Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EB6PfxrOqi0XBYMfTrPcLQNKxQY.roa
File: EB6PfxrOqi0XBYMfTrPcLQNKxQY.roa (raw, json)
Hash identifier: /nMJmQslEGfG3ycDftLu4QZaNcldIdckL3/EBGl1TtU=
Subject key identifier: 10:1E:8F:7F:1A:CE:AA:2D:17:05:83:1F:4E:B3:DC:2D:03:4A:C5:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36BD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EB6PfxrOqi0XBYMfTrPcLQNKxQY.roa
Signing time: Mon 01 Apr 2024 13:52:15 +0000
ROA not before: Mon 01 Apr 2024 13:52:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14013 (0x36bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 13:52:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=101E8F7F1ACEAA2D1705831F4EB3DC2D034AC506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:d1:e5:98:87:4b:db:80:b4:45:30:b0:7c:
a5:9c:e7:ae:32:0e:92:e8:55:1f:49:af:7d:52:a3:
2e:a8:91:11:dd:6e:f0:8c:89:ee:e0:bb:f2:59:9f:
9c:52:09:9f:78:ad:88:81:51:6e:0a:b7:75:e3:8a:
26:95:54:1a:d3:d2:5d:ce:54:5d:f8:13:cb:a4:d6:
04:87:d1:13:02:f9:c4:39:44:ac:54:d7:e4:c4:52:
0b:f6:6e:ec:2b:36:a7:a9:40:93:61:30:e2:e5:1c:
81:0d:81:86:41:7e:4f:77:67:2e:61:86:93:d7:f3:
79:c5:3c:d8:48:97:4b:14:96:dc:fe:9a:9d:24:dc:
5e:5b:ac:4c:af:6b:e9:51:2e:93:81:96:c7:c9:c3:
62:f7:85:35:90:e1:bc:8b:84:3d:bb:7a:7d:d5:45:
dc:b7:ba:af:60:1c:01:a9:7c:3f:bb:f1:da:c7:23:
a2:56:f3:52:2e:08:d0:d5:e7:fa:fb:5d:4c:08:ed:
bf:ca:d9:7b:95:0e:6f:81:f5:e9:75:24:58:57:b9:
8e:c9:00:b6:cd:de:8f:37:b6:8d:74:e1:d2:d0:22:
40:17:d1:e1:20:2a:ca:d5:a2:13:86:45:51:eb:f4:
9d:b3:89:dd:b8:91:65:c4:1e:17:57:4a:65:49:3c:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:8F:7F:1A:CE:AA:2D:17:05:83:1F:4E:B3:DC:2D:03:4A:C5:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EB6PfxrOqi0XBYMfTrPcLQNKxQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:29:38:26:ed:80:da:88:60:ad:6e:81:a1:e0:05:1a:0f:88:
27:2d:7d:a7:fd:07:44:70:64:83:5e:01:8c:6f:1b:c6:b7:ea:
10:d8:7f:c6:60:d9:b2:6a:37:4e:e9:eb:be:c7:6a:ec:87:f1:
c4:af:63:e9:73:d2:48:c8:8d:ba:bd:c9:cd:9f:1d:dc:cf:68:
b2:7b:00:bc:1e:e7:61:0e:6d:fd:bb:6c:e3:cb:0b:c6:c7:9b:
f1:e6:20:f1:eb:1f:2d:57:dd:0e:3a:d3:f1:df:41:4e:dc:3d:
b1:50:0b:2c:09:50:d3:f8:65:57:ae:25:00:c2:da:8b:78:55:
75:5c:62:93:9e:e8:65:f3:64:4e:a9:2b:ce:cc:ba:f9:6f:cf:
2d:cb:0a:e8:09:4f:46:a3:bf:2e:a2:e1:6a:fd:5e:6d:76:43:
44:dc:b2:7e:ba:96:22:c0:97:7a:f9:25:0f:83:cd:7e:8e:03:
7b:d1:6f:7e:4d:b4:81:37:95:ee:73:f8:fa:ce:31:51:47:6b:
92:6c:8c:0f:b9:dc:07:ea:b2:00:11:3a:b8:59:8f:ab:08:79:
66:89:f7:b9:c1:2f:55:49:0f:cc:3e:4b:82:26:43:ee:41:11:
b4:a8:bb:66:a0:43:78:03:a3:2d:17:d2:b0:1b:96:c4:e3:c4:
5a:2a:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org