Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDdJyct_-ZL3V8E4raPRdqzN54.roa
File: RCDdJyct_-ZL3V8E4raPRdqzN54.roa (raw, json)
Hash identifier: JrUknch/JwnvxUnILKSaqDOLnA2dgHyOY4hSMwwVoF8=
Subject key identifier: 44:20:DD:27:27:2D:FF:E6:4B:DD:5F:04:E2:B6:8F:45:DA:B3:37:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 449D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDdJyct_-ZL3V8E4raPRdqzN54.roa
Signing time: Sat 20 Apr 2024 01:53:08 +0000
ROA not before: Sat 20 Apr 2024 01:53:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17565 (0x449d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 01:53:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4420DD27272DFFE64BDD5F04E2B68F45DAB3379E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:3a:7e:d9:57:52:ed:af:e8:1e:a7:04:ea:
46:0f:fd:b2:23:1a:1f:11:c0:c2:4e:8a:03:de:cd:
78:e0:a2:6f:9d:f7:25:ad:45:08:a3:34:88:40:9f:
83:a8:be:5a:30:f8:81:7e:75:b8:b3:88:11:98:5d:
41:5c:e4:cc:b3:b5:96:5a:d4:18:a4:9a:3a:b2:33:
92:f1:b2:f2:66:ae:cd:b7:cc:da:10:08:34:72:1e:
a2:17:0d:fb:93:60:ba:22:0b:64:80:aa:ac:de:7b:
0d:b9:9f:f2:3e:36:9f:56:62:a7:4a:cd:bf:34:ee:
46:35:a4:97:7e:1c:ae:1f:92:1b:ec:6f:96:19:11:
dd:df:0a:95:32:df:57:27:1d:9a:6d:5c:8e:67:1b:
33:08:f2:87:5a:09:b8:ee:8a:44:6a:bd:fd:12:79:
34:2a:bf:f9:b6:9f:52:42:76:40:e8:c6:5f:81:67:
b2:1c:cb:90:96:c8:fe:c9:3e:4f:1b:38:3e:e2:48:
f3:f9:54:17:9c:cb:c4:7b:11:d4:42:f3:3f:eb:ca:
0a:11:3f:d9:31:d2:d1:df:59:23:01:c7:22:f7:b2:
af:34:71:ed:92:8a:e5:16:17:0d:a1:08:48:f7:70:
48:d6:91:f9:f7:64:50:ee:5f:23:be:92:8d:76:70:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:DD:27:27:2D:FF:E6:4B:DD:5F:04:E2:B6:8F:45:DA:B3:37:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDdJyct_-ZL3V8E4raPRdqzN54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:db:d3:d3:5b:a6:b8:30:71:7b:20:b7:93:20:c4:0b:27:6c:
77:53:2e:c6:35:9f:a0:79:63:a4:05:30:2a:bf:e5:1f:85:26:
ec:7a:32:f1:4e:db:de:a8:0b:71:6f:45:29:d1:45:c9:74:90:
89:2f:c3:be:61:73:61:1b:1d:c1:4d:de:b8:1a:c3:97:cb:40:
a2:1a:dd:e2:6e:6c:71:69:38:22:47:b0:b0:0e:6d:bf:39:18:
92:1d:66:c8:ce:32:b9:a1:29:0a:52:7f:33:68:74:a0:34:8f:
74:72:f6:99:d3:ec:b6:d3:8e:c3:cd:b5:d6:2d:52:01:59:63:
07:85:c8:c1:78:79:13:da:49:24:08:4c:71:a9:5a:8b:88:6d:
61:8b:68:44:49:57:bc:91:a9:6a:23:9b:bc:e4:4a:8a:ba:ae:
76:bc:e6:c9:71:94:2c:6c:48:9e:2c:a4:3d:87:d1:f9:b5:4c:
d5:f3:bf:6e:df:c4:a5:13:c9:08:ad:7c:4a:6f:dc:cb:11:6c:
ef:6a:b5:12:e4:0c:5d:2d:9c:23:f3:2e:6d:14:8d:69:e3:a3:
13:69:b5:dd:93:4d:66:7c:45:2d:d9:92:02:96:9b:9f:15:7b:
19:24:38:4d:2c:c5:b9:1f:e3:a8:c2:ab:83:4d:d8:f2:0e:8b:
66:b8:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:13 2025 by rpki-client