Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QcnV9aZJsINNsyZ8rqvRZ7Nsxbc.roa
File: QcnV9aZJsINNsyZ8rqvRZ7Nsxbc.roa (raw, json)
Hash identifier: lq1qAbgHDKW/gZd1ir30W09Pks+5ltsTH/0q3KBXiYE=
Subject key identifier: 41:C9:D5:F5:A6:49:B0:83:4D:B3:26:7C:AE:AB:D1:67:B3:6C:C5:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43E9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QcnV9aZJsINNsyZ8rqvRZ7Nsxbc.roa
Signing time: Fri 19 Apr 2024 03:23:00 +0000
ROA not before: Fri 19 Apr 2024 03:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17385 (0x43e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 03:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=41C9D5F5A649B0834DB3267CAEABD167B36CC5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:a5:1f:51:bc:32:87:d6:b5:9d:53:12:53:
57:6e:71:8c:d2:63:f9:81:c5:c9:a5:98:90:8a:73:
c0:89:bb:ac:64:22:dd:52:10:19:89:d0:44:c6:e0:
cd:6f:5c:10:2b:78:25:ad:79:4e:cb:64:e5:a1:a9:
41:4d:08:0a:60:f0:4d:b4:9b:6b:db:31:19:77:00:
83:65:dd:29:0d:53:02:42:a7:37:5a:24:64:58:aa:
a0:30:26:f5:6a:54:1e:1f:7e:c9:6e:4b:06:d9:70:
84:f2:0b:44:94:c7:4c:c9:f0:7f:1f:ae:df:2c:b7:
70:cc:04:56:85:f9:29:40:27:d2:4a:81:0b:c3:15:
e7:83:5a:88:ae:60:a6:cb:f1:74:6b:f9:08:b0:f1:
62:c6:92:8a:21:01:5e:32:bf:4f:40:ae:db:af:bf:
8d:4a:92:a0:05:d6:c1:89:c1:2d:60:a6:7f:e1:e7:
2b:61:5f:19:d1:f0:04:cc:32:e3:cb:df:c7:c1:c5:
78:31:b0:16:bd:4e:a0:34:bb:ec:91:d3:b4:82:e3:
08:b2:91:fa:d7:e6:a1:b3:37:a3:91:fc:3c:f6:66:
ac:ff:f0:2e:36:67:a4:d7:ee:df:3c:70:a5:28:bc:
2c:f6:84:64:da:03:9b:c1:0a:d5:96:51:f4:08:80:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C9:D5:F5:A6:49:B0:83:4D:B3:26:7C:AE:AB:D1:67:B3:6C:C5:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QcnV9aZJsINNsyZ8rqvRZ7Nsxbc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:35:73:82:b1:ca:47:26:f0:61:a9:7a:fc:56:cd:fa:15:19:
fa:1b:f4:5f:a9:44:8d:fa:87:13:6a:32:a2:eb:3d:bb:d3:d1:
e9:40:d0:c3:30:07:11:43:1c:2c:66:28:13:ea:ca:e5:73:47:
b9:7d:9a:94:66:d2:51:0e:f0:2b:ea:77:88:b8:09:ee:c4:e1:
27:dd:ac:7d:6a:e8:76:33:9d:81:1d:1b:cc:9a:cd:b5:67:da:
bc:8e:a6:9e:16:c7:bd:af:97:27:c4:3e:15:b0:e9:49:5f:db:
43:12:c4:ce:89:9f:06:7c:33:3a:f6:4a:72:a2:7a:5d:a6:37:
84:4b:87:df:b3:46:2c:c2:4c:17:c6:c8:8b:99:00:dd:2d:ca:
78:79:22:dd:99:f3:e4:fb:1c:fa:3c:57:5d:67:ea:60:8d:f4:
43:f9:9a:f3:e0:c9:44:7c:1c:a3:0e:43:54:d5:0b:ea:d6:a1:
df:1b:80:89:08:9b:27:07:28:0c:77:c5:1a:0d:ae:cd:e4:ff:
bf:12:84:30:50:3d:85:3d:e7:e1:fb:7e:4b:e5:d5:86:c5:72:
93:72:65:5a:ca:46:2d:7b:20:e0:f4:3f:fc:19:e6:f9:e3:9e:
92:45:ae:71:4d:3d:a9:37:ef:6c:e9:10:96:a2:ba:10:ad:d2:
09:d2:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org