Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OABM0QDWA5th4t5EiPkRY9Su7Xc.roa
File: OABM0QDWA5th4t5EiPkRY9Su7Xc.roa (raw, json)
Hash identifier: 7RUMsUjgEXZ3Yq7BdtTkI3W/yRFVbUJBKSFSkk8ElWc=
Subject key identifier: 38:00:4C:D1:00:D6:03:9B:61:E2:DE:44:88:F9:11:63:D4:AE:ED:77
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AC9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OABM0QDWA5th4t5EiPkRY9Su7Xc.roa
Signing time: Sat 06 Apr 2024 23:22:31 +0000
ROA not before: Sat 06 Apr 2024 23:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15049 (0x3ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 23:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=38004CD100D6039B61E2DE4488F91163D4AEED77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:16:27:67:34:25:56:51:93:62:2a:90:ce:
62:50:c0:6d:ea:2b:e0:8f:fe:13:19:61:e2:1f:ca:
d6:ca:8c:f2:d9:92:23:17:99:b7:2b:40:2d:94:d2:
02:f9:3c:ad:2b:c8:63:15:6f:29:d0:e8:f7:fd:5d:
ff:db:4d:b5:14:ee:02:55:9c:73:1f:20:f9:b0:51:
4c:cd:91:82:6c:de:27:8f:c0:ca:65:34:e5:b4:53:
e8:e4:72:96:4b:d0:65:07:4b:c2:36:8e:82:ff:b8:
aa:09:ae:a7:c0:69:b4:e9:7d:1a:0e:46:cf:25:c4:
8c:e2:31:2d:28:5e:ad:71:b9:59:65:60:bb:8b:f1:
ba:db:42:6e:c4:7f:5b:a5:f1:ef:9b:91:97:47:db:
01:60:72:d3:3c:29:24:c3:1e:a8:d0:b2:2e:bc:c9:
99:bd:1e:92:97:f6:81:1a:48:d6:8d:70:be:8e:a3:
6b:51:64:56:a3:a5:77:59:66:1b:69:e8:60:e5:4d:
22:d2:bf:2e:fe:e9:b5:3d:05:49:a7:bd:6a:ad:c9:
06:a2:08:69:bf:69:9a:76:e8:8a:bf:6e:3e:d9:4d:
03:20:d4:2d:66:6a:62:d5:78:91:8f:cd:b1:3c:4c:
b6:c5:3b:48:5b:eb:bd:a2:d6:42:76:18:48:29:fb:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:4C:D1:00:D6:03:9B:61:E2:DE:44:88:F9:11:63:D4:AE:ED:77
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OABM0QDWA5th4t5EiPkRY9Su7Xc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
78:ba:36:9d:29:74:45:2e:bd:ac:28:11:cc:97:99:d7:4d:10:
c1:e5:61:01:7e:59:e0:ce:57:0f:e7:7b:a3:8c:4f:e3:57:bc:
d7:26:48:47:2d:a6:1a:05:a9:73:e8:fa:d4:5f:62:b5:68:ed:
e2:7e:0a:bd:c5:ff:28:1a:ed:3d:62:a3:58:49:1f:97:86:d9:
5f:38:11:a8:a4:7f:f3:21:86:f7:8e:59:05:f6:a5:ae:0c:b1:
c7:45:d2:cf:98:86:c2:00:f5:00:04:86:a6:27:e5:f8:25:3d:
8b:88:84:65:6b:00:84:7b:93:00:dc:40:cb:f4:d3:36:f9:5b:
7e:7b:8b:26:4b:c1:57:98:43:36:09:c4:de:20:d6:8a:5b:2c:
2b:bb:84:cb:e5:f6:1d:a6:11:8b:ad:45:d5:68:4d:bf:ba:e1:
91:02:fb:51:46:01:01:e4:44:ac:2a:90:84:b4:ad:3b:3a:23:
e1:79:8d:bb:04:8a:cb:18:71:38:e8:40:b6:f9:a4:3d:93:b4:
ee:bb:98:1f:6f:fb:5a:d7:1b:d0:7d:dc:8b:bd:99:80:db:12:
23:68:11:1a:6f:03:4e:5c:1f:9f:92:c7:97:1b:45:e7:00:52:
e6:81:a6:9f:ee:26:73:17:3b:ad:20:eb:9b:1a:58:0d:35:94:
c9:fd:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org