Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ELO1SGf2f16yEuR1NVFbkYLKTrY.roa
File: ELO1SGf2f16yEuR1NVFbkYLKTrY.roa (raw, json)
Hash identifier: OxPMRNqzmMp2JkB67FtHo2AXDnWu5TfpYD4CaQEvMoI=
Subject key identifier: 10:B3:B5:48:67:F6:7F:5E:B2:12:E4:75:35:51:5B:91:82:CA:4E:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ELO1SGf2f16yEuR1NVFbkYLKTrY.roa
Signing time: Mon 08 Apr 2024 11:52:34 +0000
ROA not before: Mon 08 Apr 2024 11:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15341 (0x3bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 11:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=10B3B54867F67F5EB212E47535515B9182CA4EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:65:1c:99:90:71:73:48:00:0e:bc:75:e5:
b9:2c:e5:13:aa:dc:df:7b:e2:53:a8:24:b0:a8:83:
c4:84:3a:a8:d6:49:49:1f:0f:64:48:62:4c:c6:59:
61:cc:3b:60:5a:39:14:1b:61:2e:d9:91:4a:2a:eb:
c3:3f:00:21:df:6b:75:7b:41:d2:66:c4:7c:a7:e2:
17:e0:7e:73:e6:26:f3:87:49:21:11:d7:1e:f2:7e:
8b:04:3c:81:4f:dc:1d:9a:76:bf:56:e2:c8:c1:a8:
7d:01:ff:60:df:1d:e8:f5:45:93:3c:68:9c:0c:a7:
2b:11:f9:95:5c:dc:7f:64:08:98:bb:b2:ce:74:2f:
30:fc:3f:80:cc:93:fa:24:fd:49:2f:9d:95:15:0a:
7f:0a:a0:ba:ff:9c:c9:35:9d:01:45:97:dc:b6:43:
39:77:d7:d9:7a:4f:71:1a:1d:52:95:81:3a:32:94:
eb:7c:56:b7:b5:2c:6a:69:52:ac:32:cc:48:46:ee:
77:d2:12:4a:a7:69:7c:f1:e8:1f:c8:6d:80:66:65:
37:96:a9:6c:2d:bd:43:fd:a5:a4:3e:82:de:f2:3f:
07:2d:d0:31:73:1e:c8:ff:2c:eb:ff:25:92:b5:c3:
bf:7c:ae:21:c3:ff:42:9d:92:d1:ac:be:b5:38:50:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:B5:48:67:F6:7F:5E:B2:12:E4:75:35:51:5B:91:82:CA:4E:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ELO1SGf2f16yEuR1NVFbkYLKTrY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
47:b1:9a:46:f3:7f:01:4d:eb:f0:9e:6f:df:17:44:2a:f4:f5:
f6:f9:b5:d7:0e:1d:d2:35:53:7b:99:79:ae:db:08:e8:40:dd:
96:43:65:fa:19:5e:57:d1:20:95:ff:15:5b:7f:b2:97:bf:28:
b5:7b:f9:55:91:24:ac:e7:19:9f:77:a2:7f:23:dc:67:9d:38:
ba:e7:0c:95:a6:12:77:4a:46:c7:f2:dc:fb:b8:86:c1:10:ae:
4a:31:cc:c4:f1:14:1e:4a:46:bf:ab:a0:95:59:30:93:66:5d:
69:cf:64:22:39:90:f5:2b:98:8a:71:21:52:5d:be:51:68:53:
1e:38:72:ae:95:73:11:65:b4:b4:40:06:09:ad:fd:7f:a5:12:
be:81:4d:af:f9:06:32:31:f3:a8:e4:d3:a2:4e:e8:e5:a4:15:
68:bd:b6:fb:43:18:3e:79:20:51:6f:08:65:d6:12:42:59:0b:
b6:27:a4:5f:28:79:dd:15:5f:7b:25:f4:1a:d0:0d:07:aa:e1:
f7:ae:b8:e1:df:b5:ee:d5:d1:34:9e:ad:b7:64:9c:85:8a:f2:
52:4a:c4:02:d5:c1:f0:c7:7f:e7:bd:d2:54:57:19:51:5a:c1:
9b:8f:17:f9:fa:05:60:24:c7:25:a6:90:30:38:45:66:a8:df:
78:a5:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org