Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SKqpZCTsFZJmIAlXxLWHAlgAKPo.roa
File: SKqpZCTsFZJmIAlXxLWHAlgAKPo.roa (raw, json)
Hash identifier: 0llrdmohJhy2CQd0rv/0vDXUHxA8pWGOLCCdoTmq7oI=
Subject key identifier: 48:AA:A9:64:24:EC:15:92:66:20:09:57:C4:B5:87:02:58:00:28:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SKqpZCTsFZJmIAlXxLWHAlgAKPo.roa
Signing time: Thu 02 May 2024 11:53:41 +0000
ROA not before: Thu 02 May 2024 11:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19949 (0x4ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 11:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=48AAA96424EC159266200957C4B58702580028FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:8b:37:be:42:5a:0d:d4:dd:01:89:db:48:
8e:a7:1a:41:07:01:57:af:cd:fa:71:58:2a:a3:1e:
8a:80:01:8c:a6:4a:87:ee:9e:ff:63:0f:d2:70:5f:
82:81:68:a2:87:7e:48:b7:78:2f:d0:c5:9c:9b:13:
a3:80:14:ea:38:4d:66:22:3a:92:2e:a5:07:31:2d:
ff:83:c4:df:30:b9:e2:91:6c:17:2a:4e:39:19:18:
52:69:3d:16:57:34:64:d7:f9:b9:72:52:f5:b5:16:
86:63:61:e3:2f:33:1f:a0:e4:b3:6b:ca:c8:a5:cd:
ce:1c:6a:0c:9d:05:52:ab:ca:8d:32:98:08:d2:b0:
7c:a5:d9:06:9f:9b:96:22:4f:fe:a5:61:62:7e:e6:
b8:ad:9c:49:47:cc:9a:f3:04:13:8c:63:f2:52:41:
5a:6e:70:51:79:b0:a1:18:96:c9:4c:b7:6e:49:08:
54:8b:5f:26:86:6c:cc:b0:5a:8b:70:47:e7:f8:03:
c6:fd:b7:f2:fd:b9:da:93:8f:33:aa:d5:1c:48:42:
c1:1b:91:61:1f:ae:e2:74:21:67:60:d4:17:2d:f5:
b9:4b:eb:c4:72:b7:9d:d6:99:ef:3c:d6:db:49:5d:
b3:a1:9c:4e:e2:04:58:e8:15:3d:25:89:c2:a6:b1:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:A9:64:24:EC:15:92:66:20:09:57:C4:B5:87:02:58:00:28:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SKqpZCTsFZJmIAlXxLWHAlgAKPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:4e:66:86:40:8a:a4:10:af:1b:b6:42:80:4d:06:e2:ce:c8:
93:6b:e1:9a:79:27:c3:15:6e:27:52:54:81:0f:55:52:6e:be:
ca:22:72:86:58:ae:85:ad:b8:de:78:9c:8b:e8:8c:a5:09:6e:
f2:14:9d:fa:39:2d:65:31:f7:72:d9:33:07:f7:4b:79:f9:38:
1f:8e:ef:8d:a6:a2:be:ec:eb:5e:fd:f7:e2:64:6d:31:49:4e:
28:72:f4:7b:88:98:3b:22:14:8c:53:8c:93:92:b6:73:45:b5:
59:e7:2e:90:43:ff:32:0d:56:30:d0:1b:a5:c5:a1:a0:cd:29:
e8:29:26:6c:af:2a:85:e3:49:c4:53:83:dd:cd:4a:c1:24:ba:
ef:14:b9:89:1c:43:98:c1:7e:3b:9a:b3:b4:7a:3e:5c:d1:38:
07:9c:f5:59:c3:44:f8:be:66:bc:06:ae:e0:2d:7e:b3:e0:53:
90:0f:30:45:66:e6:8d:d9:f7:32:bc:57:d0:02:c0:ee:33:5a:
c7:b6:b6:87:a4:b3:a2:c3:d1:05:7b:70:9e:c1:73:a5:c0:c0:
c0:0d:0e:e9:f5:e7:30:24:0f:6d:29:b4:45:db:8b:05:93:85:
65:08:b5:f4:9b:54:ce:c9:1f:f4:28:0e:03:46:cd:54:8b:d4:
2a:d5:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:37 2025 by rpki-client