Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LJT_sFTW9-r_9DRZf_A3lkTWD_U.roa
File: LJT_sFTW9-r_9DRZf_A3lkTWD_U.roa (raw, json)
Hash identifier: 76v1WMCHo2DfJMDJ+ba6fZ4QJpZD7uhay25khIwGQNw=
Subject key identifier: 2C:94:FF:B0:54:D6:F7:EA:FF:F4:34:59:7F:F0:37:96:44:D6:0F:F5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39CD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LJT_sFTW9-r_9DRZf_A3lkTWD_U.roa
Signing time: Fri 05 Apr 2024 15:52:28 +0000
ROA not before: Fri 05 Apr 2024 15:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14797 (0x39cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 15:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2C94FFB054D6F7EAFFF434597FF0379644D60FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:aa:b6:03:59:5e:d7:63:ec:26:cb:9a:81:
f5:2f:4d:a7:de:e5:25:a3:0a:18:59:c6:cf:7d:4d:
c2:d2:65:54:46:a5:d9:38:ff:09:ef:d4:c7:ca:74:
15:26:ce:7a:92:c0:d6:34:bf:e3:4b:14:24:e5:18:
ce:3a:10:a4:57:4b:fc:85:6f:26:b7:d1:75:6e:58:
51:bd:1a:ae:94:2d:b8:90:51:6a:a7:43:38:cd:a9:
d7:e7:f4:f2:8b:32:f9:4b:7a:9e:73:6a:0d:28:14:
bd:4b:9e:6a:36:27:b5:08:b6:11:19:be:bd:3c:b8:
cb:3c:c4:19:26:23:46:d7:0a:3d:25:ee:43:15:3d:
90:66:80:25:12:8a:5b:2a:e4:45:6d:db:ef:c1:40:
71:55:95:3d:2d:39:28:85:ca:05:ca:e9:2d:db:41:
07:f0:ce:fe:28:40:6c:92:a0:53:7e:6a:89:a5:03:
15:9c:97:e6:d7:45:29:0d:b1:bb:8a:12:57:95:2e:
43:d3:bd:5f:2d:60:65:24:32:a9:69:c2:31:f2:e4:
d1:62:b2:a7:3a:33:ac:a6:37:83:57:a5:cd:94:cc:
cc:f6:87:78:a8:47:82:62:82:e0:2c:52:1b:a4:64:
65:8e:6d:8a:d3:e2:ad:cc:fc:44:49:75:d6:98:3a:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:94:FF:B0:54:D6:F7:EA:FF:F4:34:59:7F:F0:37:96:44:D6:0F:F5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LJT_sFTW9-r_9DRZf_A3lkTWD_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:a9:e4:ab:b3:9c:54:8d:2e:9a:f4:b5:d9:28:71:9e:97:80:
bb:b0:6f:46:40:db:a1:75:19:fb:4b:9b:c5:f7:db:d2:1d:a0:
36:97:22:af:71:b7:a5:eb:1a:0b:b6:9b:fe:3d:74:fb:3b:f1:
ce:0a:16:4b:d1:20:7e:89:22:c9:30:49:0e:6c:00:c6:bd:91:
5b:6d:4d:d3:63:8e:14:a7:ce:69:06:d1:a7:35:d5:42:f2:78:
df:82:bb:f3:b6:8c:05:49:da:aa:cf:02:d5:64:69:c2:b4:58:
5b:f9:f1:47:59:03:7c:dd:8b:91:a7:43:1d:ad:0c:a0:47:ae:
63:09:58:e5:c7:5d:d4:0d:e4:25:f1:66:0d:75:9a:04:9b:6a:
db:35:54:6b:e4:d1:63:57:dc:ed:12:57:ec:1e:51:e0:5d:20:
c0:32:ca:cf:3c:0e:15:98:f1:e5:3e:5a:c7:1d:ed:d2:a4:06:
11:2e:6d:ee:8a:36:1f:43:2d:a4:72:ad:2b:29:3a:d1:99:35:
3f:c7:62:b5:f1:48:bd:a9:c8:68:ba:5d:aa:4c:f2:d7:59:31:
c1:fc:1b:98:0d:06:d3:6f:4d:e3:d1:57:da:20:f8:ac:74:88:
f6:76:62:ca:b3:45:5d:9d:b0:09:00:07:2f:7d:31:5d:7f:0e:
4b:da:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org