Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Nhl8yqlyhawEySG9J8p0AnjnCsQ.roa
File: Nhl8yqlyhawEySG9J8p0AnjnCsQ.roa (raw, json)
Hash identifier: 2PPltPanbOgd7rRBh7tIB0zOGMM1hfVD2EuRjMPZAmo=
Subject key identifier: 36:19:7C:CA:A9:72:85:AC:04:C9:21:BD:27:CA:74:02:78:E7:0A:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57F5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nhl8yqlyhawEySG9J8p0AnjnCsQ.roa
Signing time: Wed 15 May 2024 20:54:14 +0000
ROA not before: Wed 15 May 2024 20:54:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22517 (0x57f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 20:54:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=36197CCAA97285AC04C921BD27CA740278E70AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:59:6b:ce:30:01:02:ff:99:4e:03:67:62:
c1:23:50:4e:5a:c9:68:6a:3a:75:5d:c2:26:eb:81:
f0:f0:03:47:b2:48:cf:2c:c3:f4:bf:27:29:b0:8e:
56:33:38:15:ae:5b:eb:01:c2:79:2f:17:ea:bd:b9:
25:e3:1b:67:2f:49:5b:69:d9:dc:aa:fd:c9:31:e1:
5d:94:ce:e9:cc:3a:84:63:23:8a:38:23:fe:d3:12:
a7:32:35:1b:50:15:21:c9:06:00:f0:ec:6d:0f:3d:
58:bd:7a:b8:75:6b:a1:a5:8e:da:8d:70:d6:13:85:
d6:6b:02:5c:9c:aa:ef:32:49:59:93:ee:c9:39:a4:
dc:55:bb:23:71:23:79:53:96:7a:3a:63:05:87:9d:
88:8d:62:79:db:24:8e:f0:08:05:52:03:5c:af:9e:
50:d4:f2:03:12:06:78:ca:9b:b7:20:5c:d8:d0:ee:
33:3d:6d:c9:7b:d2:dd:f6:5b:69:ba:a0:07:1c:d2:
0c:4d:31:2d:2f:95:1e:c2:4b:a4:55:b9:5c:2c:6e:
6f:08:df:d5:8e:75:55:19:f4:c4:e0:0f:7e:af:b5:
1a:d9:af:a2:18:26:1e:d7:1a:7f:74:fd:6c:88:60:
b4:0d:b6:3e:ab:83:ed:1f:81:cb:9d:dc:12:84:9f:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:7C:CA:A9:72:85:AC:04:C9:21:BD:27:CA:74:02:78:E7:0A:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nhl8yqlyhawEySG9J8p0AnjnCsQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:95:ce:51:23:f2:a4:55:72:2a:fe:33:6f:75:57:6f:1e:51:
32:41:2e:8f:35:00:de:9f:94:01:14:9a:51:d1:bf:e7:21:cb:
88:92:55:d5:60:86:74:80:cb:37:86:1e:8b:db:c4:3e:67:87:
dc:48:8e:15:54:49:bf:a6:7b:65:64:1c:41:6b:79:32:85:b7:
84:ef:43:95:72:23:2d:e5:6f:46:27:b5:0b:69:f5:3f:32:a9:
81:52:cf:74:ed:8e:59:98:70:48:a0:93:1c:61:de:e0:1f:a0:
97:59:3d:53:47:53:3a:11:0d:23:ed:b5:f4:7d:63:41:b4:08:
81:d8:81:ba:b0:97:71:24:81:bc:29:e7:9c:9e:3e:f2:58:58:
02:fe:df:0c:c1:65:43:79:1c:d6:e4:4e:80:11:b3:8e:0d:eb:
c1:f1:d3:24:3b:29:d3:33:9f:9c:2b:f1:32:38:51:a9:94:f6:
b7:a7:8a:9a:fc:01:1c:e0:ac:e6:5e:bb:58:80:83:fc:41:2e:
ed:82:0d:40:a9:db:47:10:c9:39:8d:5a:bf:06:48:b5:1f:5b:
c1:4b:49:25:10:07:b6:c6:3f:2e:9c:e9:46:53:ae:25:2e:02:
7a:27:75:d4:6d:49:a3:44:94:db:7c:e0:69:eb:0d:80:a7:ba:
a7:d0:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:17 2025 by rpki-client