Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VcG_-af6zBfe_b02PaH8yMEmjQU.roa
File: VcG_-af6zBfe_b02PaH8yMEmjQU.roa (raw, json)
Hash identifier: gLguAf9kqNgJgem9V7jD0pMDRYxH7ZOBi9idUxz3GY0=
Subject key identifier: 55:C1:BF:F9:A7:FA:CC:17:DE:FD:BD:36:3D:A1:FC:C8:C1:26:8D:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CF9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VcG_-af6zBfe_b02PaH8yMEmjQU.roa
Signing time: Wed 01 May 2024 05:23:38 +0000
ROA not before: Wed 01 May 2024 05:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19705 (0x4cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 05:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=55C1BFF9A7FACC17DEFDBD363DA1FCC8C1268D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:20:28:2b:8a:17:64:f3:1c:a9:ad:92:69:
f2:ff:bd:51:74:99:9d:bf:6e:60:c3:3c:c7:6a:1e:
30:72:84:36:66:f5:bb:10:9f:31:f9:b1:ff:5c:f1:
fd:5a:1a:6b:95:aa:4c:e5:3d:83:b8:04:24:4c:1c:
3a:9c:b2:fd:d7:9b:8e:df:7d:96:d9:d5:d3:22:fa:
69:30:4a:94:55:73:a5:5b:27:a7:ac:fe:db:7e:3e:
bb:91:94:0f:de:6d:43:a0:68:96:29:bb:f2:fe:c7:
64:d4:c4:ea:85:b8:15:93:eb:41:bd:df:4b:55:1a:
64:fe:0e:fe:e9:e8:ae:b1:a8:6e:09:77:74:29:a8:
e9:1f:0f:fe:46:57:f5:37:a9:db:45:cc:9d:df:3c:
39:53:de:85:fe:ce:0a:a6:a4:be:90:6d:9e:66:25:
ed:31:c3:47:3f:a4:d1:08:ab:15:b0:9b:7c:e3:93:
38:c1:b3:a7:f0:c6:8d:45:36:b9:7f:8c:97:79:22:
ce:ae:f8:61:66:72:f1:2e:e3:65:08:6e:61:e7:c4:
e2:22:c5:b3:57:1e:ee:40:95:9a:87:83:81:bf:0e:
9f:9a:13:3b:d2:24:c5:a7:f8:cf:62:4c:fb:c7:c8:
1f:12:af:00:4a:f3:83:79:95:81:ed:85:a4:e2:40:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:BF:F9:A7:FA:CC:17:DE:FD:BD:36:3D:A1:FC:C8:C1:26:8D:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VcG_-af6zBfe_b02PaH8yMEmjQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:af:40:de:73:63:30:5c:8e:4c:4c:93:11:7b:df:2a:17:6a:
35:ef:6a:42:3b:a2:5a:1c:0e:1c:1a:73:a2:5a:ec:39:74:b5:
a6:f8:b3:ce:70:ec:4c:a8:e2:fa:fb:e8:75:a1:03:96:de:fc:
d0:66:17:f7:97:b0:56:19:c4:86:e8:18:61:29:97:e3:1e:b6:
f3:32:5d:64:37:84:43:45:a4:5e:5d:78:5d:c9:80:0f:f3:f2:
1a:d0:6f:2a:88:49:01:8e:af:b9:b5:e3:35:28:e4:45:a5:a5:
53:8e:74:98:16:8a:e1:3c:44:36:9c:56:fd:f7:d7:3d:8b:9f:
11:48:a6:75:c8:c2:f3:b6:15:85:55:29:f5:b7:8e:30:0e:5f:
77:1e:f6:3f:e2:cc:fd:a8:e0:19:d8:57:2f:cd:23:6f:ad:64:
89:b9:54:d5:73:61:12:4c:a3:d9:20:60:67:50:13:ea:62:ff:
72:71:f0:ba:7e:24:c3:e1:6a:e4:2d:61:a7:0c:98:ac:bc:cd:
ab:59:d6:dd:77:9e:e6:10:4b:ea:53:3a:e8:9b:9d:56:24:a1:
e3:4d:95:32:d4:b3:70:b0:f5:16:61:60:dc:85:21:40:e3:db:
a8:f8:f2:72:1c:6e:29:50:42:65:db:ae:f8:ef:0a:b2:db:5e:
2c:9e:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org