Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SuuX0ykv5OJlyjKAd4EyJbbq5Hs.roa
File: SuuX0ykv5OJlyjKAd4EyJbbq5Hs.roa (raw, json)
Hash identifier: pNujtSDMTeRDYbUwuz4O05YdDYcBgB548iiXMUpwy1s=
Subject key identifier: 4A:EB:97:D3:29:2F:E4:E2:65:CA:32:80:77:81:32:25:B6:EA:E4:7B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A15
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SuuX0ykv5OJlyjKAd4EyJbbq5Hs.roa
Signing time: Sat 06 Apr 2024 00:52:24 +0000
ROA not before: Sat 06 Apr 2024 00:52:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14869 (0x3a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 00:52:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4AEB97D3292FE4E265CA328077813225B6EAE47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:eb:ab:6a:f2:00:d0:ff:b6:ad:87:fa:51:
64:3b:67:1a:a0:1d:0f:ae:e9:44:1d:dc:3d:fc:82:
5c:dc:d1:66:40:be:ea:7d:5a:56:59:90:60:7e:d1:
33:4a:44:1b:5f:09:52:48:89:6c:51:61:6e:9e:92:
3a:d8:2a:79:9e:9d:38:d8:4e:ae:7e:08:3e:f1:a3:
a7:ff:86:26:3c:48:3c:fb:9b:85:83:b7:8a:33:d0:
dc:7e:0a:b7:ca:3d:bf:a7:68:76:ed:73:d5:b1:53:
07:e5:61:33:27:b4:7c:5e:8b:1b:61:a7:bc:49:85:
1c:71:48:5d:6d:cf:e5:2a:6f:5e:ec:ae:01:41:28:
9a:af:cf:26:77:9d:bd:84:67:9c:15:54:8d:ec:8f:
83:5f:01:30:ab:83:7c:a0:7e:4f:c0:6a:35:43:2e:
ba:d7:19:53:af:b7:dc:84:8c:b6:75:d8:aa:55:7f:
28:7d:93:05:f3:6e:6c:82:69:4b:38:cd:0c:b3:e3:
7c:4e:4a:47:b2:a9:02:cb:b0:47:20:9b:d8:b8:2c:
3c:3d:d7:ba:2b:f1:d6:e9:4b:41:09:83:25:54:b4:
ed:95:e9:18:2e:0e:31:e4:65:49:3f:b9:b3:3a:37:
d7:57:74:67:6f:9e:45:cf:ed:3a:16:57:66:c7:3f:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:97:D3:29:2F:E4:E2:65:CA:32:80:77:81:32:25:B6:EA:E4:7B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SuuX0ykv5OJlyjKAd4EyJbbq5Hs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
58:e7:13:e4:ba:f4:42:05:3d:6c:cd:7d:c3:7c:cc:9c:21:78:
fd:5b:60:79:db:60:08:c3:58:60:f1:4b:e2:21:48:1d:3e:69:
d7:cb:4d:16:c0:e2:e1:82:6a:6f:c5:41:82:8b:8e:0c:79:6b:
dc:fb:bc:15:69:d3:5c:2f:7d:ce:12:58:78:b6:f3:c4:d8:11:
01:d7:be:81:eb:e6:3b:ac:d7:29:16:0d:74:cc:bd:ae:db:1a:
a2:aa:c6:55:ce:99:76:84:c9:e8:28:dd:10:89:7f:16:f2:f3:
ce:09:b6:b6:60:33:79:df:f6:44:96:37:40:bb:dd:ad:bd:ad:
3b:b6:49:4d:23:8c:2f:6e:7c:e4:57:76:44:d5:08:c9:17:cf:
1e:2c:5b:84:1e:32:4e:3c:c1:ad:74:58:3f:8e:70:cb:dc:6a:
8b:31:b3:d6:94:20:8d:90:24:88:cb:ef:f0:64:ce:0d:94:98:
ee:54:65:7d:0f:9c:04:95:29:52:7c:f2:a6:cf:db:a2:49:79:
30:65:a1:93:57:0b:45:07:42:8d:d2:d1:66:11:78:5f:6e:86:
82:1f:00:9c:86:e9:da:3d:07:c1:a7:64:9e:0a:3d:d2:cb:e8:
ac:5c:8d:17:a3:08:09:10:d3:6f:44:69:54:ab:37:3f:86:2b:
79:77:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:43 2024 by rpki-client on console-ams.rpki-client.org