Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H_1UmgsqKSNS_YgBgYI4gmjQ5vQ.roa
File: H_1UmgsqKSNS_YgBgYI4gmjQ5vQ.roa (raw, json)
Hash identifier: 0FA++XSaWrOj6e2xLX00Fx1Y1z3VSXzTkeIkrxrsmqo=
Subject key identifier: 1F:FD:54:9A:0B:2A:29:23:52:FD:88:01:81:82:38:82:68:D0:E6:F4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H_1UmgsqKSNS_YgBgYI4gmjQ5vQ.roa
Signing time: Wed 24 Apr 2024 02:53:14 +0000
ROA not before: Wed 24 Apr 2024 02:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18341 (0x47a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 02:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1FFD549A0B2A292352FD88018182388268D0E6F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:dc:d6:06:2e:71:d8:cb:fe:88:55:89:da:2b:
17:88:26:cc:32:67:e6:51:42:f2:c9:7b:d4:43:a7:
8f:64:c5:f3:25:5d:62:6a:06:1d:e2:a9:67:72:e7:
f2:01:75:4c:52:96:b7:96:b4:ca:93:da:8b:ee:99:
98:85:ba:63:5a:57:6d:ac:0a:55:78:ea:0e:71:49:
1a:c8:a2:bc:92:93:8f:00:9e:d1:ac:b2:a2:02:54:
dd:dd:d0:d2:a3:3e:b7:12:e8:5f:11:01:de:aa:d8:
56:ad:62:ef:58:5a:c6:05:66:2a:29:61:d1:3e:f6:
b9:c6:3b:da:41:24:0e:dd:40:c2:df:6f:16:ea:6a:
38:76:63:2d:ba:7e:5f:cf:4e:0d:c5:48:bc:e0:e0:
ce:42:5c:86:72:52:c9:ee:49:8d:12:ae:fb:2d:f1:
ce:67:4a:93:7a:a7:ea:b5:66:58:72:9e:04:22:2d:
53:0c:c0:25:dd:1c:c9:5d:54:c2:78:15:98:54:60:
1d:bb:f0:bf:07:72:da:28:ae:58:e0:5b:e7:1a:97:
7d:fa:d9:73:2d:c1:d6:ad:fe:3f:83:c8:9e:65:24:
a3:30:e8:54:fc:01:d2:49:5c:74:64:84:8f:d6:40:
2b:01:7c:33:f3:f0:3d:c7:ed:83:c6:01:96:c6:ed:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:54:9A:0B:2A:29:23:52:FD:88:01:81:82:38:82:68:D0:E6:F4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H_1UmgsqKSNS_YgBgYI4gmjQ5vQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:fb:69:a2:bd:ca:07:9b:50:91:65:15:4c:8a:8f:55:85:66:
0a:95:86:e3:58:db:d0:6c:68:11:93:2f:d9:6a:e0:5e:f6:b4:
f4:76:d7:69:4c:83:e7:ef:93:2b:98:49:d5:cd:f3:70:d8:64:
8e:28:b5:85:97:12:ac:ed:2a:8d:56:b5:60:6b:b2:d8:04:1d:
f4:08:ad:39:8f:7a:fd:4d:b3:db:12:a8:c7:c3:97:37:fd:cf:
a7:b8:8f:8f:fd:05:30:1a:31:ee:b4:1e:b8:37:c2:b7:c4:7c:
a9:99:55:64:35:97:63:4a:d8:6e:c5:e5:40:f3:e6:20:9e:67:
3d:87:7c:6e:e8:88:43:b1:0b:02:12:ac:57:7f:71:af:25:db:
3e:bd:ac:0c:f3:d1:f1:a3:de:79:2c:88:46:ad:a8:84:d4:a9:
9e:4b:69:43:3c:b2:d5:2b:36:f4:e3:d4:c1:fd:bf:67:35:9b:
49:7a:b3:8a:bd:92:ed:03:dc:b4:58:88:12:9f:f1:90:d8:58:
94:76:54:8b:bf:10:37:a5:ca:c6:44:71:77:cc:92:89:92:c8:
b0:6b:1d:f6:1b:51:ac:3f:33:38:b0:bf:68:6e:16:9e:28:71:
f2:0e:1a:af:63:26:e9:48:a5:17:b2:e1:2b:c5:9d:fb:ec:02:
1e:4d:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:59 2025 by rpki-client