Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OFXP_nK9O-uZp_1sq0_nhfl748Q.roa
File: OFXP_nK9O-uZp_1sq0_nhfl748Q.roa (raw, json)
Hash identifier: U10axYExJgRQQkVe5TuqU1WA55701eTgNxK+WR3rV3E=
Subject key identifier: 38:55:CF:FE:72:BD:3B:EB:99:A7:FD:6C:AB:4F:E7:85:F9:7B:E3:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42FD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OFXP_nK9O-uZp_1sq0_nhfl748Q.roa
Signing time: Wed 17 Apr 2024 21:53:00 +0000
ROA not before: Wed 17 Apr 2024 21:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17149 (0x42fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 21:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3855CFFE72BD3BEB99A7FD6CAB4FE785F97BE3C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:47:81:fb:9e:95:d6:d4:e0:7b:9b:e5:ed:
46:27:cc:1e:36:b2:f9:81:36:93:33:a1:1a:9a:c3:
78:45:80:82:8a:c2:a8:eb:f3:0a:c7:ba:4e:3f:30:
29:c6:87:fa:0b:61:07:6e:5d:7a:4a:89:8c:ac:ac:
bf:db:33:4a:d2:ee:aa:c2:7b:eb:26:88:e2:89:9e:
92:e7:ae:b5:b8:38:7d:6b:7a:09:6f:ab:b7:b2:b3:
a8:f7:b7:3b:1c:94:62:e0:bc:91:f9:6d:2d:c4:ea:
2b:35:ac:1f:94:b1:65:08:97:e5:c5:39:bc:72:8c:
01:43:a0:77:dd:68:10:41:e8:59:a2:21:8c:80:b2:
75:35:17:05:73:01:ad:96:a1:ca:8d:75:50:7a:41:
c9:5a:32:1f:57:e8:0b:3e:c3:7e:26:c7:10:ae:15:
bc:e5:dd:f6:7b:1b:e6:30:be:72:40:df:04:85:92:
2a:77:a4:20:15:fa:ce:b5:38:06:cf:a2:6b:a1:1d:
28:82:e6:08:41:bc:42:3c:3a:a8:6c:c0:31:c9:f0:
4b:d7:92:3c:63:23:b2:35:52:dd:53:90:a4:fc:88:
67:7d:48:da:77:a6:db:e1:41:0d:2d:46:0b:22:c9:
b0:e3:5b:0c:1a:3a:1a:0e:f9:f9:3d:b5:1d:0c:73:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:CF:FE:72:BD:3B:EB:99:A7:FD:6C:AB:4F:E7:85:F9:7B:E3:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OFXP_nK9O-uZp_1sq0_nhfl748Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
11:b5:67:97:34:4f:70:ff:46:3b:55:ae:0f:30:3e:02:39:b2:
a0:53:ba:03:df:df:e0:4c:f9:26:1f:32:86:60:78:39:b2:56:
ab:0d:9f:d8:b2:d0:c1:e7:30:25:b3:e8:fc:ab:c0:3a:2a:ff:
d0:f8:f2:24:78:d9:1d:62:a5:e7:e4:ce:54:ff:38:53:5f:53:
24:2d:78:6c:54:1f:d2:df:60:ba:0f:e7:4c:d7:e3:02:04:53:
c4:9a:24:ef:4c:fc:3e:2e:be:c0:e8:bf:80:29:29:0d:15:bb:
e1:49:8c:a2:1c:58:2e:94:c7:76:af:a6:43:d8:b2:89:bc:50:
c9:cd:90:e5:69:47:d4:6f:21:54:e8:e0:01:e1:6d:8e:97:f1:
60:2d:9e:3e:53:c9:d9:9f:0c:d9:8a:f0:60:eb:7a:43:bb:83:
f9:3e:b5:31:5b:fb:5a:24:55:86:ac:1d:5b:78:ad:b3:93:68:
ed:80:55:36:f7:5c:81:35:89:91:78:6c:71:df:86:12:53:5f:
74:a2:11:2e:f6:6a:c7:5e:18:84:95:c5:06:7d:ff:b2:32:38:
73:45:f2:e6:5c:80:47:e8:b8:a6:c1:10:27:fb:c7:3a:a1:c1:
c1:6f:cb:2f:27:41:53:73:ee:a0:88:57:34:0b:1c:14:c1:4d:
bc:5c:fc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org