Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UpxsCOFoH1IYXcs_SbR6H5lPYMI.roa
File: UpxsCOFoH1IYXcs_SbR6H5lPYMI.roa (raw, json)
Hash identifier: 9fsTSonyMzc2qDoyH1J/U4S46yjH0f2eggirbOpR34g=
Subject key identifier: 52:9C:6C:08:E1:68:1F:52:18:5D:CB:3F:49:B4:7A:1F:99:4F:60:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D59
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UpxsCOFoH1IYXcs_SbR6H5lPYMI.roa
Signing time: Wed 01 May 2024 17:23:38 +0000
ROA not before: Wed 01 May 2024 17:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19801 (0x4d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 17:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=529C6C08E1681F52185DCB3F49B47A1F994F60C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:9a:85:ce:dd:b4:52:88:5d:3b:84:5f:98:
45:6a:9e:b4:02:f7:c9:9e:b0:02:fe:a2:e1:61:8f:
48:b6:49:32:cc:a1:ee:a2:32:b0:b8:f1:03:bc:71:
66:0e:f6:41:37:2f:f1:a7:f3:72:b8:f7:f6:c3:87:
bd:a3:e1:de:17:54:61:22:99:c1:02:76:9f:3e:c9:
52:cb:5b:0d:76:0b:83:4d:8d:da:0f:a3:f0:f4:86:
85:b1:f4:3b:4c:73:25:c0:a4:f4:70:14:50:ef:ff:
e2:ba:a0:df:06:12:86:8a:5b:05:30:35:08:db:b8:
6f:f5:04:0e:df:06:3b:aa:b7:de:73:c8:df:61:f2:
16:52:21:18:30:66:49:40:28:c4:92:7c:1c:3e:3f:
17:14:77:1e:1a:b2:a8:f8:a3:7e:62:03:91:ef:4c:
ab:0b:d5:7b:87:0a:60:52:3a:c5:13:fa:b5:b5:80:
b8:10:46:5c:e4:c0:a2:3f:9d:95:34:82:6d:69:8b:
5c:c3:f8:5d:1f:91:ca:c2:2e:04:6a:b8:2b:58:f5:
aa:18:38:7d:47:61:66:20:35:b7:96:61:96:1a:53:
33:c1:6c:22:01:ff:6d:7e:14:27:10:1e:fb:db:06:
85:6a:1e:7a:c9:f2:72:9c:ac:46:69:8e:67:c9:a2:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:6C:08:E1:68:1F:52:18:5D:CB:3F:49:B4:7A:1F:99:4F:60:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UpxsCOFoH1IYXcs_SbR6H5lPYMI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:49:e5:f8:a4:73:dd:05:bf:80:12:33:ae:d3:3d:16:43:7d:
b0:4a:ad:c1:11:9e:e4:ab:67:7e:a1:a4:bf:ba:75:b4:5f:e2:
0d:c5:cc:88:16:dc:62:3f:67:6c:35:af:2c:39:a1:54:df:64:
42:49:45:d4:68:7f:ce:7e:82:6b:e6:1b:9f:17:2b:f9:99:b6:
8c:9b:c3:4d:8f:6e:57:c2:dd:b3:d6:2d:50:f4:05:1b:1a:e3:
d3:24:aa:d7:75:31:52:50:b9:1e:e3:6e:2f:b6:33:e9:94:03:
82:f3:60:37:a3:cd:e6:2e:7a:22:37:e5:54:31:55:fc:0f:9f:
f4:de:bd:e1:54:e2:30:47:eb:23:ec:91:68:34:af:b9:ba:e5:
de:00:bc:6f:90:99:f7:85:4e:ee:05:3c:5b:93:e7:4b:da:bb:
88:52:8d:33:4f:1c:c7:31:75:83:9e:46:cc:18:0a:f9:b2:9e:
f3:12:61:58:a2:02:ef:18:09:c5:9a:fd:ed:e4:05:08:34:72:
07:e4:bb:d1:76:44:82:2c:25:78:26:52:90:0e:b6:ff:cb:4c:
9f:78:75:1c:50:35:0b:e7:a9:ef:8a:8b:0c:d8:ae:e0:b8:1e:
72:54:ba:3c:af:98:98:cd:ae:d2:4e:ef:ac:4d:6f:fa:45:fa:
10:30:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:10 2025 by rpki-client