Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/F19WJjT0Ui592YITt4v5OabHL7I.roa
File: F19WJjT0Ui592YITt4v5OabHL7I.roa (raw, json)
Hash identifier: ngskEghjt/lRb+llEgb3D6YupzfgjKS1mhlSzN7hVWA=
Subject key identifier: 17:5F:56:26:34:F4:52:2E:7D:D9:82:13:B7:8B:F9:39:A6:C7:2F:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3581
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F19WJjT0Ui592YITt4v5OabHL7I.roa
Signing time: Sat 30 Mar 2024 22:22:10 +0000
ROA not before: Sat 30 Mar 2024 22:22:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 22:22:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=175F562634F4522E7DD98213B78BF939A6C72FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:41:39:3f:84:03:cd:55:ed:3d:35:f7:cf:
b7:2e:6a:a5:1b:ad:12:80:84:a8:f3:e4:83:af:86:
fd:e8:b3:dc:99:db:b6:0d:b5:e2:a9:27:1a:c7:19:
15:ee:ee:37:f2:73:38:f8:33:92:63:69:bc:30:3d:
ab:cc:92:52:62:44:99:e2:66:65:08:70:f3:d9:35:
55:90:9c:13:66:59:b0:c6:dd:57:44:05:93:3b:41:
4f:23:dc:14:28:85:3d:12:f6:fa:89:50:73:81:9a:
0c:f2:57:25:b3:39:84:5e:8f:0f:d9:1a:cc:ef:b3:
2d:1a:bc:f7:16:83:90:c1:06:ab:b3:e6:ad:1e:34:
7a:e9:48:56:b8:0b:ed:e2:da:a5:7e:c5:ec:4d:83:
87:b9:15:6b:c4:43:3d:04:56:52:89:1f:dc:97:49:
50:c7:86:d4:fb:b7:c4:74:06:07:94:95:f0:ed:94:
51:15:1c:6f:11:a9:e2:69:c0:1d:8f:a8:1a:15:d4:
1d:f2:55:0a:1e:96:42:1f:07:8d:d1:ec:20:7f:1f:
d9:a8:20:41:7e:f4:80:f6:a5:ab:e3:11:ea:5b:26:
62:0e:f2:ed:3d:02:f6:d0:e5:68:3c:04:1a:8a:59:
ed:1d:8c:5c:06:99:64:1b:75:6c:26:80:d7:94:cf:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:56:26:34:F4:52:2E:7D:D9:82:13:B7:8B:F9:39:A6:C7:2F:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F19WJjT0Ui592YITt4v5OabHL7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:bb:b4:a9:29:37:dc:73:fe:d1:9b:3e:f3:18:09:b4:f2:a3:
1a:15:47:62:dd:b4:47:58:27:2c:be:25:ee:83:f7:96:1e:f5:
99:77:23:45:b2:cb:93:4d:68:81:cd:af:aa:7f:39:3d:d9:ee:
b3:b3:f7:9c:95:40:da:e1:95:65:5f:7a:98:2a:f0:f5:51:be:
74:3d:21:ba:62:34:28:0b:40:f8:f6:27:c9:e0:85:a0:dd:70:
75:27:a9:88:d7:64:68:fc:df:fc:cb:45:df:f8:54:20:ce:bd:
2e:c7:b8:c6:10:18:88:67:df:7c:71:2c:7f:13:58:60:37:69:
17:f0:b3:81:1c:b2:1d:49:55:df:26:4c:03:5c:7a:27:71:43:
04:0f:d4:cd:ad:55:7f:3e:b2:77:38:23:cf:b4:2b:f6:b1:44:
a3:45:6d:41:05:05:d2:8b:fb:5e:26:2d:e8:d0:41:ce:08:04:
57:79:59:e1:df:77:56:df:fe:36:da:99:0c:71:17:79:a2:75:
39:67:03:38:8d:fd:ea:41:fc:fb:32:a7:17:cd:33:b4:a5:43:
db:82:dd:b6:e1:23:da:0d:0f:af:d0:91:75:48:f0:85:c8:cd:
1c:c3:54:b4:c9:78:f2:f0:9e:76:f6:63:85:b8:83:cd:b3:84:
b5:73:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:42 2025 by rpki-client