Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V2eFqM8LnBBQwOtb5hbY55UBqyw.roa
File: V2eFqM8LnBBQwOtb5hbY55UBqyw.roa (raw, json)
Hash identifier: QUBB/W958Pp6+qrRwIlgS6MxGWHUvCj503sthT1RRwk=
Subject key identifier: 57:67:85:A8:CF:0B:9C:10:50:C0:EB:5B:E6:16:D8:E7:95:01:AB:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 512D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V2eFqM8LnBBQwOtb5hbY55UBqyw.roa
Signing time: Mon 06 May 2024 19:53:52 +0000
ROA not before: Mon 06 May 2024 19:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20781 (0x512d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 19:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=576785A8CF0B9C1050C0EB5BE616D8E79501AB2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:8f:9c:b8:1d:30:65:b5:7a:95:b5:b6:47:
97:77:38:ab:ee:67:ee:f7:3f:f3:86:e8:c2:c1:a9:
be:d4:84:67:54:8b:93:b5:a5:ba:dc:83:d4:42:4a:
ab:04:ce:18:91:3b:7c:6a:ef:1d:02:7c:e1:b8:3d:
8b:47:84:23:a4:85:9d:a6:50:68:e6:86:f9:42:c1:
0c:41:e1:26:8d:86:ad:12:de:34:4b:b0:1b:78:b1:
0f:51:3d:02:84:7f:1d:c0:82:83:75:44:48:51:ab:
7c:60:b4:58:85:26:b6:2a:fc:01:2d:e9:86:6c:8e:
29:06:db:01:de:1b:bc:fb:3a:91:3e:93:30:91:91:
5d:d3:56:b4:8f:3a:83:25:1c:c1:f7:c4:02:9c:4b:
9f:06:22:bb:37:e0:18:42:e4:e7:59:a6:24:08:81:
18:d6:34:89:82:e6:a8:b2:b4:65:d3:57:da:de:2a:
05:55:57:15:8a:aa:65:84:73:80:5c:1f:25:a8:5c:
38:2a:33:4a:87:35:16:59:8f:75:c2:3d:be:2a:33:
36:4e:9d:45:27:86:35:d1:60:d2:ed:02:1e:56:1d:
94:80:0a:29:2e:0a:73:d5:49:df:62:46:db:12:8a:
48:8d:f4:92:f8:aa:f8:95:1c:f3:ba:72:b9:0f:80:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:85:A8:CF:0B:9C:10:50:C0:EB:5B:E6:16:D8:E7:95:01:AB:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V2eFqM8LnBBQwOtb5hbY55UBqyw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
51:3d:ff:09:f1:a0:21:63:9f:e5:f0:b3:31:da:4e:89:e7:81:
b1:8c:42:c7:43:56:36:2d:07:1b:c2:68:51:bf:9c:e6:dc:8a:
76:69:0e:51:48:56:8f:64:20:bc:bd:fd:46:8c:60:e2:37:b7:
54:1a:53:c5:81:07:8a:4d:de:59:b8:94:2c:c6:a0:65:62:77:
f6:23:da:a0:60:f4:75:f7:c6:e2:5f:f4:98:16:07:4a:0c:0e:
ec:3d:b2:63:4f:17:17:3e:8f:1f:5a:55:04:f7:7a:59:bf:fb:
3e:53:b5:d5:4e:a0:7c:53:35:6f:5b:91:c0:c7:4c:23:60:40:
45:32:4d:3a:ef:e3:f6:95:6c:3b:54:b8:55:45:64:9e:1a:14:
84:30:55:82:d0:e2:e7:b7:af:9a:8b:8c:4a:d7:67:de:9c:f2:
c2:e0:cb:5e:24:e0:7f:07:e1:57:ad:f6:af:28:9d:10:bf:2d:
3d:ed:0b:f7:e2:73:73:ce:4b:d0:f9:b8:91:2c:b1:21:43:7a:
86:f3:f5:35:19:cc:5c:ea:36:8a:65:19:9a:0a:bd:39:4a:fd:
a6:5b:af:92:d1:e9:c9:3c:4a:65:aa:6a:8f:7e:f4:3e:d9:fd:
fc:d3:de:83:e3:63:d7:29:69:e9:b9:bf:a8:f4:45:ef:36:6d:
04:71:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org