Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OCeLjEp829G9P7WHZkzr17Lsjvw.roa
File: OCeLjEp829G9P7WHZkzr17Lsjvw.roa (raw, json)
Hash identifier: KZHc2N+vbEiBFQYcY0uEEqJhUn9hnMSeP4PTVaoeAV4=
Subject key identifier: 38:27:8B:8C:4A:7C:DB:D1:BD:3F:B5:87:66:4C:EB:D7:B2:EC:8E:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55BD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OCeLjEp829G9P7WHZkzr17Lsjvw.roa
Signing time: Sun 12 May 2024 21:54:12 +0000
ROA not before: Sun 12 May 2024 21:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21949 (0x55bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 21:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=38278B8C4A7CDBD1BD3FB587664CEBD7B2EC8EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:35:02:90:46:b4:60:a9:a2:da:96:53:87:
ec:20:68:d7:52:a1:dc:e0:e3:71:81:f3:77:64:00:
7a:57:84:6e:63:99:07:0b:c6:21:f8:21:15:d3:36:
c7:29:dd:54:bc:32:97:5c:f0:ff:f6:42:c4:69:3d:
ab:d0:12:9e:ae:94:6a:82:e3:95:d7:2c:43:54:43:
d3:f5:a4:24:c4:0a:6c:7b:41:90:e8:da:34:e0:95:
3c:73:4f:b5:82:67:99:da:10:ff:3c:92:5b:3d:54:
3f:27:38:99:19:26:bb:c2:2c:c2:a8:07:74:d3:51:
a4:49:db:97:0c:67:b9:d7:b6:60:dc:db:22:cf:a0:
68:11:0a:11:40:6d:f7:55:99:2f:a8:82:94:29:f2:
77:c4:19:0a:2a:5e:5e:b3:55:a3:f2:e4:74:aa:3d:
64:b0:e3:7d:b1:07:99:2a:2b:6b:44:e8:2a:6e:d7:
d3:c1:a6:7b:4b:76:97:60:22:0f:6a:33:80:e1:b7:
e9:bb:cf:ff:06:e2:a0:25:5e:17:99:eb:c1:5f:4c:
40:a6:54:33:63:9e:3e:80:8f:75:15:1f:36:d7:48:
24:4d:4c:1d:df:2f:ed:c6:d8:ed:34:28:3f:01:a3:
0b:04:5a:16:d4:57:a2:8c:16:b9:31:b3:fd:39:6d:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:8B:8C:4A:7C:DB:D1:BD:3F:B5:87:66:4C:EB:D7:B2:EC:8E:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OCeLjEp829G9P7WHZkzr17Lsjvw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
16:34:f0:3a:db:d4:0b:16:e3:ec:8b:e2:23:e4:ea:72:d7:c8:
75:b8:cf:da:a8:d9:f2:d7:e9:af:e7:ba:4f:6e:b9:9e:92:cc:
8b:13:3f:a0:d5:ae:3b:6e:29:43:e6:7d:ae:71:04:bb:a1:7e:
5f:a3:10:1d:d2:10:7e:62:8f:03:43:6e:2f:80:81:5f:b0:ae:
c5:e4:66:48:52:08:ec:14:59:5f:e5:1f:4f:66:8f:39:cd:3a:
2f:67:71:e3:e3:96:4d:62:0f:3d:83:3e:c4:bf:7b:e5:88:50:
87:34:5f:f3:a9:be:96:33:98:df:a1:3c:a6:d0:85:c9:72:94:
fc:5f:c7:de:a6:fc:82:6f:62:04:7c:ed:eb:82:00:31:9b:a4:
db:a0:ff:8b:84:ea:10:f0:8a:b6:da:83:6b:48:55:8d:6e:88:
a2:a0:5a:91:38:5d:40:2d:35:ba:07:58:e9:83:63:c9:0e:ca:
28:9a:32:5d:01:44:64:8f:42:d3:d6:aa:0f:ef:45:6d:64:e5:
96:48:1c:2b:0a:f9:4a:11:55:68:ce:55:d7:1c:50:8b:1e:de:
fa:d1:a7:81:0a:c0:19:ba:fe:c9:e0:f0:de:bd:45:da:94:9b:
1f:cf:4b:4d:67:a5:85:74:8c:b2:87:70:3d:92:92:a7:ce:bb:
25:69:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:36 2024 by rpki-client on console-ams.rpki-client.org