Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/K85w9W_PucAiYQX6M2w38cmcoPc.roa
File: K85w9W_PucAiYQX6M2w38cmcoPc.roa (raw, json)
Hash identifier: V9gcOtZKnRGBMG7LCnG3VCa3Yb4ytQea5PPlNZn1jz4=
Subject key identifier: 2B:CE:70:F5:6F:CF:B9:C0:22:61:05:FA:33:6C:37:F1:C9:9C:A0:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51F5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K85w9W_PucAiYQX6M2w38cmcoPc.roa
Signing time: Tue 07 May 2024 20:54:10 +0000
ROA not before: Tue 07 May 2024 20:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20981 (0x51f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 20:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2BCE70F56FCFB9C0226105FA336C37F1C99CA0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:5a:66:5a:42:36:49:f3:51:bd:28:f2:8b:
72:4d:23:f2:0f:2d:fb:39:a5:c9:05:bd:b1:57:62:
cc:1a:69:33:08:f8:ad:08:26:db:9a:af:cc:01:97:
e9:a8:5f:ba:0f:d3:34:1a:80:99:a4:e8:56:ea:c1:
73:07:a2:bc:75:e7:9a:4c:38:ae:9a:db:d2:d3:34:
5f:7f:5b:58:7e:d3:7f:11:a1:81:b7:07:7e:fa:17:
e3:c5:1e:af:3d:8d:72:6a:ba:b6:09:07:1e:32:4a:
b3:a0:f8:8d:97:db:85:15:80:c2:fd:40:15:28:38:
4c:5a:07:8b:e5:0b:e2:f5:91:00:9f:32:89:01:4c:
cf:fb:9f:cc:0d:4a:aa:7a:f8:ed:37:d1:c6:d7:cf:
80:18:ac:59:f0:65:fe:f6:af:00:ba:41:62:a9:69:
a6:e8:0a:bd:06:9b:2d:50:73:84:46:0c:96:3b:a8:
d7:a4:91:d6:bb:27:5e:f0:9d:8c:e9:34:93:57:44:
f4:71:b3:7c:12:da:70:c7:45:8a:fd:ae:e6:8d:bc:
f0:c4:bc:8e:21:38:8b:5a:da:81:2e:5b:c4:09:30:
19:4d:d0:b4:e8:47:82:75:33:ae:32:9c:9c:4c:0b:
0d:bb:0e:b1:28:b9:ec:68:30:b6:a6:8e:e8:63:50:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:70:F5:6F:CF:B9:C0:22:61:05:FA:33:6C:37:F1:C9:9C:A0:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K85w9W_PucAiYQX6M2w38cmcoPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
06:83:bd:b7:c1:e3:d1:92:b7:4b:7e:bf:27:32:05:d0:5f:8b:
0b:a6:32:dc:45:69:72:c8:41:d4:87:f8:b9:c0:73:38:32:e8:
37:6e:a9:81:5f:eb:92:7f:46:a9:d0:f9:ba:81:5b:c5:c3:e2:
e3:13:0f:d6:8d:c9:26:17:84:c6:fc:8c:6c:fd:5c:fe:d5:cc:
f9:77:78:c1:45:c8:51:e6:04:2c:b3:3e:17:bb:01:4a:ea:12:
b9:2a:ba:e0:ca:66:9d:8d:80:98:03:4b:64:96:93:06:61:98:
46:f5:02:3c:94:40:39:c6:36:6b:ac:c5:0c:c1:05:33:b3:68:
24:26:96:b1:a7:32:62:77:11:80:ec:2c:49:b4:cd:23:a1:a6:
cd:72:e0:5e:89:7f:08:bc:2f:89:1e:d1:f7:da:76:aa:9a:34:
c2:08:79:70:52:cb:40:33:1d:68:b0:41:83:1c:c6:e2:ee:55:
bf:79:a8:a6:cf:1f:fe:2e:a2:e2:3d:2f:23:59:92:ab:12:a4:
e1:bd:cc:39:28:a6:e5:91:80:b7:21:7d:c5:24:a4:81:89:c8:
d3:29:89:f9:a0:af:11:6a:84:c2:ed:51:16:cc:8e:14:3e:b6:
60:50:ac:0d:5d:c5:25:84:fa:39:ee:12:79:42:3d:59:3f:56:
12:79:81:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:04 2025 by rpki-client