Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JLKDK73UiTj3cUqR6fHdVd6lvyU.roa
File: JLKDK73UiTj3cUqR6fHdVd6lvyU.roa (raw, json)
Hash identifier: kc5NqrFKw4f4FdyzaIyEBrvNgqkKkxP9W9qM0PP3Y8A=
Subject key identifier: 24:B2:83:2B:BD:D4:89:38:F7:71:4A:91:E9:F1:DD:55:DE:A5:BF:25
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B59
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JLKDK73UiTj3cUqR6fHdVd6lvyU.roa
Signing time: Sun 07 Apr 2024 17:22:35 +0000
ROA not before: Sun 07 Apr 2024 17:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15193 (0x3b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 17:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24B2832BBDD48938F7714A91E9F1DD55DEA5BF25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:8f:57:df:18:49:d6:ef:a4:af:56:74:7d:
b0:37:c1:c7:c8:41:a7:e4:70:51:e3:95:c5:95:35:
db:c6:21:c0:6b:a0:29:cc:52:ec:fa:44:ec:a6:e0:
8e:bd:ba:26:30:d5:90:f7:11:58:79:2e:10:78:f6:
38:17:fb:8f:bb:5d:55:0d:7b:e6:81:33:3b:33:95:
fd:59:13:39:10:4d:94:02:70:49:4e:59:55:f6:e5:
89:04:0b:e3:6b:a1:e5:ec:24:8a:ed:16:3f:6b:2e:
59:a8:f3:ef:ee:86:9e:63:f6:bc:1a:57:d7:22:7e:
e7:a5:28:3f:6c:e3:55:a5:19:55:7f:a1:eb:6b:60:
3a:cb:97:dc:72:81:4e:bf:e5:4e:dc:23:f0:35:90:
ca:ec:e4:c5:33:fa:54:f0:44:8a:fa:a8:ed:ec:f3:
aa:eb:ee:1c:98:da:b5:ee:f9:16:58:2a:d8:d3:a1:
b4:d1:6f:c0:24:55:47:53:52:66:9d:08:88:2d:21:
b4:4e:de:bf:d1:7b:84:22:d8:c2:9b:d1:eb:e0:fe:
98:ec:d4:a5:50:19:cf:a2:3f:69:a9:36:7f:94:a5:
02:4a:b7:b1:97:65:57:a0:14:41:4c:5b:e3:a6:76:
66:d8:d4:8f:5b:bc:29:3a:7a:96:85:e6:50:54:59:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:83:2B:BD:D4:89:38:F7:71:4A:91:E9:F1:DD:55:DE:A5:BF:25
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JLKDK73UiTj3cUqR6fHdVd6lvyU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:35:48:d1:68:69:61:7d:cf:a4:ec:56:ab:d6:fb:b7:db:c4:
21:16:eb:38:6c:04:4e:b1:a7:53:1b:c3:01:13:e5:d6:9a:eb:
4c:7a:a8:10:8b:aa:50:e8:be:5b:cc:db:2b:96:8c:d8:22:13:
8c:e2:0d:65:95:bb:60:46:ec:58:bb:8b:ee:9b:0d:50:6b:50:
f7:c5:e1:85:75:fd:19:a3:96:fb:bd:09:68:2e:88:b4:02:5e:
83:ca:f1:cd:b4:34:2c:48:3e:03:6d:58:fd:bc:bf:c0:47:d7:
1e:15:61:23:63:67:28:29:b9:65:45:05:12:29:e6:aa:6e:e8:
e9:48:23:72:e3:cd:9d:4b:d6:d9:c4:a8:a9:f5:99:2e:eb:59:
77:ec:47:b5:26:c2:35:cb:d2:50:2f:99:21:64:41:28:b2:ff:
01:d8:7d:bd:df:1d:bc:c8:51:3d:cd:6f:03:26:19:34:d2:97:
2a:f9:d8:6d:92:a7:fa:33:e8:76:0f:80:38:77:4c:9f:e1:f4:
9b:bd:e0:24:e4:52:30:14:45:cf:79:2c:cd:29:7b:d7:4e:70:
8a:3c:fa:3f:89:4c:21:a1:90:37:28:06:f4:9a:72:1c:9a:65:
44:97:10:a5:75:42:f7:f1:35:f6:7b:14:c8:8a:dc:f9:10:fd:
7b:1b:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:32 2025 by rpki-client