Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RgaEXKLBJd_NyS8pFMTbJacWTgU.roa
File: RgaEXKLBJd_NyS8pFMTbJacWTgU.roa (raw, json)
Hash identifier: lCuTb+bBdAaadiCZ44zDzAKXFKwiWQfEc6VFjPkji0s=
Subject key identifier: 46:06:84:5C:A2:C1:25:DF:CD:C9:2F:29:14:C4:DB:25:A7:16:4E:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4865
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RgaEXKLBJd_NyS8pFMTbJacWTgU.roa
Signing time: Thu 25 Apr 2024 02:53:19 +0000
ROA not before: Thu 25 Apr 2024 02:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18533 (0x4865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 02:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4606845CA2C125DFCDC92F2914C4DB25A7164E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:98:3e:7c:66:16:68:20:1e:44:ba:b1:08:
86:e3:93:5c:e5:b7:3a:e2:ba:a0:80:08:c7:1b:19:
f6:bf:2a:1c:b3:d2:23:c8:0a:fd:3e:28:e6:82:18:
78:d8:09:9f:79:62:af:de:79:bb:eb:fb:aa:e0:c8:
48:77:4c:35:cb:51:49:2b:a8:c2:41:0e:d6:46:63:
6b:7e:63:88:f3:a7:05:f9:8d:b3:a8:75:76:bf:34:
b1:d8:1e:4b:45:d9:b1:a8:98:49:a7:bc:ee:90:b3:
8c:7d:85:78:1c:04:0a:e3:41:40:ff:1b:27:ec:9c:
aa:1d:c9:40:93:30:12:cc:f5:20:8c:38:5a:4e:34:
fe:4d:23:34:86:e5:57:7e:63:0c:38:98:94:d4:c6:
11:d4:0c:84:ad:8e:fe:59:f4:0d:dc:19:93:ee:a4:
f7:19:83:b2:a6:d6:20:d6:bb:ce:1b:4f:5a:13:e3:
ff:f8:e9:73:b4:ca:89:0c:d9:f9:d1:8f:3d:09:cd:
2f:40:c8:e4:d5:c4:5a:2e:ee:4a:14:80:07:0a:71:
08:f5:3a:c2:9c:49:05:6d:f7:a9:83:94:00:42:30:
7e:aa:f1:5e:7a:41:5a:18:04:30:06:47:43:32:e2:
73:48:f5:a5:86:3a:83:79:ee:56:58:d6:5c:c3:b4:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:84:5C:A2:C1:25:DF:CD:C9:2F:29:14:C4:DB:25:A7:16:4E:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RgaEXKLBJd_NyS8pFMTbJacWTgU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:ba:0f:9f:c5:f3:ea:54:7b:00:b6:77:cf:92:e8:85:c7:bf:
cc:f3:1d:b0:a9:4b:6e:42:bf:84:ae:76:c4:01:6d:a1:f0:e1:
1b:dd:c0:0c:f6:8e:21:fb:d0:9c:88:a3:1e:ec:14:71:2b:26:
88:59:55:70:c5:27:0a:f7:5b:08:24:bd:19:95:09:b1:6e:ee:
eb:2a:44:93:d0:89:df:c3:bc:27:40:c6:e2:13:4e:6d:61:73:
11:98:5a:39:5d:c8:57:b8:17:b4:80:bc:2a:5b:3f:0e:36:2d:
7a:56:bd:1e:c7:68:ad:1e:7d:12:a6:dc:7f:e9:81:3d:36:d3:
94:e1:af:8b:23:3f:5b:f4:4a:dc:d4:4a:3b:f3:02:ff:2d:7e:
df:8a:04:b6:5d:e1:1e:0d:d1:24:e5:8a:ef:b7:08:bd:99:dc:
c9:60:95:cf:91:23:d1:17:91:7c:7d:11:46:30:3f:f4:33:ba:
d2:d4:69:27:3b:fd:bf:73:b9:f5:1e:61:f3:bf:e4:de:cd:77:
6d:37:18:8d:49:7d:1c:25:f8:fb:47:c4:93:16:96:a5:4e:a2:
c3:7e:f8:69:75:79:fb:51:e7:c4:20:12:03:f8:d3:46:7d:6b:
10:71:93:6a:b3:b3:e2:a0:3b:21:18:fd:43:01:c6:d5:c3:a9:
71:84:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org