1:e5:3c:96:52:d3:02:e5:de:67:35:8c:b1:d6:1e:01:
ef:89:bc:f3:40:65:52:c4:31:d4:6e:1e:fd:29:88:24:30:40:
9a:ec:45:76:c6:54:2a:a7:0a:04:94:e4:f8:61:5f:de:ee:fb:
ae:4e:c6:5d:e1:9b:9f:5a:4c:fe:ce:9b:e6:df:21:af:64:6b:
9d:aa:cf:40:bd:9f:f9:f6:64:bf:c3:fa:9f:73:0f:bd:e5:67:
eb:90:c7:8a:37:da:f7:6a:a8:3f:91:fc:e6:f6:ab:cb:d8:52:
a4:c8:3f:26:c8:a9:3d:6f:4e:b2:e4:a5:8a:d3:04:a6:f0:73:
9a:3c:8f:3c:90:cd:5d:fc:4d:3f:52:ed:c3:cc:e0:28:01:05:
e5:35:c5:c8:8f:62:a1:b1:24:d2:6e:45:16:bf:58:11:02:d4:
33:51:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org