Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HAokcR6Q-8obwSVckqjJYn5wAJM.roa
File: HAokcR6Q-8obwSVckqjJYn5wAJM.roa (raw, json)
Hash identifier: A3ybVvuohSYKTHzGSsco+HgETLo/hFWAAxizSivNeg4=
Subject key identifier: 1C:0A:24:71:1E:90:FB:CA:1B:C1:25:5C:92:A8:C9:62:7E:70:00:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E8D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HAokcR6Q-8obwSVckqjJYn5wAJM.roa
Signing time: Fri 03 May 2024 07:53:56 +0000
ROA not before: Fri 03 May 2024 07:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20109 (0x4e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 07:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1C0A24711E90FBCA1BC1255C92A8C9627E700093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:43:9b:68:1c:1d:55:03:75:8d:99:5b:8c:
7b:ec:67:7e:72:48:0e:22:a4:69:63:32:05:80:00:
d9:72:bd:73:ff:bc:ad:0f:56:c5:e4:73:54:a0:63:
d7:ac:f2:8a:1a:1e:fc:c1:9a:80:63:4c:06:2a:2a:
ea:ac:67:bb:15:8e:00:91:0d:86:e5:22:f9:87:d3:
e3:56:03:80:27:51:58:1f:75:f3:fa:ac:fc:72:f6:
51:43:b3:e2:7a:f3:45:bf:e5:ea:43:af:48:f3:d0:
44:67:d7:78:f1:a9:28:62:e7:a7:90:35:27:1a:8b:
9c:14:98:0f:b1:13:ef:70:4d:15:82:e3:90:92:12:
1f:f2:3b:82:79:80:7e:c3:d4:b3:75:c8:9e:94:34:
95:4f:3c:4e:91:31:fa:f9:b7:d6:1d:75:49:9b:de:
23:9a:4d:4a:46:a4:e7:ed:2f:02:ee:7b:d0:f4:80:
cc:4b:ca:f9:e3:70:ae:d3:58:d3:37:4a:2b:99:5b:
23:b6:fd:cc:3e:d4:19:0b:93:22:d0:51:47:d9:84:
48:16:d8:8b:89:5c:66:19:c4:b5:79:ab:ca:44:60:
c4:3e:e9:f0:41:42:9e:3e:07:2e:27:9e:c4:e1:fb:
db:98:f1:16:25:23:a3:41:f9:8f:39:cb:1f:b2:d7:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:24:71:1E:90:FB:CA:1B:C1:25:5C:92:A8:C9:62:7E:70:00:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HAokcR6Q-8obwSVckqjJYn5wAJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:87:4d:15:79:f4:6a:3c:5f:d4:74:df:34:58:03:26:69:65:
f2:4e:ef:c4:46:9c:f8:6c:f9:38:c4:e0:00:26:06:f6:ce:80:
a6:9d:fd:6c:47:40:ba:e6:2c:5b:cc:35:df:23:6d:c9:b3:2a:
78:b9:3d:a4:0c:6e:4f:33:90:a5:fc:15:b0:fc:b9:92:56:2f:
60:d1:e5:d3:7f:6a:43:97:a6:dd:e8:2f:11:77:d5:18:47:fb:
ae:1d:3b:98:59:7a:54:30:ad:fd:8e:27:e2:e7:13:fc:b1:16:
c2:0a:4c:29:ba:c9:3b:c7:20:f3:4d:af:b1:50:f5:02:d9:de:
ba:d5:c6:62:4d:e1:10:90:f1:18:c1:05:10:b8:8b:72:cf:28:
e4:cb:73:81:c9:f5:c6:56:2d:c8:ce:17:9d:6e:66:81:70:0a:
bc:57:9e:6a:48:aa:ac:89:8d:62:4c:9a:31:3e:a4:37:0a:ae:
c9:fe:b9:2a:6f:75:6d:f1:90:87:b4:02:90:a1:a4:2e:e6:c8:
24:61:45:d5:59:cd:aa:8f:9c:32:8f:3a:78:6a:6e:99:19:3c:
d4:7b:88:80:70:db:52:e9:66:b3:37:21:d3:c7:5d:32:48:fd:
9c:77:c1:63:43:28:8d:47:48:30:61:fe:37:b0:f8:02:b5:3c:
3d:b5:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:43 2025 by rpki-client