Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JKG_18voLJflHmuKObgWTJKUNMA.roa
File: JKG_18voLJflHmuKObgWTJKUNMA.roa (raw, json)
Hash identifier: xtRy/hjLWpKyJsSKG+DTvx0X36dope1Xj1yZcsofPmM=
Subject key identifier: 24:A1:BF:D7:CB:E8:2C:97:E5:1E:6B:8A:39:B8:16:4C:92:94:34:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4379
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JKG_18voLJflHmuKObgWTJKUNMA.roa
Signing time: Thu 18 Apr 2024 13:22:59 +0000
ROA not before: Thu 18 Apr 2024 13:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17273 (0x4379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 13:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24A1BFD7CBE82C97E51E6B8A39B8164C929434C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:62:aa:be:ca:db:4d:c3:18:9e:cc:d6:f6:
2f:c3:06:88:ff:42:b6:3e:41:fc:9e:6b:29:ce:24:
e3:1e:ad:75:b0:41:54:9d:2d:3d:84:35:b9:d4:d3:
81:ec:93:5c:8b:0a:e8:e6:58:60:75:f3:f9:21:0f:
ef:28:1b:cf:dc:74:8a:46:d7:f9:55:1b:4f:86:02:
2e:dd:82:80:d3:87:a5:58:62:42:54:34:3a:e3:94:
7d:56:f4:49:5c:17:9d:a1:28:9b:13:f7:05:d7:01:
e4:32:13:81:14:ae:35:c8:04:03:1e:09:7c:5c:ef:
99:9f:73:91:d6:95:60:ef:96:f7:4e:da:00:26:d8:
81:e5:f5:76:2f:42:6f:87:7d:c2:db:52:01:86:f4:
0f:bd:74:b5:9f:80:7a:8f:69:45:38:89:2c:f9:a6:
2e:97:a4:d0:dd:6e:64:da:03:25:07:8b:1a:f6:15:
f5:6c:5d:b8:a3:31:fb:8d:0b:e6:27:89:7e:d3:29:
1f:6c:37:2a:65:bd:fb:81:37:32:53:a6:48:a4:89:
59:07:22:31:75:5b:fc:89:8f:be:33:61:53:de:60:
cc:23:01:fc:84:38:a3:cc:7f:d7:ef:10:3e:57:77:
1c:b1:e4:1a:2c:4e:b5:61:a5:0d:c3:e1:be:f0:52:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:BF:D7:CB:E8:2C:97:E5:1E:6B:8A:39:B8:16:4C:92:94:34:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JKG_18voLJflHmuKObgWTJKUNMA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
89:c4:79:62:f5:d3:94:13:a0:79:83:e8:94:83:43:80:b1:f5:
6b:78:8e:ab:77:61:24:ea:40:8c:ad:5a:85:01:7b:68:f7:b9:
ca:87:fa:a8:4e:b1:a8:16:f6:b9:a9:d6:4e:2b:74:3e:6b:47:
3c:86:e9:ff:2b:fe:33:c2:25:fe:3f:b7:80:b6:76:59:6d:b2:
25:8b:20:55:e7:89:dc:d7:26:52:34:e9:d5:d1:2b:02:6a:b7:
9d:4a:60:47:22:68:e7:9d:3a:c2:32:03:fe:08:ca:c9:4f:0e:
36:33:49:74:d6:ec:02:16:a7:07:eb:f6:a8:80:f4:f0:c3:c2:
1d:da:29:45:22:ea:71:28:60:01:03:9c:8d:bd:83:2c:df:45:
d4:2a:7a:ea:6e:de:28:7f:dd:48:f8:00:d8:f4:7b:5c:a7:38:
a8:58:6d:29:bf:ba:dd:49:17:b7:94:bf:9c:78:1e:f0:b9:ba:
93:3c:06:98:1d:70:8a:6b:61:24:c7:7f:d8:d6:08:30:93:a4:
25:3c:db:cc:a0:fc:51:9b:d9:28:cf:55:ab:41:29:40:a8:9b:
72:ec:0d:32:f6:06:2f:d2:02:80:a0:f6:65:99:8f:f2:ec:ee:
93:5c:a9:87:e6:c7:66:a8:92:ba:78:5b:e0:c3:12:9d:d1:46:
b1:b3:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:18 2024 by rpki-client on console-fra.rpki-client.org