Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DZtfBUfcdulxfkx5MIbIzKdAwQo.roa
File: DZtfBUfcdulxfkx5MIbIzKdAwQo.roa (raw, json)
Hash identifier: 9yc6SUFN1klIo1rgttsSQwd+QRklijSPwP/gCJVdEFI=
Subject key identifier: 0D:9B:5F:05:47:DC:76:E9:71:7E:4C:79:30:86:C8:CC:A7:40:C1:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D1D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DZtfBUfcdulxfkx5MIbIzKdAwQo.roa
Signing time: Wed 01 May 2024 09:53:34 +0000
ROA not before: Wed 01 May 2024 09:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19741 (0x4d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 09:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0D9B5F0547DC76E9717E4C793086C8CCA740C10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:91:5f:b4:85:24:68:3f:8c:ac:8f:18:24:
63:a9:b7:8b:d7:26:c8:96:f5:fe:8c:db:4d:c2:40:
5d:37:7f:49:ac:ad:38:7d:85:5a:e8:34:18:93:2a:
72:5b:de:01:ad:01:85:e0:06:67:c5:21:69:0b:aa:
d2:5b:e2:ee:c6:fb:67:b9:5e:15:8b:8c:47:db:dd:
38:12:99:d3:61:83:e9:d3:92:71:5b:0c:ed:62:d7:
01:cc:78:11:6c:f4:06:6a:31:78:e7:53:f0:05:4e:
f0:0b:d4:f0:b6:ef:94:c1:c9:c7:59:33:52:be:83:
5e:8e:ee:2e:20:47:b7:a1:64:f2:b4:65:b1:5b:a8:
8c:48:83:9e:31:f8:fe:a3:5d:21:28:2f:a0:51:f9:
b9:6a:a4:a1:ee:d1:4c:b3:c9:33:be:46:e6:b5:88:
5c:41:f1:9f:c7:f8:9a:d9:a4:ec:02:d0:43:55:49:
db:ae:24:92:8e:62:c9:71:c4:db:6b:38:c7:7d:6a:
b6:ef:a8:8b:3a:ca:9a:a5:8c:0a:de:b9:f8:7d:4f:
87:1c:31:91:1a:eb:e6:51:6f:56:2b:84:8a:f0:44:
55:24:53:13:c9:26:ff:32:d7:a1:ed:57:57:b2:6d:
5a:0e:a3:5a:a4:a1:34:9d:f3:bc:84:18:5e:bc:5e:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:5F:05:47:DC:76:E9:71:7E:4C:79:30:86:C8:CC:A7:40:C1:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DZtfBUfcdulxfkx5MIbIzKdAwQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:c2:8c:80:a7:f4:dd:0a:5d:44:0f:cc:73:1c:04:c0:e4:03:
6e:0b:1b:dc:d5:ff:6e:42:e7:ac:92:9d:c9:36:e0:b1:19:3f:
58:90:98:0f:7b:91:75:2b:f7:b5:74:e2:16:bd:36:e2:19:50:
f2:80:12:cc:aa:7f:0b:d4:5b:f0:ab:c5:af:cc:46:b3:28:45:
b9:ff:88:f3:6f:fe:04:2c:5e:41:d0:84:4b:b9:b6:0a:3a:08:
36:b0:aa:86:be:33:08:29:e7:ef:68:03:95:ea:5a:eb:f3:9e:
b5:e4:f1:9c:5e:12:a0:65:c2:97:9d:6d:82:5d:fa:12:da:68:
df:21:ac:a2:c6:e2:a4:a7:b9:92:b8:28:e0:2f:cb:0a:a7:a3:
9a:19:ca:c9:c8:99:de:b2:45:a8:e5:dc:81:c7:28:dd:ae:38:
dc:6b:eb:c7:82:09:d2:d4:9c:56:e3:be:ff:ea:34:4c:91:39:
ee:aa:d0:56:ee:5e:0b:67:8e:25:63:67:72:ff:c5:19:af:15:
da:28:2a:32:50:6a:f8:16:5f:92:f4:fb:c3:11:8b:b0:d6:00:
1b:0b:a7:a5:1d:df:4b:eb:0f:3c:7f:45:72:28:44:6c:74:34:
c3:be:e8:0a:33:51:d8:df:e1:88:a4:bb:ee:03:e7:dd:a4:e1:
4b:87:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org