Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ED7Ro47NxT2kDPtDxomQJwCo0oA.roa
File: ED7Ro47NxT2kDPtDxomQJwCo0oA.roa (raw, json)
Hash identifier: VtBojCcDXlvSoVwDa54DrJEK8E7bOl1FjL4b4Y8duB0=
Subject key identifier: 10:3E:D1:A3:8E:CD:C5:3D:A4:0C:FB:43:C6:89:90:27:00:A8:D2:80
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55E9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ED7Ro47NxT2kDPtDxomQJwCo0oA.roa
Signing time: Mon 13 May 2024 03:24:06 +0000
ROA not before: Mon 13 May 2024 03:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21993 (0x55e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 03:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=103ED1A38ECDC53DA40CFB43C689902700A8D280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:4a:04:92:89:4d:13:ec:68:28:64:5e:01:
3c:03:4f:68:82:5a:8d:75:c3:15:e5:26:2f:c7:57:
b7:04:0a:f5:1c:ff:a7:96:5c:30:26:06:3f:e2:4b:
8b:3c:d5:fd:35:38:36:b2:2f:2b:68:d8:e1:34:57:
84:8f:dd:ab:1f:8e:f1:d7:66:cd:16:2a:0c:e8:d5:
43:9f:e3:c2:cd:26:97:b2:62:6b:dd:4e:77:b9:c7:
d9:34:ba:2a:9a:86:dc:6d:84:cc:e0:a0:cb:a4:7d:
13:5f:34:13:ad:fc:d4:95:e9:98:40:12:9e:df:ea:
33:3b:1b:36:c2:b7:2c:34:79:72:d7:f1:6c:1d:90:
23:2a:d0:81:58:04:b0:52:38:88:14:96:35:a7:61:
77:59:db:61:78:76:58:39:3c:2f:ae:b4:f8:3d:88:
99:bf:30:d6:5e:aa:88:e6:42:07:d9:3b:9e:fc:25:
e8:4e:d7:cb:57:58:54:88:10:21:ea:8c:38:2a:0e:
d1:d4:ee:84:9f:13:65:fb:94:2d:59:e2:66:f2:8a:
47:67:84:40:6b:e3:2c:c0:71:f7:cd:44:63:7d:01:
90:1b:13:b9:bd:29:68:a2:64:79:22:fe:46:87:a1:
b8:e7:30:6f:a8:6b:46:54:07:66:64:a8:da:2d:aa:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:D1:A3:8E:CD:C5:3D:A4:0C:FB:43:C6:89:90:27:00:A8:D2:80
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ED7Ro47NxT2kDPtDxomQJwCo0oA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
83:ed:56:9a:4a:fc:26:44:18:17:ab:c1:7e:f6:45:05:c8:2b:
da:00:1c:d7:74:f0:96:b9:3a:3f:fc:d4:28:4e:52:2e:1c:93:
5e:f1:21:1b:48:5d:f3:9c:eb:f7:4d:cd:04:d9:f4:fb:c3:a5:
ff:a7:97:dc:bc:70:11:ac:56:f4:20:13:41:22:33:bc:bb:d6:
0d:96:76:86:79:c4:2e:90:86:e4:4f:72:18:f9:1a:c6:7e:0f:
1a:f7:55:d0:39:54:ac:87:c4:87:a9:79:57:24:c7:da:d2:3a:
7d:37:f3:b3:ee:d5:6b:57:cb:1f:57:6f:88:06:7e:bd:6f:e1:
11:62:fc:3a:ec:a6:d0:6c:94:0b:a9:8d:ee:77:bc:e5:90:f2:
1e:cc:c5:c3:d0:1b:29:81:9d:76:0a:65:54:bf:b2:01:0f:72:
72:d8:8e:25:6c:67:55:7e:14:27:6e:00:35:0d:7c:72:a8:51:
f5:05:66:72:14:bf:3a:42:23:d6:78:33:1e:0f:c3:a1:35:65:
f5:fb:80:a3:11:97:3f:cd:4e:e7:e7:1e:2a:f8:bd:6b:50:07:
6d:aa:89:40:5b:5e:8f:43:30:ba:88:e2:9f:02:99:2e:37:cb:
ea:0a:1b:14:fe:28:90:38:0e:55:64:57:3b:f3:e3:65:69:33:
15:ae:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org