Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ff1NwHb3u1XQMfXjBOJ9m5vGucQ.roa
File: Ff1NwHb3u1XQMfXjBOJ9m5vGucQ.roa (raw, json)
Hash identifier: Cf0GHyDlWLZ/MkntP/VppMFN5+J265Ss0irkcDIUDmo=
Subject key identifier: 15:FD:4D:C0:76:F7:BB:55:D0:31:F5:E3:04:E2:7D:9B:9B:C6:B9:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55F1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ff1NwHb3u1XQMfXjBOJ9m5vGucQ.roa
Signing time: Mon 13 May 2024 04:24:06 +0000
ROA not before: Mon 13 May 2024 04:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22001 (0x55f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 04:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=15FD4DC076F7BB55D031F5E304E27D9B9BC6B9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:b5:b6:a9:a6:c8:a6:ef:2e:7a:51:0c:e0:
cc:56:f6:73:e2:9a:b4:9c:a5:57:99:bd:7a:e6:e9:
63:20:75:2e:3a:5c:63:d4:71:94:48:95:e9:76:3d:
4b:c2:78:13:cd:fc:1a:d0:b7:fc:a8:2e:1d:b7:2a:
50:cc:22:b0:94:c1:ef:4f:5d:8d:de:b7:65:7a:75:
22:2e:d8:3b:92:81:f0:82:45:89:83:1d:d3:7c:81:
26:ce:42:8c:7f:4d:62:0e:e1:15:be:fa:60:02:14:
54:aa:9a:d1:b3:d1:32:bf:23:dd:30:d9:87:d5:69:
41:dc:3d:84:36:da:e5:31:15:22:f2:f3:05:34:11:
79:bc:4f:c3:e6:3e:ad:80:eb:4c:15:f2:6f:57:19:
45:bf:87:41:12:1e:9d:35:9b:1c:4a:b9:42:4d:a0:
1d:b0:9c:70:75:73:8d:ce:02:a6:de:a5:82:55:33:
4a:55:01:de:bd:b6:c4:ad:ad:a4:47:e7:bb:3b:96:
c4:08:1c:be:77:5d:b4:ab:41:9c:33:df:1f:35:a5:
40:76:81:90:38:b5:f3:d5:8c:33:29:a6:c4:12:03:
2d:9a:a7:ff:40:5c:d4:36:23:c9:bc:44:47:96:c2:
99:16:08:29:94:1a:7a:a9:32:07:42:2b:51:fa:0f:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:4D:C0:76:F7:BB:55:D0:31:F5:E3:04:E2:7D:9B:9B:C6:B9:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ff1NwHb3u1XQMfXjBOJ9m5vGucQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:03:d8:fe:50:7c:8a:d9:63:11:6c:13:69:28:cf:01:dd:6a:
3d:17:9b:05:ad:d0:42:27:6c:74:3e:bd:cd:7f:e9:ad:a9:5a:
2f:d1:d5:ef:28:33:f6:e1:0d:36:e0:f4:7a:1b:9a:c3:80:00:
2d:92:c5:ab:5f:60:4d:fb:a5:c8:d5:06:aa:98:76:69:15:60:
c2:f3:ef:c7:7b:9d:d8:1a:18:21:9a:88:0b:81:17:83:ba:cb:
06:2a:06:f0:83:a7:b8:d2:c1:fc:2a:05:2e:00:ca:d1:92:f2:
a0:b9:9a:9f:a7:d1:d3:33:74:9c:2d:f2:0f:89:48:21:78:63:
3d:ed:e6:4b:7a:ec:fd:59:5b:04:75:54:5e:3c:ec:21:1c:55:
78:df:a5:d2:90:ad:73:3c:a5:5e:aa:3c:20:2c:91:3b:97:e6:
8d:2d:40:2d:5b:d0:e8:79:bd:72:fa:12:1e:b3:aa:95:e7:c9:
96:7f:85:84:64:70:0e:67:2c:32:1e:0a:40:61:f2:77:6a:66:
44:fa:05:bd:02:90:69:b4:5a:db:1c:8a:2c:c3:86:37:e0:e4:
14:a8:56:dc:d1:87:4d:f5:6e:3e:1a:d5:07:bc:75:54:1c:b2:
5c:72:32:4e:8f:30:d6:56:46:ad:3b:a8:1a:89:07:d5:78:db:
bd:e9:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:26 2024 by rpki-client on console-ams.rpki-client.org