Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SV3-1mQtYPNYAXORNJKK-zPoT98.roa
File: SV3-1mQtYPNYAXORNJKK-zPoT98.roa (raw, json)
Hash identifier: S0HPPSbPkkiqEwJpowBI091+ZERRED7HevCHg9FYQd8=
Subject key identifier: 49:5D:FE:D6:64:2D:60:F3:58:01:73:91:34:92:8A:FB:33:E8:4F:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4281
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SV3-1mQtYPNYAXORNJKK-zPoT98.roa
Signing time: Wed 17 Apr 2024 06:22:59 +0000
ROA not before: Wed 17 Apr 2024 06:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17025 (0x4281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 06:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=495DFED6642D60F35801739134928AFB33E84FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:77:f3:71:91:03:80:c2:78:a9:25:f0:f2:
36:97:bf:47:9c:bb:5e:79:98:10:cd:2d:b3:c8:b9:
e6:5d:38:f1:63:d8:33:f9:b5:59:48:73:8f:cc:8a:
a6:64:f3:0a:6d:16:ed:9b:a4:dc:ae:fe:e8:13:75:
08:e9:47:45:dc:4d:15:ce:bd:bb:91:7e:ec:b4:53:
ba:07:3f:e3:43:86:cd:62:b5:6c:2f:e8:3d:67:67:
41:69:ef:fa:93:bb:f2:03:37:23:fa:20:41:88:df:
31:ce:91:51:a7:b2:55:28:13:90:78:09:a5:93:40:
3a:d8:80:1a:46:3a:33:0f:e1:43:aa:76:98:3a:df:
31:13:ca:84:b3:aa:60:f7:e8:4e:2f:f7:7c:ac:9c:
69:76:a5:ef:92:26:d3:d0:45:a4:24:e7:4a:9c:1a:
58:b8:07:aa:e4:b8:b3:c7:52:77:7f:d2:95:04:04:
7e:da:f0:37:91:c0:d1:ab:20:91:4e:e3:ae:0c:f1:
90:d5:f3:07:3f:fe:29:98:75:73:a4:bf:a4:ea:7a:
3c:cc:97:94:09:ca:a7:6d:28:d7:90:92:b1:ee:06:
2b:75:a6:cf:dc:bc:05:29:47:a6:e3:f1:b3:d3:96:
91:f4:6e:64:cf:ea:b7:ba:2c:cb:fb:2a:6b:f3:ac:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:FE:D6:64:2D:60:F3:58:01:73:91:34:92:8A:FB:33:E8:4F:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SV3-1mQtYPNYAXORNJKK-zPoT98.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
76:60:c5:4b:bd:24:03:01:40:c8:91:9d:a8:9f:a6:c6:35:b0:
44:ce:02:08:2c:85:e7:0d:b3:07:8d:39:49:7e:26:33:ac:88:
c9:7f:ab:a6:5c:45:75:0a:6b:57:68:14:0a:49:30:ff:01:72:
38:34:f0:d1:cf:a0:20:3f:97:d3:96:42:6a:2f:de:e9:16:76:
33:ed:29:1e:27:1d:f0:2c:3e:3b:31:14:51:05:f7:d7:0b:02:
47:6a:ef:b5:45:85:0c:09:fe:93:94:f6:3f:9b:01:25:81:84:
72:03:cb:26:cb:18:f6:76:c2:57:df:ca:56:9e:d1:46:b9:d9:
7b:b5:41:cb:d5:e4:f1:a1:c2:f2:00:25:70:66:e2:09:40:6a:
a9:ba:49:8f:d5:7e:7c:35:c6:8a:b6:78:47:be:14:59:f3:a2:
4e:1d:8e:64:47:7d:92:ca:b8:3b:5f:83:40:13:fd:ca:63:fa:
f7:3f:42:10:3f:42:2b:f9:05:07:82:b7:70:24:a3:bb:b6:ae:
55:ce:91:36:79:0c:cd:1b:01:76:ff:26:10:de:2d:ed:bc:dc:
e8:e6:3b:d6:98:2b:e4:2f:b9:78:c8:cf:cb:ca:89:78:18:73:
c7:fb:7a:a3:3e:a7:0b:9f:1b:9a:02:b8:4f:c0:b2:31:e9:81:
f0:33:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org