Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/I_DR7eIh8RU754u75_F6IvCe82k.roa
File: I_DR7eIh8RU754u75_F6IvCe82k.roa (raw, json)
Hash identifier: x2pQuf8zWM/lChxB6o3WkaFKwx+HBtdN9LIhZJgIGo0=
Subject key identifier: 23:F0:D1:ED:E2:21:F1:15:3B:E7:8B:BB:E7:F1:7A:22:F0:9E:F3:69
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E7D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I_DR7eIh8RU754u75_F6IvCe82k.roa
Signing time: Thu 11 Apr 2024 21:52:48 +0000
ROA not before: Thu 11 Apr 2024 21:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15997 (0x3e7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 21:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=23F0D1EDE221F1153BE78BBBE7F17A22F09EF369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:85:49:42:fc:ad:cf:53:38:d3:56:c6:0e:
c8:1f:63:2a:bf:3d:30:79:6d:1f:34:c1:07:75:eb:
46:39:d9:33:37:f9:5a:38:c7:a3:67:2a:29:ef:e7:
74:09:eb:ea:2a:db:d1:cf:aa:20:7d:8a:2a:93:c3:
35:93:8d:87:22:85:47:be:f9:ef:c1:6a:38:b7:c0:
90:95:bf:85:29:d9:cf:86:6e:80:0e:3f:3d:d6:d4:
e4:de:77:8c:47:b6:5a:88:6f:a1:67:68:e7:dc:a0:
c9:3e:72:ea:bd:97:3f:9a:58:33:4a:58:05:63:a0:
bb:2f:47:12:ee:13:f5:14:be:6e:4c:cf:6f:3f:6b:
59:18:d5:f6:92:1a:81:01:e6:9a:48:f1:6a:ad:dd:
95:2b:ec:b7:9b:89:32:3a:e3:04:79:1a:17:07:12:
74:9e:db:ba:8f:0a:39:6b:4a:c1:c5:1e:a1:33:7f:
be:a2:af:1b:ce:39:a9:79:a0:9b:09:6d:7e:d3:8b:
bb:b1:16:35:3a:62:78:6b:a2:55:5d:b8:1b:a9:e3:
93:3b:68:26:6c:ea:34:89:7a:43:d2:20:19:cc:0d:
a8:3c:a7:39:06:0b:d7:f2:df:0a:ee:5f:7e:73:22:
3b:1e:5f:4a:05:83:88:f9:7d:39:37:ad:11:4d:71:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:D1:ED:E2:21:F1:15:3B:E7:8B:BB:E7:F1:7A:22:F0:9E:F3:69
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I_DR7eIh8RU754u75_F6IvCe82k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
19:bc:01:34:dc:ff:99:77:12:ac:36:6b:d3:80:77:7e:75:66:
02:24:03:62:8c:2a:38:bf:a6:86:11:4b:1a:11:2a:f5:4a:7d:
bc:7a:32:74:4c:b4:45:af:dc:f2:9a:cb:4d:4f:1f:fb:48:4c:
1a:b7:5f:89:88:f6:6c:6a:cf:44:fa:b2:da:be:e6:2f:5e:24:
c1:49:04:91:da:c4:1f:bf:85:f2:6f:c5:00:4f:5c:d6:d1:6a:
94:e8:43:81:57:33:d3:ac:e5:55:66:c0:0c:6b:29:a4:97:62:
ba:a7:d2:79:ee:63:0c:68:65:6d:e8:41:d1:28:69:3d:f9:2d:
8b:f9:b4:2e:6d:a6:8d:b9:56:f8:c8:63:66:3f:18:ac:5f:ce:
1e:10:bf:9f:f7:2a:35:56:f1:45:a5:28:3a:19:e9:cb:cd:3f:
49:ce:25:9e:2d:2f:56:6d:8e:6e:43:01:07:c2:e4:4a:b7:2d:
bd:c5:e4:ed:29:a2:ac:9f:b9:9f:82:c7:c4:d6:00:dd:ee:f7:
6e:92:72:5f:76:fc:80:9b:bb:f6:8f:f2:40:42:37:26:69:6f:
ba:39:fc:c4:b7:c6:5d:3b:84:c3:24:5a:f2:55:46:ea:40:4f:
46:ff:3a:e6:d6:f0:4f:01:d4:1f:8a:c8:5b:bc:1c:71:0f:97:
ff:0f:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org