Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RU-boSmrqpZed1Roc1mu2d8JDp8.roa
File: RU-boSmrqpZed1Roc1mu2d8JDp8.roa (raw, json)
Hash identifier: IaMG/n6fd9i8HciSypvVBG681VFdXz+TmkeiqZ7FNC8=
Subject key identifier: 45:4F:9B:A1:29:AB:AA:96:5E:77:54:68:73:59:AE:D9:DF:09:0E:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5305
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RU-boSmrqpZed1Roc1mu2d8JDp8.roa
Signing time: Thu 09 May 2024 06:53:57 +0000
ROA not before: Thu 09 May 2024 06:53:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21253 (0x5305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 06:53:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=454F9BA129ABAA965E7754687359AED9DF090E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:11:cd:8d:b5:ac:fa:0a:fa:c4:98:e7:b6:
45:1a:e4:8d:2b:09:b1:18:e2:1a:fe:d0:d9:9e:89:
bc:8c:82:6d:5b:01:7b:8b:52:df:38:ac:76:15:a2:
6d:05:25:3f:50:f7:cb:88:3e:2f:0d:3c:c2:72:c6:
d7:64:1f:a5:c8:fc:ae:3b:10:3c:95:89:bb:49:58:
ec:01:0b:15:67:e9:04:8e:ed:cd:43:4c:09:dd:23:
e1:22:46:f1:e4:26:d7:db:67:d8:26:ee:9e:e7:3e:
72:28:ad:2a:49:c6:97:9c:b2:ed:d7:b1:1f:34:8a:
03:60:de:d8:4f:f8:ff:6a:ba:1b:13:a8:2a:8b:fb:
c0:bc:13:59:32:c9:0f:ea:72:9e:42:06:e9:f3:d6:
cf:80:a3:3e:16:7e:d7:23:2f:c1:fd:7f:f8:6a:fb:
0f:5d:ac:11:63:9c:bd:1e:44:69:2a:f0:4e:da:d7:
fc:22:46:ec:38:17:96:ca:ed:a3:82:ec:3e:c5:9f:
0f:2d:e5:a6:80:52:7e:28:75:b8:36:24:14:6b:40:
c8:38:b9:7e:8b:3f:9b:6c:7b:3c:55:c6:ac:aa:8c:
57:b5:98:04:d5:52:ba:2e:f7:cc:d3:29:90:46:fb:
48:ce:a7:b7:f3:48:06:33:5b:d4:c0:f4:fe:de:0d:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:9B:A1:29:AB:AA:96:5E:77:54:68:73:59:AE:D9:DF:09:0E:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RU-boSmrqpZed1Roc1mu2d8JDp8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:9f:60:ed:c2:5f:ab:39:b7:6f:64:ab:56:ea:17:ab:ea:0b:
66:52:86:5e:c4:9e:92:71:98:b9:d1:c1:69:27:5f:36:e6:3e:
0c:7c:3b:86:fa:62:1e:0c:35:0e:eb:95:4d:3e:f5:5c:81:80:
22:f9:9d:34:10:18:a6:2e:5e:51:5c:1e:50:a8:02:3d:4d:b0:
5c:33:2d:1a:67:4c:cd:69:e1:78:ff:36:4a:bf:05:07:f0:81:
a7:b4:71:64:21:37:46:2c:8e:e4:18:8b:d0:ca:ad:44:25:8a:
ea:bc:40:bb:cd:e0:8e:ca:89:bb:30:88:68:58:73:67:72:24:
af:fd:3d:5e:7c:27:8d:0a:3c:b9:0b:3c:75:82:17:06:f8:52:
23:ad:68:9c:e4:66:64:f7:1c:04:6e:d9:92:9b:7d:26:be:61:
c1:c2:f1:da:48:d2:a1:9a:76:47:dc:de:68:36:3e:ae:7b:57:
c4:31:20:e9:3f:87:a5:4d:df:bf:55:cc:d9:dd:0f:52:b1:06:
1d:f9:88:a2:b9:f3:86:d5:09:e5:ca:2c:1f:83:f9:62:61:73:
35:1e:e8:e3:f4:f7:9e:5c:8a:36:e2:68:f4:6d:e9:e1:02:bb:
d5:77:ec:1a:4b:af:3a:b2:4e:dd:66:02:70:47:6f:32:e9:e7:
7a:04:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org