Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VhrxGgm-tZ4Gbz8HUJZSw7fMisM.roa
File: VhrxGgm-tZ4Gbz8HUJZSw7fMisM.roa (raw, json)
Hash identifier: MkrSWSXkVG5ih0EeoYtshOBkhyWV3RvhVmeo9a2TWtk=
Subject key identifier: 56:1A:F1:1A:09:BE:B5:9E:06:6F:3F:07:50:96:52:C3:B7:CC:8A:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 351D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VhrxGgm-tZ4Gbz8HUJZSw7fMisM.roa
Signing time: Sat 30 Mar 2024 09:52:06 +0000
ROA not before: Sat 30 Mar 2024 09:52:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13597 (0x351d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 09:52:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=561AF11A09BEB59E066F3F07509652C3B7CC8AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:5b:42:de:17:72:e1:c4:53:5b:0d:2e:ed:
be:4c:6b:b1:8f:73:33:0d:23:ce:9d:79:86:b9:b0:
1b:bb:08:18:05:97:e5:0e:e5:a2:91:00:b2:24:34:
ac:b4:5c:e9:71:b1:00:a2:9a:05:6e:a3:ad:70:fc:
61:ab:95:7e:2b:60:42:ab:d1:63:a2:db:08:6f:42:
bb:93:ef:f2:9e:cd:1b:6a:0c:88:45:00:fd:ef:5d:
46:0c:a9:25:fe:23:34:55:6d:3f:9d:38:ef:48:a2:
89:4c:45:e3:a8:eb:4a:af:bc:2a:5a:6c:33:c5:2a:
a7:b5:61:ea:19:df:53:a3:13:6f:19:be:2c:43:f4:
ef:81:dd:0b:8c:6d:31:b2:28:fd:77:45:d9:a3:b8:
35:89:71:82:11:e5:f1:f8:9a:62:a8:be:12:8e:3f:
e7:7c:9a:d1:0c:8b:09:52:4f:1e:08:6b:22:38:61:
84:6f:77:96:fe:71:64:f0:b7:27:7e:80:9b:30:00:
b3:b7:e1:c5:64:cf:50:eb:99:b3:50:f6:e8:c3:0b:
b2:ee:b2:ae:81:2b:2d:e8:44:17:80:ea:15:59:4a:
e5:24:2d:7c:50:e0:52:8c:c0:16:7b:ce:59:46:94:
44:ec:a6:f2:63:21:e9:74:21:ae:e9:4f:82:3d:75:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:F1:1A:09:BE:B5:9E:06:6F:3F:07:50:96:52:C3:B7:CC:8A:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VhrxGgm-tZ4Gbz8HUJZSw7fMisM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
26:71:9f:0e:ee:91:85:c5:aa:c4:bb:a6:08:e7:ca:d4:2d:a2:
e4:63:5d:6c:7b:18:d1:c0:51:5d:56:e3:63:12:0f:6a:64:26:
83:24:d3:13:04:eb:05:25:bd:65:4b:8d:27:fb:c5:47:5e:ec:
a0:26:c1:55:b4:50:bd:69:02:6a:0d:02:2d:9b:ba:5d:50:d4:
a5:54:c7:e5:09:db:f5:72:bd:74:d6:eb:90:ee:56:82:e9:00:
bb:02:c5:1d:4c:0c:8a:68:78:49:5e:a1:ec:06:45:44:5c:ed:
41:c6:63:8e:b1:54:9e:d2:a9:a2:81:ba:0b:55:73:ac:79:94:
fa:fe:b6:c1:de:c8:0f:98:cd:9e:6c:cd:63:68:19:e9:b8:85:
3c:e7:21:30:55:07:c4:22:77:ad:21:e7:b0:a7:8e:b9:cc:f0:
fe:2a:8e:c3:b1:e7:b4:65:78:4d:e0:6b:0e:5f:e3:4c:96:29:
32:80:14:ea:36:f9:29:f7:30:b8:4e:e6:d1:b6:b0:76:5b:50:
ed:ab:1c:5f:57:76:7a:f7:15:29:25:d1:cb:73:e5:4f:ef:4c:
32:06:89:fd:52:5a:d9:4c:1c:dd:ad:ee:cf:3c:9d:ff:3d:8d:
b0:2b:60:55:0f:04:99:0b:c6:68:c8:87:51:2c:6c:3b:39:1d:
d7:b7:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org