Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Rc_z0gyvWt8tKr2BjFr7Qee1pFU.roa
File: Rc_z0gyvWt8tKr2BjFr7Qee1pFU.roa (raw, json)
Hash identifier: mv8Ov0DufuN+ZUnT4JNy6vbppPJtJ9KPUUnSwcdjI0Y=
Subject key identifier: 45:CF:F3:D2:0C:AF:5A:DF:2D:2A:BD:81:8C:5A:FB:41:E7:B5:A4:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3731
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rc_z0gyvWt8tKr2BjFr7Qee1pFU.roa
Signing time: Tue 02 Apr 2024 04:22:13 +0000
ROA not before: Tue 02 Apr 2024 04:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14129 (0x3731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 04:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45CFF3D20CAF5ADF2D2ABD818C5AFB41E7B5A455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:01:c4:ed:7f:66:01:f5:eb:e9:ec:7e:71:
f2:f2:c0:f9:0b:75:9e:c0:46:5e:bd:63:fe:b7:6b:
32:6f:1d:4a:f6:e0:47:6a:18:9e:74:f9:62:b0:98:
0e:db:20:ad:58:0b:7b:73:6c:35:39:6e:48:05:72:
01:6e:b4:0b:4c:e1:5c:c3:13:90:83:1c:1c:43:fc:
64:92:9e:4e:36:8b:c5:b3:5e:e1:cf:2a:0e:d0:b4:
c3:59:5d:c4:f2:a2:43:b1:32:7b:5f:6a:1a:a8:c4:
7c:76:e8:cb:93:2f:6a:34:52:40:7d:9d:05:8b:70:
67:dc:5a:ba:dd:d6:8a:68:e0:69:bc:42:7e:13:0a:
12:6e:9e:51:51:8a:c4:ae:42:6e:f3:d5:2f:9c:c9:
64:e8:d3:3d:9a:5e:ce:7a:ce:89:b9:1b:de:79:d9:
0b:e5:31:4b:f6:e1:80:25:2b:b5:d6:cb:b9:a7:b8:
7b:94:8b:e0:1f:25:e4:cd:a4:e6:14:d1:6e:1b:ee:
3f:a1:90:23:43:d5:3c:3c:c4:8c:5d:7f:d0:64:50:
f8:46:c4:12:e9:2e:03:32:86:8f:f3:53:ad:47:c0:
3a:5d:df:bd:f0:90:cf:ee:70:2a:86:df:5e:55:54:
63:21:50:32:63:d7:c2:2d:b9:2d:73:fe:fe:aa:3c:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:F3:D2:0C:AF:5A:DF:2D:2A:BD:81:8C:5A:FB:41:E7:B5:A4:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rc_z0gyvWt8tKr2BjFr7Qee1pFU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
40:c5:a6:16:15:df:16:99:b2:76:96:3b:cf:5d:c5:52:45:fe:
24:f6:3e:5c:da:ed:f0:94:ca:df:c4:aa:91:3f:40:e6:ae:12:
d8:b4:a2:51:39:5a:c1:77:34:cd:38:46:68:26:f2:8f:cb:ba:
46:5f:db:30:45:7e:37:37:31:47:74:ce:f6:b6:01:f5:94:7f:
5d:90:a3:68:73:3a:4e:5c:f9:cc:c3:8d:b0:29:56:57:32:bc:
0d:84:e5:8a:09:dd:a5:c1:be:52:12:ba:57:36:62:40:1d:30:
4d:2f:36:17:a9:8f:30:1d:81:cb:96:8e:08:96:7c:0e:ae:1e:
8a:ee:b2:1a:25:55:20:3a:4c:e3:09:3b:dd:ed:fd:fe:f5:d4:
b5:0d:7c:db:78:51:b9:69:35:f6:25:43:8e:05:ba:a8:08:16:
15:59:68:6e:97:06:29:eb:f0:ce:0e:01:26:93:8a:9f:98:45:
f8:0b:cf:dd:d8:76:52:94:e5:2a:4e:44:bb:44:81:f9:e9:aa:
fe:83:a4:c3:d1:1f:bc:a3:9a:41:d0:8d:cf:f7:29:fb:d8:68:
6c:3c:f8:87:2f:08:0f:be:6a:e9:a6:b4:05:2d:8e:a6:b7:57:
ec:58:87:9a:61:dd:46:29:3a:44:1b:bd:ac:46:4a:41:78:6e:
08:a4:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org