Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Vm7jqv08e9zsqOs12t-sNIPJ1Y0.roa
File: Vm7jqv08e9zsqOs12t-sNIPJ1Y0.roa (raw, json)
Hash identifier: JDbF/AVq1mlQVYJ/NqgclOzqLoebZjmKi7YF16kz9PU=
Subject key identifier: 56:6E:E3:AA:FD:3C:7B:DC:EC:A8:EB:35:DA:DF:AC:34:83:C9:D5:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DBD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vm7jqv08e9zsqOs12t-sNIPJ1Y0.roa
Signing time: Wed 10 Apr 2024 21:52:45 +0000
ROA not before: Wed 10 Apr 2024 21:52:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15805 (0x3dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 21:52:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=566EE3AAFD3C7BDCECA8EB35DADFAC3483C9D58D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:ba:91:29:12:00:5e:f0:58:80:8e:97:06:
7f:e0:14:a8:9f:05:a4:dd:4d:51:bf:a7:49:75:45:
24:11:2a:42:62:78:4e:21:a5:20:5c:f9:00:54:28:
b2:08:c1:ce:ea:7d:5a:8f:44:c9:fd:1e:7c:11:c8:
06:fd:63:fa:d9:a2:55:de:17:16:50:c0:13:16:8f:
b4:b6:88:65:a0:68:ac:89:1b:35:b9:c7:45:4b:de:
7d:44:c8:09:19:20:20:58:ec:d2:ee:dd:f3:78:c5:
e7:59:46:25:af:de:ef:36:a2:8e:32:49:53:f3:5c:
29:a4:6c:a6:35:03:d9:26:ef:cb:b8:86:b8:fa:60:
13:b0:2a:64:8d:04:15:be:7a:5c:7e:24:74:d9:2e:
8c:6a:7a:64:13:6b:f2:c9:5e:94:a7:17:50:0a:09:
4e:02:f8:fe:43:6b:c6:47:12:2e:82:80:92:5c:c0:
ff:08:54:56:35:ca:b3:48:fb:a2:41:bb:ec:d9:71:
eb:77:37:0b:a1:4d:bc:93:8f:bd:43:98:30:af:4e:
ce:8f:01:51:ef:dc:0f:3d:8a:39:4a:9c:07:2c:4e:
c0:e0:d5:d2:bb:f0:39:af:04:7c:8a:5c:7d:47:73:
e6:0a:e6:8a:cb:fd:55:dd:8e:82:92:b5:54:ff:f3:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:E3:AA:FD:3C:7B:DC:EC:A8:EB:35:DA:DF:AC:34:83:C9:D5:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vm7jqv08e9zsqOs12t-sNIPJ1Y0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:b0:3d:a9:95:61:09:7b:ed:73:ca:03:bb:d9:f7:6e:04:6e:
c2:14:a1:ab:dc:75:3d:ca:86:1e:28:fe:c3:e5:bf:cd:c6:33:
6a:91:f9:06:ee:33:cf:2c:24:0d:cd:30:26:33:b4:7d:ad:ce:
19:ba:83:a0:b3:55:b4:24:ee:9e:94:27:a6:17:f5:4e:d1:59:
7a:7c:7f:7d:16:ff:14:92:5f:44:b5:76:86:c1:e2:55:18:f3:
5f:09:21:b0:26:ea:b4:5c:6e:ea:d6:e7:58:f6:86:65:20:c0:
27:6e:e2:c9:6c:e3:4a:43:79:8e:8e:fd:c5:21:06:88:b5:96:
1a:31:9f:93:41:a4:25:1b:35:04:5b:14:5e:7b:e6:8d:d6:97:
0b:72:a4:a7:56:83:ae:45:67:fb:53:ff:01:42:3a:48:ef:c0:
c3:47:71:45:df:2c:f3:64:6e:e3:c0:74:17:38:05:75:3d:09:
d5:11:06:1c:91:74:19:e8:2e:88:47:c8:a7:6f:1b:73:d2:4f:
43:d7:09:a6:31:66:7b:3f:92:f2:e1:1f:e4:0e:b2:9f:c8:ca:
98:6a:f7:4e:af:c7:3f:0e:81:70:49:9a:0b:8b:6c:9f:25:e7:
28:77:ae:69:a3:4c:e3:11:64:a3:b7:f7:3f:23:8b:8c:5f:4a:
ef:61:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org