Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H3eCom4bP3Nx1C7H68MkoC7AiVE.roa
File: H3eCom4bP3Nx1C7H68MkoC7AiVE.roa (raw, json)
Hash identifier: dN1IYrLx8hEotY4/6Xu301UUQ9apSMdZkqCHu2GAigA=
Subject key identifier: 1F:77:82:A2:6E:1B:3F:73:71:D4:2E:C7:EB:C3:24:A0:2E:C0:89:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5629
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H3eCom4bP3Nx1C7H68MkoC7AiVE.roa
Signing time: Mon 13 May 2024 11:24:08 +0000
ROA not before: Mon 13 May 2024 11:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22057 (0x5629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 11:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F7782A26E1B3F7371D42EC7EBC324A02EC08951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:7f:5b:cd:80:f5:3f:aa:6d:48:d7:2f:48:
b9:21:33:50:76:34:8c:1c:72:32:41:d6:65:12:b2:
1a:b9:39:08:57:0d:34:60:11:9d:bb:cf:6c:31:dd:
14:35:a8:94:ae:f2:8c:c1:a6:01:8d:9c:59:41:0f:
d7:00:03:ca:7b:b6:e2:6c:45:50:fc:01:02:98:51:
19:bc:8a:e5:a5:8e:be:a4:58:2b:f3:88:62:e5:47:
1f:cb:7f:c3:6c:74:75:bd:bf:96:c0:e7:47:b0:1e:
ce:6e:f2:9b:03:34:2c:ce:ee:61:9f:b5:07:e6:8d:
0d:3e:a7:35:c6:52:39:3a:ff:aa:03:b5:8c:c7:ec:
a6:7e:f8:9d:72:72:6d:5d:3f:69:2d:cd:76:18:04:
a0:c9:61:e4:0f:26:06:6b:69:f0:c2:1c:af:b1:d4:
c1:e0:4d:e2:3d:66:af:00:68:03:56:62:66:0b:d8:
f3:d8:91:50:2a:85:c2:7b:8f:8a:22:3d:11:a5:3d:
ce:88:31:87:e2:06:ee:03:0e:22:94:3a:b9:2f:7f:
84:d5:dd:00:88:64:7c:84:82:b9:6c:ef:e9:f4:9c:
e4:a6:89:61:de:37:2e:80:43:3d:fb:8c:d3:88:15:
a8:6d:59:73:f3:59:44:f3:8e:90:1f:68:3b:97:7e:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:82:A2:6E:1B:3F:73:71:D4:2E:C7:EB:C3:24:A0:2E:C0:89:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H3eCom4bP3Nx1C7H68MkoC7AiVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:6b:5f:92:42:d5:f7:c3:8b:34:d6:eb:b7:7d:71:fc:0f:3c:
e1:70:91:00:61:b2:4f:59:68:53:e5:2a:64:ed:9c:d1:79:05:
01:4e:43:ce:d3:16:28:c9:98:ed:88:39:57:6f:d1:a2:30:be:
cd:24:1d:6f:0e:06:38:7f:c6:ef:4f:52:e4:7b:7f:77:57:33:
95:44:4e:00:56:f5:13:af:42:61:74:66:6e:93:ab:28:f8:ac:
7b:cb:9d:f8:86:59:f8:a2:1a:6c:80:df:11:eb:2c:fd:65:e5:
a0:c3:6e:5c:3e:26:f1:e0:20:57:dc:a3:d3:ea:53:97:ec:a3:
cd:9e:3c:73:2e:a4:9e:ca:15:75:8b:4b:d1:65:6b:ac:77:5a:
41:81:04:ec:8a:21:5d:6b:54:3e:55:29:c4:14:32:7a:2c:03:
08:9f:1a:dd:e9:f2:87:33:fd:58:17:94:5a:d3:c6:95:12:57:
27:e7:7f:a7:7f:51:18:04:ca:60:54:ba:f9:25:99:fd:a3:6e:
10:f4:22:f1:57:e6:9f:48:bb:92:23:b0:fa:f6:41:93:0f:81:
58:6c:d7:72:5d:c4:87:13:db:b4:67:04:3c:fc:98:c0:b0:37:
f6:ab:04:2b:5e:7f:36:c0:64:d9:b9:5d:99:93:66:46:08:f0:
ad:b4:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:34 2025 by rpki-client