Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Elz9hmylyRBO8Sm12q2m6nlT_Ic.roa
File: Elz9hmylyRBO8Sm12q2m6nlT_Ic.roa (raw, json)
Hash identifier: 4T+R9u2q73eMrVlMgxd3npTW719hTY6pdyTWLkKeGQ8=
Subject key identifier: 12:5C:FD:86:6C:A5:C9:10:4E:F1:29:B5:DA:AD:A6:EA:79:53:FC:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48FD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Elz9hmylyRBO8Sm12q2m6nlT_Ic.roa
Signing time: Thu 25 Apr 2024 21:53:43 +0000
ROA not before: Thu 25 Apr 2024 21:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18685 (0x48fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 21:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=125CFD866CA5C9104EF129B5DAADA6EA7953FC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:6d:37:78:71:66:66:c7:71:91:26:03:f1:
9c:81:97:e9:ad:59:27:fd:43:80:bc:33:fa:43:2b:
c9:14:d4:51:92:45:6b:ea:b6:5c:e2:31:63:e4:b6:
16:48:a0:57:62:1c:29:82:e3:4d:c3:f0:aa:a8:3f:
b3:bc:69:f3:ee:a1:df:74:5b:b2:97:2e:52:73:f9:
75:95:f7:05:d1:ac:7e:4a:ff:3a:6a:8d:b4:e3:df:
d8:82:12:09:b3:77:42:d9:10:bd:65:b2:84:e5:dc:
f7:9b:07:6c:57:75:2b:eb:4e:d7:29:06:73:12:f2:
ba:70:d5:d5:ce:92:85:94:3d:e0:f4:0c:eb:bf:67:
45:6f:2a:f8:ec:cd:a3:e0:c8:62:0d:6c:50:05:9f:
68:83:f6:e3:c4:ca:7c:f6:66:2b:03:88:4f:2e:57:
f7:a1:73:87:80:88:13:a2:fb:d1:d4:86:d7:64:20:
c2:cc:ec:04:ba:ba:c7:b1:84:9b:ff:8f:d6:2b:03:
66:1b:41:d2:e4:a2:af:b7:ad:df:ae:46:8c:17:f5:
dd:3d:aa:e7:2e:17:85:d5:8c:51:4a:2d:d2:0a:b1:
ea:77:32:b5:28:cd:a4:8f:ac:16:71:49:4e:c0:39:
4c:b7:e0:d6:8d:ca:84:63:9a:d6:ec:77:56:fb:cf:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:FD:86:6C:A5:C9:10:4E:F1:29:B5:DA:AD:A6:EA:79:53:FC:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Elz9hmylyRBO8Sm12q2m6nlT_Ic.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
28:77:d5:7c:ee:3e:0c:89:97:60:61:b8:6e:c7:cd:8c:22:0d:
44:5a:e6:32:24:f8:28:92:71:d5:fa:c8:60:62:08:82:af:c0:
02:b1:49:d0:e4:81:82:a3:52:a0:8b:63:43:99:88:82:d2:67:
81:21:c5:d4:79:be:67:16:6c:ef:f5:83:4c:66:07:f0:25:f5:
2e:15:29:6c:7c:e6:76:2b:bc:0a:63:17:c1:3e:bd:6f:b8:31:
f8:0b:fe:4d:21:48:75:46:7e:d3:dc:1d:a5:85:31:b0:e7:19:
ca:b7:99:99:26:a4:6e:8a:90:62:6b:1b:42:60:6b:4b:ce:61:
c6:d7:80:24:d8:b6:b2:a1:6e:b3:e2:93:72:af:0f:d0:ba:d8:
70:84:d5:4a:f8:19:37:b7:bc:72:c8:4b:4e:d5:45:86:01:6d:
bb:67:02:11:8e:54:10:70:18:81:b7:9c:ce:be:0b:dc:c7:cd:
fe:2a:b8:ad:3c:41:cc:6c:cd:82:f1:01:b2:93:1d:d8:a5:23:
a5:f4:1f:4b:b3:70:a5:70:cf:50:58:97:96:40:df:c2:67:98:
69:44:6f:40:1a:0f:2d:7c:72:32:a0:e6:ca:f4:f9:f0:47:ec:
83:24:df:1b:06:44:8e:3e:4d:47:18:56:86:b4:50:5d:0a:1d:
d4:f0:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org