Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RtR0F2Z2nIsjjg_2AkcXbOFq7os.roa
File: RtR0F2Z2nIsjjg_2AkcXbOFq7os.roa (raw, json)
Hash identifier: gyAEX/B4pz9vQT5yM9w36po0vA+CuX4Ub76CKzmfd0E=
Subject key identifier: 46:D4:74:17:66:76:9C:8B:23:8E:0F:F6:02:47:17:6C:E1:6A:EE:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5281
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RtR0F2Z2nIsjjg_2AkcXbOFq7os.roa
Signing time: Wed 08 May 2024 14:23:56 +0000
ROA not before: Wed 08 May 2024 14:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21121 (0x5281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 14:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=46D4741766769C8B238E0FF60247176CE16AEE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d0:6d:a7:e9:ba:7e:25:08:49:8f:25:59:68:
3f:fc:6f:62:f1:86:af:bb:45:ba:88:87:be:b1:e7:
10:f1:dc:30:25:20:86:b0:75:25:e2:2f:e5:d9:5a:
9b:fb:44:92:f6:fd:4b:a4:a8:70:f2:bc:73:4e:70:
02:b5:4f:75:a3:56:03:81:25:5b:2c:36:09:d0:d2:
7b:ad:d2:86:cc:59:aa:a8:00:32:07:fc:a3:9e:87:
74:38:71:e5:5b:a4:1e:e0:89:2f:6e:a5:ea:ad:b6:
46:81:32:bb:10:ad:78:b8:cc:ea:df:98:83:11:b7:
be:46:8b:10:93:7d:3a:9b:b2:ad:e5:64:46:94:56:
10:0d:03:0c:55:53:0f:76:1d:3d:4e:84:8a:e5:62:
79:e4:a7:a7:1a:06:9c:cc:5f:38:16:7f:d3:3e:1f:
a4:1a:23:dc:bf:76:46:12:28:78:ec:21:36:4b:1d:
be:91:35:ca:9d:60:4e:08:15:1d:f7:43:ef:8e:22:
62:90:26:f3:7d:44:03:20:5c:b0:25:30:d2:63:65:
d3:32:b8:48:34:6b:6e:94:35:c6:9d:bd:c3:e3:d6:
05:b6:2b:13:50:4e:bd:5e:5e:8c:37:99:0d:b1:b8:
4d:fa:a5:78:cb:5f:15:c4:0f:4f:86:16:50:f3:6d:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:74:17:66:76:9C:8B:23:8E:0F:F6:02:47:17:6C:E1:6A:EE:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RtR0F2Z2nIsjjg_2AkcXbOFq7os.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:8d:3d:19:5c:0b:50:dd:94:ef:c3:e0:d6:c7:fe:68:8b:2d:
89:86:6c:d3:18:91:2b:5a:1f:25:5b:e5:fa:89:87:c4:32:d3:
62:00:22:cf:27:04:8b:8d:35:a6:3f:d7:e2:fd:80:ea:ba:02:
f6:fa:7a:3b:94:cb:66:b6:c0:60:55:e9:53:08:a2:5e:79:44:
37:8b:57:7f:b3:a6:fe:21:05:b7:1c:f4:a7:a5:50:f1:3e:27:
2e:48:88:c4:02:73:2a:95:9b:54:93:6b:33:f1:5b:9a:a5:7d:
2d:40:a2:9c:01:7c:32:08:c6:32:fc:63:99:20:27:bc:37:56:
d5:61:72:2e:ca:11:b6:ff:d6:e0:3e:96:96:52:95:11:6e:7a:
83:81:f2:09:58:ba:1a:ed:22:6d:b6:34:cb:ff:e4:40:c2:8a:
02:d7:ed:b2:02:fb:74:ea:2e:08:98:6b:8d:f4:5d:01:02:b7:
b8:a2:0d:5d:df:16:c4:0d:a9:a0:30:f5:92:e8:ef:d3:43:79:
9a:c7:d9:10:26:a2:4a:e1:66:a2:e8:75:99:e6:4b:da:e4:fd:
5d:d6:53:9b:a4:82:67:b9:31:ce:ae:44:c8:82:cf:92:05:fc:
ab:b8:d7:ba:da:9c:3d:c4:8f:ab:ec:2e:0b:1c:00:68:bf:10:
a1:ce:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:16:59 2025 by rpki-client