Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MiR7QU3JYPFqKN5AS8JlFP81298.roa
File: MiR7QU3JYPFqKN5AS8JlFP81298.roa (raw, json)
Hash identifier: PzA6Uu4fFRpJYwhK/MBWkm8A667oYgtaV4Tix5jtLNs=
Subject key identifier: 32:24:7B:41:4D:C9:60:F1:6A:28:DE:40:4B:C2:65:14:FF:35:DB:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3439
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MiR7QU3JYPFqKN5AS8JlFP81298.roa
Signing time: Fri 29 Mar 2024 05:22:08 +0000
ROA not before: Fri 29 Mar 2024 05:22:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13369 (0x3439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 05:22:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32247B414DC960F16A28DE404BC26514FF35DBDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:c6:96:59:56:af:03:88:07:7c:21:7b:9d:
7e:20:aa:a8:5d:b2:81:06:d8:c2:df:f2:1e:be:ac:
2f:43:e4:ae:82:63:ba:d7:6b:c9:0d:79:63:c9:ec:
b5:69:f8:ad:f1:f6:9e:82:19:79:2d:2b:a2:a3:8a:
f1:bb:73:1b:9c:6c:a7:1d:c9:fc:80:f9:6e:5b:d0:
4c:35:c2:a0:b7:40:a9:4f:66:99:91:c2:0f:66:42:
c3:ff:65:cd:28:82:9d:a8:5c:87:b8:4c:b1:61:0c:
67:0c:6c:4f:63:e0:2a:4e:79:1c:65:4b:04:d5:8d:
f7:77:70:0d:6c:a3:53:d5:23:1c:44:e6:19:1e:2d:
85:61:88:48:b1:83:05:52:67:f7:36:44:92:e0:95:
32:8e:82:a6:e3:b8:15:63:06:83:25:07:63:a8:38:
e5:a1:4e:50:3d:2c:0f:3e:6f:dd:be:b2:c8:87:d0:
91:31:04:00:1a:38:57:0a:3e:00:49:a2:fc:f2:a4:
af:c6:23:8d:3c:75:ee:88:bf:40:c4:a6:82:22:dd:
70:4d:92:45:14:7f:16:36:88:ac:b2:f2:9e:b4:0c:
4c:84:ab:75:95:2c:d1:cf:ad:3f:4d:2c:02:bf:c5:
0e:e5:f2:7a:bb:9c:81:3d:0c:3f:8a:0c:4a:44:d7:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:7B:41:4D:C9:60:F1:6A:28:DE:40:4B:C2:65:14:FF:35:DB:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MiR7QU3JYPFqKN5AS8JlFP81298.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:58:7d:75:55:ce:c7:a1:d9:57:72:c9:0e:6b:aa:2f:aa:4f:
c0:1b:50:b1:85:ec:ac:9d:e2:d3:45:15:0e:b1:f8:df:3e:f4:
2d:8f:46:27:30:df:19:84:23:f8:8a:ba:4a:79:7c:23:96:46:
cf:8a:17:5c:7c:a9:f5:81:f2:33:9d:bb:3b:c1:e5:0b:48:d8:
d3:ec:85:f4:d9:30:65:05:3a:a3:cf:ba:e6:cb:a3:9b:c3:dd:
fb:25:bb:a4:88:f6:b9:f5:9c:5f:47:de:ee:38:b5:7e:0d:9f:
83:90:40:dd:9a:75:db:8e:fb:ab:c3:47:4d:14:a2:01:1e:bf:
1a:56:0a:92:90:88:9e:b6:aa:9a:03:f3:8f:66:61:81:01:fe:
7c:d3:2e:e0:2a:20:33:d2:df:24:9e:d9:6d:14:9a:08:92:39:
d6:9f:c3:d1:68:82:96:37:8b:23:f3:0a:2f:58:93:b2:bd:f4:
a3:3c:5e:76:36:d9:db:38:d5:7f:bf:45:62:42:3c:ac:e7:82:
68:fd:0c:16:62:b3:3a:8e:6c:58:85:fe:4f:50:d7:63:13:87:
15:bc:98:cc:ec:1f:97:d5:99:c5:65:a5:60:62:e1:6f:c9:e7:
48:a8:a6:52:09:16:22:96:8b:73:0f:a9:b8:af:11:b1:82:79:
e4:f9:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:34 2024 by rpki-client on console-ams.rpki-client.org