Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OKQXdsGjMOSu299lKLmVh1kaJVQ.roa
File: OKQXdsGjMOSu299lKLmVh1kaJVQ.roa (raw, json)
Hash identifier: LQT8YoupAtph4WuMVTLs8LzLUKhwirxrbnGPJyyCZFM=
Subject key identifier: 38:A4:17:76:C1:A3:30:E4:AE:DB:DF:65:28:B9:95:87:59:1A:25:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57E5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OKQXdsGjMOSu299lKLmVh1kaJVQ.roa
Signing time: Wed 15 May 2024 18:54:22 +0000
ROA not before: Wed 15 May 2024 18:54:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22501 (0x57e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 18:54:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=38A41776C1A330E4AEDBDF6528B99587591A2554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:8b:d5:99:0c:8d:ee:fd:1e:f3:f9:4f:3b:
1d:88:6c:b9:0d:15:3a:0b:25:15:1b:05:06:ca:94:
04:c7:61:e1:69:92:ad:d0:a4:8d:16:68:68:b5:1f:
4d:74:85:79:3a:e4:7d:6d:fc:f5:8e:31:02:07:fe:
e2:c1:5a:a7:cc:59:53:20:7b:40:f3:0d:3f:cc:93:
96:5e:b0:a1:1d:22:83:33:84:d0:d1:4b:2b:dd:eb:
ef:35:7b:12:c2:1b:5f:5b:ba:6f:97:d2:31:ae:91:
2a:c8:1d:7f:9d:cc:5c:55:b0:bf:f1:19:5d:cf:83:
3f:bb:91:f9:b5:29:46:1c:ad:19:95:e9:7a:8d:fe:
88:53:15:68:ee:68:e5:48:3f:06:0e:d2:47:c2:b7:
57:4f:e3:0d:df:c2:8c:fc:b5:f8:9d:42:b7:08:6c:
fb:e2:8c:ee:7f:25:ec:0b:10:33:b4:3d:39:b4:f7:
39:6d:e7:8f:a0:27:78:03:73:bd:89:73:eb:ff:83:
10:a9:66:27:17:bc:06:4c:0f:27:2b:e2:14:09:7b:
7e:ea:3c:f7:23:44:36:8b:b4:89:ad:38:b7:80:a5:
20:73:9a:0d:a3:7b:2c:1a:fd:1b:eb:b8:57:8f:ae:
55:80:ee:62:9d:d4:34:45:b6:41:d3:a6:b1:5b:29:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:17:76:C1:A3:30:E4:AE:DB:DF:65:28:B9:95:87:59:1A:25:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OKQXdsGjMOSu299lKLmVh1kaJVQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:9b:77:06:78:52:84:56:7f:89:4f:50:bf:0f:bc:12:13:3c:
4e:80:0d:5d:f4:84:f1:36:2b:24:e5:64:0c:79:30:79:5f:28:
7d:2d:2f:a5:ea:04:a7:da:b8:19:4f:9c:aa:67:cb:c5:80:69:
a7:7b:7e:84:59:0b:bd:b4:0c:c2:18:83:70:df:ab:f9:aa:65:
c6:1c:45:b0:46:2b:55:77:7e:1c:ae:e1:ef:41:03:26:7b:01:
16:cf:37:89:97:4d:ac:0d:48:d3:ec:a3:98:73:fd:c1:bb:9b:
83:47:18:a0:5d:27:a3:66:46:e0:82:3b:99:86:43:7f:fa:27:
cb:32:ad:02:21:3f:54:d6:c5:a1:7e:44:9a:1e:a9:2a:33:b8:
bf:48:d8:34:f8:07:a3:de:b7:28:88:d0:1f:6d:2f:b2:c1:07:
9a:0d:d1:31:be:b7:ff:81:ba:2b:69:9d:23:93:f2:52:33:c6:
87:5b:60:74:23:be:e2:da:c5:85:e7:3c:cf:f4:32:28:fd:a5:
5d:96:84:93:e8:20:83:48:64:3f:05:31:08:4e:e4:43:6d:a1:
1f:48:30:53:80:fb:12:e0:27:9e:2d:58:1e:40:87:fc:6d:aa:
d0:42:e7:2e:cf:43:91:eb:19:ba:76:a5:83:35:09:fb:b4:ab:
75:38:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:03 2025 by rpki-client