Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TTcwQOg2lLW46dLWKF8RdBIm3bI.roa
File: TTcwQOg2lLW46dLWKF8RdBIm3bI.roa (raw, json)
Hash identifier: 8OPDmlpbEqY7TRYJOXFRnNGJGHkv9CLGhppvvosktIE=
Subject key identifier: 4D:37:30:40:E8:36:94:B5:B8:E9:D2:D6:28:5F:11:74:12:26:DD:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56D1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TTcwQOg2lLW46dLWKF8RdBIm3bI.roa
Signing time: Tue 14 May 2024 08:24:08 +0000
ROA not before: Tue 14 May 2024 08:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22225 (0x56d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 08:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4D373040E83694B5B8E9D2D6285F11741226DDB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:93:75:3d:10:9f:26:4e:78:80:88:1f:88:
a9:2a:ef:b9:50:36:e3:87:c7:25:a5:19:b8:08:89:
0b:23:b7:0b:76:6a:5d:a9:24:36:06:d2:ce:02:cb:
ca:2f:7d:97:f1:57:78:f5:29:b8:95:a5:0c:6c:ed:
e2:bd:e2:4e:99:81:a6:f9:9b:46:c2:3a:26:b5:0e:
c9:70:09:f2:98:3c:5c:82:23:7f:82:30:09:76:18:
59:10:38:30:3b:22:b3:3a:bf:7b:fa:8f:83:9c:ae:
59:5b:e1:f1:7f:33:b1:c5:a1:ef:d3:8d:d6:89:ad:
af:f4:9f:39:f5:bc:3f:94:17:20:18:10:a9:50:57:
71:fa:bd:4a:5f:ce:b7:a1:3b:a8:ad:c6:73:e6:d5:
b7:46:06:67:d8:bb:71:93:d0:79:df:d9:73:e1:6b:
f7:db:d1:62:99:c6:84:7d:58:8d:04:86:c2:e9:4d:
27:1b:b6:a8:35:e7:44:11:48:fe:96:b2:bf:f4:10:
9e:ac:f7:98:09:50:a3:3c:6c:56:18:1e:14:4c:b8:
03:6f:71:4c:ac:ba:33:95:72:b5:4e:46:c8:9d:da:
6c:a4:d3:91:5e:12:78:6f:11:dd:1e:2c:ed:57:ed:
0e:84:d6:f5:d7:de:ad:42:ba:d0:77:fd:a6:cb:1b:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:30:40:E8:36:94:B5:B8:E9:D2:D6:28:5F:11:74:12:26:DD:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TTcwQOg2lLW46dLWKF8RdBIm3bI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
59:ff:93:80:1c:4a:8e:24:75:9d:ce:ac:be:da:e9:26:22:34:
f4:ea:63:f9:90:62:a9:5a:25:17:2c:61:84:d0:a2:9e:6f:b7:
1c:d4:07:43:f3:b8:2e:b7:ed:97:ee:d6:3d:c3:96:5b:6c:22:
32:ad:e4:05:4f:77:7b:12:04:18:dc:67:76:14:75:c8:59:89:
e9:26:e8:82:81:b1:83:25:83:c3:8d:0a:8e:65:ee:a9:bb:50:
fa:93:30:ea:24:5c:71:77:9c:c1:84:63:3f:d9:b2:1f:d2:67:
fa:0d:de:48:ed:a3:61:fc:c2:98:4f:a2:6e:c7:75:28:77:2b:
34:fe:17:70:3c:e5:a5:55:3e:75:b7:6a:b7:dd:c1:ea:c5:73:
14:84:4a:c8:21:99:f7:12:b4:bc:47:5a:68:12:7e:c1:86:fd:
bf:4c:47:d1:c4:8c:8a:a7:6a:16:f1:ba:e1:c4:0b:2e:6a:63:
4d:ff:05:06:59:a3:56:94:82:55:75:06:96:13:8a:ec:ad:9e:
65:da:79:86:bc:d9:89:16:a1:c7:65:bb:3b:4b:60:38:57:d6:
0c:cf:0e:76:9b:2e:a2:e7:ce:d3:4d:63:9f:fc:4f:fb:4f:35:
19:e6:25:87:3f:17:42:19:d8:b0:8f:6d:19:50:a6:7b:36:6e:
1b:31:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:10 2025 by rpki-client