Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V9VSNG7m1YD3WR95QRszKMFkDx8.roa
File: V9VSNG7m1YD3WR95QRszKMFkDx8.roa (raw, json)
Hash identifier: WzW3Ljvn32JemK0Dipm2Vhdyj/iDqq4Z3FZmXQFNAv0=
Subject key identifier: 57:D5:52:34:6E:E6:D5:80:F7:59:1F:79:41:1B:33:28:C1:64:0F:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3699
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V9VSNG7m1YD3WR95QRszKMFkDx8.roa
Signing time: Mon 01 Apr 2024 09:22:17 +0000
ROA not before: Mon 01 Apr 2024 09:22:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13977 (0x3699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 09:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57D552346EE6D580F7591F79411B3328C1640F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:f1:66:a1:ad:bc:7c:1e:c3:37:dd:8c:8c:
64:3d:11:90:b3:b6:8d:67:98:46:08:52:9e:03:5a:
50:84:e4:e9:4e:2f:eb:79:e5:04:54:d1:bb:bd:b2:
10:54:2f:a6:9f:98:9b:05:b2:d6:92:bc:e5:b5:4f:
01:03:10:49:27:fd:9c:c2:d3:21:ed:72:1c:89:c5:
aa:5f:a8:45:ce:d8:ef:1c:8a:79:a9:c6:93:90:99:
be:a2:df:49:a5:88:6a:38:59:55:1a:58:f0:5e:32:
a3:b9:0c:1d:36:46:7b:76:13:98:85:66:05:af:1c:
23:b9:84:37:ed:28:18:d6:c2:c7:b0:c4:fe:7e:da:
79:96:97:3c:1c:e8:98:1e:de:c4:49:c0:c9:12:7e:
29:f2:4b:08:84:32:3b:d3:7d:89:e0:39:d1:a1:6d:
db:db:85:89:53:97:db:77:c2:b7:54:3e:e8:66:75:
77:a3:00:6c:65:19:6b:93:41:9b:2b:22:e8:72:30:
c5:b9:4e:bb:41:bc:f1:c8:a6:cb:2f:b5:01:49:b2:
26:3d:d9:3a:bd:56:6a:68:9a:65:7b:e9:3a:f0:5a:
bb:5b:e2:70:67:9c:2a:a8:22:30:2b:6e:8c:99:43:
83:50:b2:c1:ee:e9:09:7d:cb:76:3b:0d:99:e3:cc:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:52:34:6E:E6:D5:80:F7:59:1F:79:41:1B:33:28:C1:64:0F:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V9VSNG7m1YD3WR95QRszKMFkDx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:56:ca:15:2c:7d:c2:d9:16:61:4f:fa:d8:d7:88:2b:86:b1:
f2:84:68:06:e5:76:12:2e:7f:8b:68:83:ec:ee:14:6f:c8:f3:
39:ca:f0:90:83:b0:fe:4a:47:4a:0f:7e:0c:99:12:e7:e5:72:
17:c5:3c:59:03:74:cb:de:20:c9:c2:f1:8b:65:27:36:da:57:
be:72:15:39:2a:4c:63:7b:a9:4d:1d:bb:0e:37:ce:41:98:9c:
42:4c:64:8f:89:ce:c7:7f:16:28:55:c8:d6:ca:5c:6e:a0:52:
8c:a7:60:26:d1:9c:cf:eb:27:54:a1:38:fe:e3:60:f0:64:50:
27:c1:f6:ca:05:89:d7:37:22:a0:af:34:fe:28:76:93:61:bb:
e6:97:4f:2b:ec:91:01:46:05:00:f7:36:77:8d:7d:81:5d:22:
60:c0:cb:d1:c1:0a:2a:c2:f9:89:a6:35:82:73:b9:46:49:33:
f5:1e:ec:ad:6a:37:48:6c:50:94:b9:60:da:38:2f:66:f4:5e:
77:6e:78:1b:3f:68:ee:26:0f:d3:f5:1a:5b:d3:c1:0d:23:81:
ac:7d:be:bf:58:f0:15:bc:65:65:16:1a:d2:5e:09:2d:95:cd:
f9:96:b3:5b:10:6e:35:c3:c5:8b:9c:0b:30:60:6e:14:12:4e:
de:e1:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org