Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ICCDiA9GTQy4S6EkSYcjV9Rvsjg.roa
File: ICCDiA9GTQy4S6EkSYcjV9Rvsjg.roa (raw, json)
Hash identifier: qYlky0R1ksrURIe7g4J5sa4OA2uxy/GWhROzyHQZTHk=
Subject key identifier: 20:20:83:88:0F:46:4D:0C:B8:4B:A1:24:49:87:23:57:D4:6F:B2:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5195
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ICCDiA9GTQy4S6EkSYcjV9Rvsjg.roa
Signing time: Tue 07 May 2024 08:53:52 +0000
ROA not before: Tue 07 May 2024 08:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20885 (0x5195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 08:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=202083880F464D0CB84BA12449872357D46FB238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:f5:86:08:e8:15:43:55:7b:5f:c9:b0:95:
67:01:1f:56:53:2c:d4:ae:52:57:ba:5e:ea:18:85:
c0:69:82:8c:75:4a:90:64:f6:11:a2:2a:a1:60:6a:
39:d2:0c:b2:1f:ab:1b:79:a9:1c:df:47:77:46:b7:
ee:f8:3b:5d:ab:ab:b7:ae:4d:f0:f7:32:2b:f8:55:
51:63:00:3c:50:a4:eb:50:59:70:61:51:66:38:5c:
11:14:33:29:0f:67:ee:14:cf:29:2d:5d:73:3a:40:
72:09:bf:c1:e0:4d:ca:e8:d5:6b:3d:e1:6d:b4:bc:
86:6e:a9:06:8a:fa:6f:68:47:0d:ed:0b:d8:f0:9a:
2d:c1:5b:bb:df:ae:18:53:54:fc:a7:0f:fc:78:bd:
e5:fd:99:c0:86:ef:fd:2c:4a:7a:3e:1f:e0:a8:e8:
5f:6b:09:70:4f:68:a8:3c:72:73:7c:f9:d5:42:79:
83:fe:12:90:e3:35:da:5f:7c:6d:ba:92:01:d5:1d:
62:ba:31:41:fe:be:a0:dd:14:6b:dd:59:c7:4a:61:
52:78:69:86:0b:b5:c4:90:49:dc:db:e2:33:46:01:
5d:ab:f3:4c:c3:88:f7:75:57:52:33:86:7e:a0:3e:
00:d3:a1:f3:47:a9:29:c2:af:8c:02:89:c9:01:b7:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:83:88:0F:46:4D:0C:B8:4B:A1:24:49:87:23:57:D4:6F:B2:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ICCDiA9GTQy4S6EkSYcjV9Rvsjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:8e:12:ce:29:f2:96:39:c8:90:b6:37:08:ab:e7:2c:70:00:
d5:a5:a9:a2:af:ba:6f:d6:be:5b:e8:35:0f:c7:63:b0:c1:52:
3d:5a:19:8c:46:f5:ec:04:82:47:f1:73:5a:f6:c1:1b:cd:bd:
6f:03:32:36:af:0f:39:27:c0:5e:c6:07:53:28:16:76:6a:27:
95:9e:5b:4a:c7:04:18:7f:e9:2b:a3:17:a1:09:9d:97:22:84:
94:c6:82:dd:33:29:02:f9:9b:3b:4e:bb:0c:ba:b0:db:bc:fe:
83:27:4d:f8:e1:e7:e0:32:ac:81:27:25:a0:c9:54:36:c4:36:
e3:03:00:ab:f0:af:b1:b5:15:45:a7:5e:a3:86:da:c0:ec:d5:
be:0d:a7:87:32:79:3d:a6:9e:b5:b1:e1:04:c7:ab:7e:d7:ee:
a8:a0:75:a9:a3:c4:97:4a:46:17:68:8d:04:8d:83:5b:25:ca:
eb:bd:ff:b3:3a:06:ea:3f:1a:5d:73:ed:60:a3:ab:2a:ec:b3:
29:f5:77:40:2c:80:63:da:ec:3c:c9:24:06:18:9e:a3:20:cf:
95:d2:c8:a9:b8:61:90:b0:46:aa:e0:9a:44:ed:8f:49:cc:88:
df:ce:a6:a6:c4:09:56:36:09:6e:b7:af:ae:96:0f:c3:85:a8:
af:f8:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:17 2024 by rpki-client on console-fra.rpki-client.org