Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KE4oPxvpQ62C4syhGx1HKnl_934.roa
File: KE4oPxvpQ62C4syhGx1HKnl_934.roa (raw, json)
Hash identifier: CKU6BUawVyoPFl48cYsG30nveCwRnLRdiYKoWANEINQ=
Subject key identifier: 28:4E:28:3F:1B:E9:43:AD:82:E2:CC:A1:1B:1D:47:2A:79:7F:F7:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 32C9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KE4oPxvpQ62C4syhGx1HKnl_934.roa
Signing time: Wed 27 Mar 2024 07:28:09 +0000
ROA not before: Wed 27 Mar 2024 07:28:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13001 (0x32c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 07:28:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=284E283F1BE943AD82E2CCA11B1D472A797FF77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:e8:d6:c7:b1:15:f3:3b:2e:52:d5:04:e6:
c4:ef:2c:92:8a:64:66:31:2c:65:5f:a8:40:2e:5f:
80:21:1a:e8:b5:fa:6b:3f:cf:d1:b3:25:f7:93:03:
1f:41:87:c5:e5:25:87:50:1a:b7:1e:d4:59:4d:e2:
9d:31:00:31:03:1a:10:23:43:16:c4:ee:68:12:af:
39:0c:7f:e2:61:32:2c:2e:a6:16:9c:ac:3a:d6:c0:
f9:53:df:f2:3e:e0:e8:2b:d9:03:f6:83:93:6f:1f:
58:66:24:1d:8d:1f:cd:bf:cd:23:49:0c:8c:9b:5c:
b9:08:b4:85:11:79:e2:e3:2b:99:56:3d:65:88:e2:
01:9a:52:79:29:e8:9c:eb:10:3f:c4:ab:ac:0c:38:
ef:f6:25:d1:0d:27:0b:f0:e3:7c:49:e7:91:60:0b:
46:e5:f3:55:ce:01:4f:e9:fe:18:b6:a5:ec:ed:94:
1a:20:a8:24:c4:4f:05:bd:87:a6:cf:2c:3f:97:80:
98:68:c7:1f:da:ab:14:f4:28:4f:9d:ee:dd:66:96:
b8:62:13:6d:57:a7:dd:8b:37:c0:ca:92:93:cf:2a:
95:0b:d0:ff:63:42:dd:9b:93:4a:25:05:1b:25:83:
9c:0c:46:69:f1:77:d8:78:ca:87:a5:6e:44:5c:26:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:28:3F:1B:E9:43:AD:82:E2:CC:A1:1B:1D:47:2A:79:7F:F7:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KE4oPxvpQ62C4syhGx1HKnl_934.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
51:7f:77:e7:43:9e:c1:dc:8a:0c:ca:88:02:3f:ff:cc:bb:71:
99:0f:06:70:e3:6b:64:20:0c:46:8f:5c:5c:7a:84:ec:12:ef:
38:5e:99:02:b3:8a:93:fb:93:70:52:a0:05:7c:1f:c6:36:da:
3d:38:1d:9b:89:39:7f:23:83:d4:e8:ed:ba:30:fb:7d:da:05:
ec:3c:76:e3:c1:5e:e9:d1:5b:5d:04:95:75:fd:3c:6e:e7:3b:
85:23:e9:ec:7b:7d:5c:51:27:ad:34:d6:b5:d7:66:95:2c:f7:
4f:3c:72:10:67:1b:24:1e:7d:ed:7e:d9:88:ad:18:51:f2:1f:
7d:42:f6:e3:d8:c9:6e:d7:23:cc:34:83:65:ac:af:ee:e3:62:
84:4a:37:37:78:0f:c8:a0:7d:a9:4f:3b:4c:07:39:8a:05:05:
86:dd:64:18:45:b4:44:84:63:05:cd:d0:cc:9f:a0:ce:6c:68:
a8:9f:aa:2f:e2:5e:91:18:6d:2b:31:6f:60:a3:d9:69:ce:c2:
28:ad:d9:ee:13:6b:a3:cc:aa:94:cf:f6:d1:cf:55:7a:2f:70:
74:7c:41:c5:95:0e:9f:9e:28:29:bc:11:1b:79:de:7b:23:83:
3e:ad:0a:8f:aa:82:2c:af:57:23:ee:d7:a6:79:37:22:dd:96:
ff:3c:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org