Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M2moCFHg0y43g8BQTV4yU42YB5A.roa
File: M2moCFHg0y43g8BQTV4yU42YB5A.roa (raw, json)
Hash identifier: p6okK2z8xXC0GlcxpMDOhcAYsaizUO6Tqb+Nq4R1UJM=
Subject key identifier: 33:69:A8:08:51:E0:D3:2E:37:83:C0:50:4D:5E:32:53:8D:98:07:90
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C29
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M2moCFHg0y43g8BQTV4yU42YB5A.roa
Signing time: Mon 08 Apr 2024 19:22:37 +0000
ROA not before: Mon 08 Apr 2024 19:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15401 (0x3c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 19:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3369A80851E0D32E3783C0504D5E32538D980790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:d7:13:cf:87:ad:0b:05:2f:e2:83:77:88:
18:db:8c:d1:e9:23:7e:94:2e:43:31:e1:98:ac:ef:
96:2a:0e:28:16:cc:ca:4d:82:d9:c4:9e:37:98:33:
c3:d2:6a:23:11:c4:fd:90:73:01:d0:7e:7a:76:47:
2f:af:21:52:5a:df:9a:3c:61:38:fe:e3:02:fc:1a:
07:5a:87:ae:19:bb:73:ec:84:dc:0c:e1:bd:a3:fe:
e2:bc:ce:be:c7:5a:69:60:9b:ce:fe:12:d3:18:85:
5e:56:26:67:e9:c6:2f:db:7b:8f:e6:e3:5c:a8:3a:
60:7f:93:a9:1c:7d:25:0d:8c:e1:c9:5c:f8:fa:69:
1b:8e:35:a1:e7:94:59:a0:08:03:32:22:12:55:51:
71:cf:a7:23:f4:99:70:07:de:67:be:00:9a:df:69:
d5:58:63:2b:cf:4c:d9:e6:6f:ed:cf:28:28:c8:ea:
f5:8e:4d:a8:24:c3:f5:07:1e:76:3d:cd:65:6b:25:
92:c1:80:38:e7:79:ab:15:53:5a:71:2e:c3:c0:c6:
ff:f5:af:cc:2c:42:9b:ce:c4:71:17:82:30:60:fa:
69:23:22:c4:13:52:59:89:d7:83:0e:63:ae:fe:58:
ac:e5:3b:a4:13:b6:df:8f:d2:67:9a:01:c2:50:3c:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:A8:08:51:E0:D3:2E:37:83:C0:50:4D:5E:32:53:8D:98:07:90
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M2moCFHg0y43g8BQTV4yU42YB5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:80:6f:4d:8f:76:92:8f:0c:57:a0:84:e3:4c:b0:dd:8c:f7:
19:0e:09:d9:33:11:80:45:07:ed:ee:72:09:de:1f:37:37:92:
6c:d9:a6:1f:b3:f1:39:01:f4:34:f0:bb:46:63:9b:0e:34:26:
f3:76:7f:33:2b:52:8e:63:91:d9:22:2f:ba:71:43:1d:34:de:
2f:8e:e0:d4:a0:c0:63:48:f6:d0:53:bf:b5:39:87:91:b4:8f:
87:b5:da:ee:b4:81:b2:dc:68:ba:ef:be:71:6b:81:9d:59:c0:
c7:a2:f6:20:60:55:31:ee:83:c2:08:21:de:18:d3:22:72:39:
e9:f4:96:49:dc:38:73:ec:fa:e4:0d:4c:05:22:1d:d4:5d:d4:
06:29:6b:38:cb:1d:09:84:85:97:ca:7a:b0:a6:ff:cd:6e:75:
5b:fb:64:a9:85:85:56:a2:29:0d:08:6e:78:4e:45:d6:fa:39:
41:05:ca:10:5d:26:9b:f8:78:a2:fa:b8:cd:21:f2:1b:0d:30:
0a:85:35:ab:b9:e4:fe:e0:a5:69:8d:ee:08:bd:84:cb:35:d0:
48:12:5f:07:15:3b:11:bb:9e:47:ff:ac:18:93:30:9b:ed:00:
27:91:36:e8:cb:d7:33:30:56:92:cd:c9:fa:2f:80:17:cf:33:
d9:b3:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:25 2025 by rpki-client