Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WIqcRw1eIR0l_-yRj7ZDGV787V4.roa
File: WIqcRw1eIR0l_-yRj7ZDGV787V4.roa (raw, json)
Hash identifier: jqzQ9gwcU0QDADiO6au09pb3UnYsGKsdpiVoWHsVYiE=
Subject key identifier: 58:8A:9C:47:0D:5E:21:1D:25:FF:EC:91:8F:B6:43:19:5E:FC:ED:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FE5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WIqcRw1eIR0l_-yRj7ZDGV787V4.roa
Signing time: Sat 13 Apr 2024 18:52:52 +0000
ROA not before: Sat 13 Apr 2024 18:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16357 (0x3fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 18:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=588A9C470D5E211D25FFEC918FB643195EFCED5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:8a:cb:e5:b9:2c:f9:5d:68:92:cf:34:ed:
bd:77:92:e6:21:15:87:2c:c3:4b:11:c3:ef:06:e0:
36:e4:cc:ca:a9:72:c8:c1:74:e6:87:84:66:98:0f:
cc:0b:6e:11:ac:3a:58:86:56:c5:95:1f:04:42:30:
77:51:4a:a2:6f:f6:cd:a3:7c:27:29:33:27:b7:98:
0c:7c:7a:fa:c5:93:71:6c:8a:d1:87:ce:fa:05:0f:
de:3f:68:37:1e:b2:92:c6:e3:bc:18:73:af:90:b8:
d0:63:db:28:c8:fe:04:32:17:27:55:e2:04:40:f8:
98:f0:da:a4:7e:6c:5d:97:b4:bb:ae:a6:d1:23:39:
92:1a:e3:82:19:f3:eb:7f:15:b2:0c:21:dc:f7:0e:
0b:d3:bd:d2:74:dd:9a:4c:86:c1:fe:be:35:66:21:
6d:4b:06:77:7d:b6:df:f7:1b:d9:6b:f2:eb:d4:33:
c9:df:ff:3d:59:d3:1a:83:27:06:f3:9b:f4:3e:dc:
ad:d4:22:18:2a:00:10:b7:36:2e:71:e8:75:0c:2b:
7b:93:8f:1c:f0:82:38:b4:2e:c4:f8:8d:86:20:7e:
b8:1b:ab:bc:a9:72:b0:2a:8b:24:e0:e9:93:72:1c:
6b:d1:6d:5a:0a:6f:81:6e:d0:b0:d7:c3:17:87:ad:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:9C:47:0D:5E:21:1D:25:FF:EC:91:8F:B6:43:19:5E:FC:ED:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WIqcRw1eIR0l_-yRj7ZDGV787V4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:33:82:6e:ca:97:08:d5:4b:ab:e0:56:6c:e6:26:b8:b8:a2:
82:34:95:d4:e4:24:7e:ac:9a:61:d0:c7:ec:aa:13:b9:30:fb:
ed:66:a6:2b:0a:10:ac:e9:42:d8:6c:da:ad:d9:4c:ee:0c:af:
80:e5:3c:10:81:4b:e3:4c:6e:9a:f1:6b:57:c6:31:fd:51:a6:
2a:87:b2:e9:85:98:fd:22:f6:4a:6c:6f:90:24:f4:d7:1e:fc:
74:98:81:e6:f2:57:f1:36:4a:73:24:16:35:cd:8b:a3:10:4c:
87:38:bc:61:24:f2:5a:41:85:a6:80:de:51:d6:28:f3:0e:5b:
e5:06:91:86:d1:ad:4b:2a:ac:6b:0a:2a:b9:03:cf:71:3f:1b:
b5:31:7b:8c:06:3b:a7:fe:19:08:9b:a6:f0:2c:cf:0b:be:cc:
00:5f:73:cd:ab:de:4d:b9:6c:5a:b2:26:eb:77:b8:6f:62:09:
3e:46:c0:71:79:db:b1:4d:d1:f5:f8:7e:eb:ab:90:76:ce:9f:
a7:18:be:76:ee:cb:d1:6d:13:40:a1:c5:56:f2:e0:93:b3:5d:
c1:73:a3:94:20:ed:31:fc:33:e7:14:b1:10:3b:00:77:30:dd:
25:9a:b2:7e:8c:ff:de:5d:ed:4c:c0:83:73:f3:cb:c3:7f:da:
6e:91:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org