Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/I3D_vKwSnGfu84WG5XLaNZDXS2w.roa
File: I3D_vKwSnGfu84WG5XLaNZDXS2w.roa (raw, json)
Hash identifier: jgi/AGcT5/oqFiS4Yw+1zINdw/DyiQc6JvHsgp1wbGM=
Subject key identifier: 23:70:FF:BC:AC:12:9C:67:EE:F3:85:86:E5:72:DA:35:90:D7:4B:6C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56B5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I3D_vKwSnGfu84WG5XLaNZDXS2w.roa
Signing time: Tue 14 May 2024 04:54:17 +0000
ROA not before: Tue 14 May 2024 04:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22197 (0x56b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 04:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2370FFBCAC129C67EEF38586E572DA3590D74B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:cf:8b:13:13:34:c3:ca:a4:c9:be:90:35:
40:fe:ef:e5:d7:83:b3:42:28:57:20:61:9f:bb:58:
14:6a:25:ef:14:7e:1b:8f:00:7b:27:89:a3:0c:38:
64:19:00:cc:fa:ca:0c:28:8a:0c:48:33:a7:74:d6:
f6:c7:57:6e:1f:fb:25:43:bb:ae:67:f2:c9:2a:af:
7e:b5:92:59:62:67:dd:ca:cb:62:e0:b8:42:35:11:
04:ce:98:52:cf:4d:b6:d0:42:40:f8:69:7d:5a:12:
aa:ff:fe:bd:b1:ca:99:bf:6e:d6:09:1d:b9:d1:d3:
49:3b:7e:56:f0:7f:10:6a:4a:bf:6f:6f:84:06:20:
5c:48:1d:cd:b2:95:3a:66:b2:ee:ea:9d:18:57:ef:
34:d8:66:40:c3:17:fd:46:0e:25:42:c3:81:c9:c6:
8b:d1:70:c9:f6:2b:a1:83:a2:78:2a:f8:7f:dd:65:
16:25:8f:ca:74:41:89:ec:9f:1c:4f:e5:24:63:db:
bc:83:0f:12:af:29:0f:74:59:61:c7:7a:b8:11:6f:
a1:75:f3:10:f3:26:ba:84:00:25:14:0a:4a:27:5d:
73:44:fd:aa:8c:a8:12:20:82:4d:96:a4:90:b2:3a:
30:22:61:2a:20:2f:f5:0b:e4:ef:8f:9d:2b:e8:f0:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:70:FF:BC:AC:12:9C:67:EE:F3:85:86:E5:72:DA:35:90:D7:4B:6C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I3D_vKwSnGfu84WG5XLaNZDXS2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
29:34:0c:0f:08:3a:30:90:75:2c:d5:73:94:c7:f4:0c:ff:23:
a8:de:87:f8:30:b2:26:2c:d3:03:f9:26:99:50:ca:a0:fb:eb:
c3:03:e5:2b:fb:59:0c:8d:5d:ef:f1:3b:de:68:de:ed:5a:4b:
51:b4:a9:db:8f:cd:56:41:33:3d:74:aa:f2:8b:55:d6:40:c1:
01:88:ba:2b:2c:c9:38:21:ad:72:47:6f:96:8e:35:11:ea:a4:
3d:72:c5:1a:53:9b:18:14:d7:56:73:ac:d3:ba:6f:78:5c:0b:
ab:68:38:94:5d:65:a0:32:8d:05:fb:83:85:9c:9d:ce:64:4e:
fe:28:6d:13:5f:38:0d:88:1c:c6:e4:4f:80:85:f2:52:39:98:
c6:3a:87:6d:0f:6d:d9:4b:75:be:fc:1c:c2:26:66:6b:9b:3f:
92:4e:3a:0b:07:33:9c:f7:d3:95:77:37:47:50:a1:07:65:db:
e9:fb:16:c5:33:20:b1:1b:05:3b:30:dd:c5:3c:51:45:aa:b9:
37:65:d1:84:a4:48:56:29:58:c9:10:5d:bb:2a:7e:1a:94:70:
fd:d2:18:e0:03:3b:26:c1:00:72:a0:5c:eb:0a:e1:e5:28:9a:
20:1f:55:41:3c:df:65:a2:60:8e:55:38:52:fd:fb:73:b7:f7:
51:65:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:17 2024 by rpki-client on console-fra.rpki-client.org