Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H0sGWngWRobQGikb0yGXSldVBo0.roa
File: H0sGWngWRobQGikb0yGXSldVBo0.roa (raw, json)
Hash identifier: 4N7QoVU8AcKM56377fKgnG8oHHx8SLNVkk3u9M6K+tQ=
Subject key identifier: 1F:4B:06:5A:78:16:46:86:D0:1A:29:1B:D3:21:97:4A:57:55:06:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 422D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H0sGWngWRobQGikb0yGXSldVBo0.roa
Signing time: Tue 16 Apr 2024 19:53:04 +0000
ROA not before: Tue 16 Apr 2024 19:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16941 (0x422d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 19:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F4B065A78164686D01A291BD321974A5755068D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:b3:2b:3c:56:ed:d0:12:4d:3f:93:6b:d0:
62:13:d8:91:55:53:e9:21:c8:fd:a8:6d:3b:87:d2:
3b:2c:31:ac:bc:51:bd:da:f5:f7:25:c9:61:7f:ac:
6c:ba:3d:e1:52:5c:d1:d0:3a:5e:ff:65:39:51:08:
de:69:8e:14:2e:cb:ee:5c:06:a4:07:72:da:25:b6:
1b:a8:d0:15:2b:5b:cb:4a:b1:5c:fd:8a:b0:8d:93:
2a:62:03:cf:b5:8d:27:36:c6:ac:e3:e0:0a:ec:e8:
2b:f3:da:bd:c9:35:b5:5b:83:a8:16:95:27:5c:ca:
63:a5:9c:5d:75:6d:2b:04:0a:3b:63:dd:aa:d7:5a:
96:f4:e3:1d:a6:8f:7e:e1:03:c6:c3:82:31:b6:07:
e7:7b:ea:37:06:54:0e:c4:c2:90:dd:e2:fd:7f:31:
90:b7:60:40:38:09:d3:a9:5f:88:e9:69:47:6f:fa:
2c:b7:56:48:79:f5:1e:bb:e8:52:30:9b:67:11:67:
31:de:25:d9:21:a1:b7:37:96:db:3e:84:41:46:81:
a5:aa:8c:86:3a:f2:4e:30:41:68:29:a2:b8:c6:2e:
de:77:59:98:62:3f:93:af:77:7c:38:52:1b:95:1a:
b7:d5:38:7a:c2:13:42:dd:34:fc:7c:d0:3b:ab:82:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:06:5A:78:16:46:86:D0:1A:29:1B:D3:21:97:4A:57:55:06:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H0sGWngWRobQGikb0yGXSldVBo0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:ba:a6:07:51:4a:5f:b4:27:f1:ad:6d:82:c2:0b:1f:c1:bc:
2b:f3:ea:69:1f:a3:c0:b0:09:b3:7b:7b:bc:88:41:23:24:0b:
fb:45:6c:22:88:79:d6:c4:44:35:fe:13:2b:03:91:56:a4:67:
d5:d5:80:4a:73:78:36:cf:f3:61:11:aa:a2:03:7a:3c:f9:9a:
a5:a3:88:3f:de:55:8e:bb:df:38:2e:76:bb:d3:9b:e4:42:46:
7f:89:d9:d3:ef:3d:ef:ad:f0:b5:a1:93:e5:de:aa:b3:1a:9d:
e1:5b:ab:26:25:f8:2b:cd:f4:8c:4f:78:b9:39:93:b3:1f:4d:
2d:66:5a:e3:21:47:ab:52:1b:d5:91:ee:02:d5:c8:e5:97:62:
92:f2:c3:eb:a5:10:f4:7e:e8:e0:e4:8f:84:7d:51:b5:a1:b5:
bf:e5:a6:87:37:9b:c8:16:fd:1c:ef:0c:5e:f3:c6:89:0d:33:
c2:6f:0b:c1:d4:24:15:40:3b:4f:25:49:e6:8f:fd:91:7b:81:
cd:d7:c3:34:52:88:fb:66:98:b2:d1:9f:28:a8:92:4d:32:94:
31:62:76:14:7d:00:64:a1:42:76:b6:da:12:9a:90:21:20:7e:
2f:f6:41:f5:bf:93:6f:73:a7:13:d2:fe:26:63:99:52:5d:f1:
51:44:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org