Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VwZXPE2agBWezYN20cDg4oZJpYY.roa
File: VwZXPE2agBWezYN20cDg4oZJpYY.roa (raw, json)
Hash identifier: 9LrFBryWgfEYvo9FcH9tJoUlR1zH+Ozlbzph1Xydjz8=
Subject key identifier: 57:06:57:3C:4D:9A:80:15:9E:CD:83:76:D1:C0:E0:E2:86:49:A5:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D69
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VwZXPE2agBWezYN20cDg4oZJpYY.roa
Signing time: Wed 10 Apr 2024 11:22:41 +0000
ROA not before: Wed 10 Apr 2024 11:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15721 (0x3d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 11:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5706573C4D9A80159ECD8376D1C0E0E28649A586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:1c:72:af:f0:13:bd:a5:26:bc:20:4f:10:
c9:92:6a:3f:b1:91:23:2c:e4:83:78:4d:b6:49:01:
48:67:9f:eb:37:e2:d7:27:54:07:ea:67:02:08:59:
9f:ae:c6:b9:4b:f7:c3:64:0f:e1:21:a6:4f:1e:74:
af:57:08:93:fb:22:bf:b7:48:7a:be:9b:bc:04:6d:
e0:48:25:fc:88:47:6f:0f:dd:df:0f:61:c0:30:37:
f5:a5:7c:7d:ca:9d:45:a1:75:15:ed:ba:af:a9:5f:
9f:29:51:38:d5:e8:ac:a6:34:bf:b7:26:a3:75:7e:
fa:93:b2:ba:0d:b2:4f:99:86:23:bf:48:4a:6d:13:
d1:aa:83:ae:0a:82:2a:db:b8:b1:bf:3a:fd:0a:57:
de:aa:e5:ba:b6:59:24:68:7d:bc:98:2b:60:ad:f1:
7b:00:58:4f:da:87:52:16:09:47:b7:49:8c:73:5f:
c6:46:d2:dc:ff:1d:0e:02:c0:d7:8f:66:14:97:c2:
c0:fd:6a:11:64:59:7b:bd:05:87:78:ed:f6:ea:20:
32:fc:93:0d:9b:45:69:22:24:8f:46:dc:57:56:a1:
b5:87:75:98:84:49:70:b3:b5:74:21:29:e1:81:a8:
27:04:73:1d:db:de:6b:5b:33:6d:ab:b0:fe:06:db:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:57:3C:4D:9A:80:15:9E:CD:83:76:D1:C0:E0:E2:86:49:A5:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VwZXPE2agBWezYN20cDg4oZJpYY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:a7:7f:22:2f:54:2e:7d:15:3e:0f:25:54:cd:38:2d:f8:a6:
a1:9c:5f:cf:de:b0:11:a1:37:7f:4e:9e:07:84:8b:15:46:30:
91:19:9b:e5:3e:c6:32:ba:71:a2:05:76:31:75:c9:08:5b:09:
f4:00:1b:56:81:4c:de:5a:4c:62:e5:87:d9:2d:b1:c0:7d:bb:
21:fc:ac:67:e0:d7:bc:2e:27:ca:37:ae:3f:5b:6e:93:10:2f:
ec:81:2d:7d:f9:fe:ef:6d:a1:ab:9e:f8:50:7e:a1:f3:76:b5:
0d:32:0d:99:3a:29:71:1d:74:cb:30:0d:87:cb:a5:1c:db:1b:
75:c3:90:0c:63:7a:3b:16:a4:6b:5b:6f:cf:69:fb:25:5e:c0:
5d:f2:fb:98:02:ba:3a:f5:83:ff:d1:aa:fa:7a:dd:49:26:9a:
65:22:b9:7a:98:e1:d7:a7:e6:c3:4c:4a:d4:85:fb:95:87:f4:
fd:a8:5b:45:e8:e7:e3:72:31:77:67:9c:ba:25:be:b0:81:d0:
74:6f:cc:12:e0:97:38:a5:99:89:1a:de:05:39:52:c7:94:5d:
bb:34:98:5f:70:c1:50:d9:f9:6e:45:7c:10:47:be:03:82:58:
c6:de:3a:c0:8a:05:39:02:8c:50:79:15:61:e1:5b:d3:d5:9c:
66:7f:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org