Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LpOEcbGB7cULUdxyeFOV_dMgfFg.roa
File: LpOEcbGB7cULUdxyeFOV_dMgfFg.roa (raw, json)
Hash identifier: 9qeI+o9zLEiJaY6/WaAafL8DA9/jHjPViqzBknvgxmg=
Subject key identifier: 2E:93:84:71:B1:81:ED:C5:0B:51:DC:72:78:53:95:FD:D3:20:7C:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FD1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LpOEcbGB7cULUdxyeFOV_dMgfFg.roa
Signing time: Sat 13 Apr 2024 16:22:49 +0000
ROA not before: Sat 13 Apr 2024 16:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16337 (0x3fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 16:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2E938471B181EDC50B51DC72785395FDD3207C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:9b:1d:2b:ed:96:cf:1f:82:e6:fd:b8:ab:
0f:c1:6f:72:5f:c3:f7:fe:96:16:bc:82:d9:c7:ef:
06:b4:93:e7:97:06:df:b4:56:02:ad:11:7c:57:af:
c7:87:b9:ba:7d:33:ec:49:36:09:f5:bd:1a:38:e0:
a9:a7:e6:e2:ec:8c:04:13:ea:ae:05:bb:6d:8b:16:
96:7b:11:20:41:67:5b:00:d3:c9:8c:28:0d:e5:8a:
e8:5c:b9:e2:d5:0d:50:c4:ab:82:3c:8f:d0:55:a3:
d7:cb:98:65:b4:00:69:bf:fe:92:27:97:dd:44:0c:
2f:42:52:39:f9:e2:bb:50:db:92:19:23:d0:99:f0:
a3:15:94:1d:ef:da:a9:e5:a8:1b:c3:80:9f:cd:03:
44:ee:8a:cb:dc:15:b9:c9:3b:95:f6:5c:e4:10:6d:
ab:d1:7b:cb:2f:dc:79:fa:05:56:1b:79:22:be:fa:
7b:b8:94:0a:c8:9a:6e:9d:49:d7:9b:3e:a7:82:4e:
68:dc:0e:0a:fd:06:f7:d0:0d:16:ee:4c:64:fa:1f:
ea:ed:23:ef:45:93:b1:75:b9:67:d2:7f:84:9c:e9:
9d:25:74:46:f6:8d:7c:33:16:80:cf:75:9c:15:1f:
f4:a5:9b:08:92:4a:de:de:5e:28:bc:2c:42:75:f5:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:84:71:B1:81:ED:C5:0B:51:DC:72:78:53:95:FD:D3:20:7C:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LpOEcbGB7cULUdxyeFOV_dMgfFg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:8a:13:f4:82:e6:86:f0:09:e0:57:cd:69:1b:2e:c2:e4:57:
67:31:79:9f:57:50:53:51:01:f1:51:51:b6:5e:a7:71:b8:4d:
af:f1:5e:c8:9e:f9:a2:d1:4c:4b:8c:a5:81:9a:9b:e8:5c:cf:
3a:0e:3d:82:e8:2d:21:73:43:76:11:ab:9b:47:d9:8f:76:9c:
4d:64:98:b5:97:44:47:d2:6a:1f:98:8e:99:c7:8b:d1:1f:1e:
a2:53:22:6b:76:1c:c9:1c:41:5e:21:71:b3:b6:eb:13:3b:63:
06:cc:c8:ae:0f:5c:ec:4c:6d:12:b9:1e:4f:35:ce:a8:76:2c:
96:39:05:88:18:39:37:c7:a3:6a:24:f0:e8:cb:f5:04:4d:b5:
b4:a8:d8:77:4a:ee:06:c9:20:ee:51:72:cd:1a:81:81:58:a7:
06:f0:01:d7:5d:82:ed:b4:1e:6f:5f:0b:d9:b5:52:ed:cc:29:
64:a4:3e:0f:59:7e:b3:72:d3:fb:ec:30:2e:35:c9:9b:cc:25:
1e:99:83:8e:d0:33:34:43:b9:4b:08:60:12:bf:9d:33:6c:4e:
7f:7b:18:21:6f:51:84:22:63:5b:95:23:c0:e4:37:5c:d2:ec:
0f:65:04:2e:f4:7f:50:ad:bc:e7:83:49:b3:91:bf:ef:f3:a8:
0b:12:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org