Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MuZSOavPwEBvhg2rzJ-n66weHyE.roa
File: MuZSOavPwEBvhg2rzJ-n66weHyE.roa (raw, json)
Hash identifier: D2lD9g8/hCcgAOnULOzDabqtUirEqKvIFROn2HMt6ek=
Subject key identifier: 32:E6:52:39:AB:CF:C0:40:6F:86:0D:AB:CC:9F:A7:EB:AC:1E:1F:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3845
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MuZSOavPwEBvhg2rzJ-n66weHyE.roa
Signing time: Wed 03 Apr 2024 14:52:19 +0000
ROA not before: Wed 03 Apr 2024 14:52:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14405 (0x3845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 14:52:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32E65239ABCFC0406F860DABCC9FA7EBAC1E1F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:36:bf:04:b7:0a:c7:6e:ce:85:75:0e:7e:
9d:e8:96:bf:63:ea:f7:ce:dd:2b:98:fc:26:20:1d:
4d:3b:73:ba:d4:a2:50:39:bd:f5:63:ce:9d:9d:03:
0b:50:91:4b:30:a4:84:0e:9c:79:35:0e:c3:62:3b:
f5:29:f0:13:02:be:78:60:79:4f:07:50:ff:81:b1:
73:e4:83:fc:6d:39:16:73:13:f9:9b:56:75:a3:ee:
9d:7c:29:65:32:e2:f1:2c:6c:99:0f:c6:3b:1c:85:
0f:8f:39:b6:27:c7:4d:d4:5e:70:bf:16:af:5f:ba:
b4:a2:b9:4e:49:3e:05:10:ac:b3:18:9d:78:3d:7b:
8d:88:45:42:10:1b:34:de:c0:96:be:10:4b:18:36:
85:c6:bf:8b:90:aa:b4:00:31:14:65:ce:ef:4d:75:
77:64:2d:ad:ee:ab:53:36:0a:f6:1e:51:27:38:68:
dd:39:41:48:4d:ff:51:f8:84:ec:c4:1f:1f:2c:8d:
ed:e6:60:b8:ba:f1:d8:0c:49:c7:29:5b:27:d7:14:
ad:27:6e:80:31:c2:9e:dd:bf:5e:88:ad:e2:e4:1d:
e0:55:45:fb:eb:3e:fa:5e:62:0a:d7:f2:f7:be:ca:
76:5d:18:11:bf:d8:3d:d7:26:c7:3c:d5:f9:21:88:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:52:39:AB:CF:C0:40:6F:86:0D:AB:CC:9F:A7:EB:AC:1E:1F:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MuZSOavPwEBvhg2rzJ-n66weHyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:c3:07:bd:a7:8a:55:55:0e:4f:85:46:bb:68:6c:f5:c2:72:
a7:b5:c7:58:6a:c8:9f:ba:2f:89:d4:fd:1a:e7:df:b5:f5:26:
f2:d1:03:0d:d5:5c:6b:cd:91:15:9d:90:e9:02:c4:df:8f:cd:
6a:f9:97:69:9b:63:cf:7f:ed:e8:6d:c3:d0:4a:3f:4e:31:49:
f6:2c:ef:e1:9a:98:24:24:4f:04:48:26:84:5d:d7:9b:64:27:
38:ed:80:d9:c0:bb:8e:7b:ce:89:7c:dc:49:41:a8:19:b3:8f:
b3:ea:e1:c0:1b:56:75:c3:f2:74:65:2f:63:56:02:14:31:b2:
9f:2c:a1:0e:fa:f5:f5:d1:0c:fc:93:68:9a:f7:b9:3e:39:38:
df:4b:3b:e2:d4:4b:ca:19:0b:0b:3a:f7:45:fd:d3:85:8a:04:
db:06:a0:9e:3a:5c:58:f8:90:09:89:e6:20:47:ad:73:3c:69:
a0:95:eb:72:cd:ed:ce:fb:81:12:07:a7:e2:02:a3:74:77:c5:
61:63:e9:e0:f0:a2:fc:d0:64:e7:91:f7:7c:54:34:ef:6d:a1:
1a:9b:3f:09:27:4b:08:87:e6:aa:98:1a:d9:20:f7:c1:e9:8a:
4f:a2:c9:e3:be:8a:24:03:b6:11:e8:48:6d:0a:86:82:09:d3:
41:c5:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:21 2024 by rpki-client on console-fra.rpki-client.org