Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/X1E5NEUhHE0rH4frO7LLUMj-CfU.roa
File: X1E5NEUhHE0rH4frO7LLUMj-CfU.roa (raw, json)
Hash identifier: WkP7k+NOlS/NHguOuZgQ7TeKBpgzfk51s98dJP9CoM4=
Subject key identifier: 5F:51:39:34:45:21:1C:4D:2B:1F:87:EB:3B:B2:CB:50:C8:FE:09:F5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AF9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X1E5NEUhHE0rH4frO7LLUMj-CfU.roa
Signing time: Sun 07 Apr 2024 05:22:29 +0000
ROA not before: Sun 07 Apr 2024 05:22:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15097 (0x3af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 05:22:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5F51393445211C4D2B1F87EB3BB2CB50C8FE09F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:67:26:06:1c:07:fd:0e:c2:ab:fb:b1:4a:
69:80:93:03:89:ad:5b:d9:cb:b6:6b:b8:95:2a:5f:
22:cf:14:0b:50:a1:5e:3e:02:aa:37:6f:b3:af:9b:
da:ba:c9:eb:8e:44:f5:9e:fc:c4:a6:5c:4b:1e:53:
78:47:f2:21:da:66:da:b4:ab:70:05:a3:17:15:bc:
58:67:76:51:56:2e:07:8e:fd:60:e1:70:27:b9:1f:
8c:22:9a:23:5b:cb:7b:b0:ae:27:07:00:95:be:04:
d8:eb:4b:d6:25:16:a5:eb:13:1b:28:e7:64:ee:99:
ab:62:28:ae:f5:3f:df:5a:a4:5a:42:6b:26:9a:c9:
45:f5:b4:b2:da:f6:cf:58:61:62:4d:3b:75:a7:a4:
e7:0b:0f:85:6b:31:6a:a2:ed:1c:ad:2d:d5:92:36:
42:70:74:a2:3f:62:f9:90:70:42:57:dd:62:60:2d:
0b:f5:f7:6b:43:b1:fe:b8:32:89:8a:79:25:ea:c8:
96:b9:c2:9a:65:df:0b:a0:c8:e5:56:7d:d2:98:95:
54:fe:80:9e:86:83:a0:cb:ad:97:87:a7:4e:d3:2c:
53:02:6c:6a:57:6a:f8:c5:2a:88:af:21:98:82:57:
fa:43:ec:e3:6f:95:05:b4:8e:a3:28:a3:a6:2a:13:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:39:34:45:21:1C:4D:2B:1F:87:EB:3B:B2:CB:50:C8:FE:09:F5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X1E5NEUhHE0rH4frO7LLUMj-CfU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:23:f5:a6:a2:67:40:2b:c1:2a:7e:4c:10:80:03:1d:71:33:
6c:61:94:59:95:84:06:a1:db:3f:76:e7:d1:90:e3:0c:f4:b1:
fc:5b:31:12:15:86:e4:9b:24:5d:e3:ea:22:bc:a0:14:d9:39:
e7:50:c5:3d:19:c3:a5:07:53:dd:2f:d0:7b:e0:f1:89:05:10:
9a:ec:60:5b:e1:d5:c5:c0:14:52:a6:31:7c:08:76:cc:e0:23:
21:ac:e6:32:87:13:b3:2e:a9:54:0e:69:ee:66:83:0c:b4:0e:
af:97:44:47:c0:09:3e:f5:de:a6:fb:b8:90:b3:e5:2b:d1:55:
05:84:30:2a:b3:bb:2d:95:17:03:9d:27:41:fe:3d:f5:53:25:
f3:d1:a7:f7:db:c2:4a:b8:9f:4e:30:0a:c7:a6:88:a2:00:b5:
9a:18:08:66:44:da:97:8a:01:9f:d2:e1:d5:51:0b:0f:9c:92:
af:fd:c4:8d:42:30:7c:25:e6:70:1d:22:93:86:79:bf:eb:58:
e3:b1:c5:73:02:01:3d:db:62:c1:7a:2d:c1:23:35:2f:e0:c3:
c3:c7:00:b8:ab:d8:3d:08:b5:69:5e:76:75:aa:f9:79:59:c2:
a9:9b:1b:c4:ac:d7:99:ed:d6:16:c4:bb:e6:92:91:b4:be:fe:
fb:8a:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:58 2025 by rpki-client