Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/X2BlILFX8ugFDrpDqxO1CCueN-Y.roa
File: X2BlILFX8ugFDrpDqxO1CCueN-Y.roa (raw, json)
Hash identifier: hq6y03XLNddLdfdnAuaRJFvCpLWnE09piAuANQ4YOeg=
Subject key identifier: 5F:60:65:20:B1:57:F2:E8:05:0E:BA:43:AB:13:B5:08:2B:9E:37:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B31
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X2BlILFX8ugFDrpDqxO1CCueN-Y.roa
Signing time: Sun 28 Apr 2024 20:23:27 +0000
ROA not before: Sun 28 Apr 2024 20:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19249 (0x4b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 20:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5F606520B157F2E8050EBA43AB13B5082B9E37E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:f2:bf:ee:9d:e5:db:ce:4b:1f:16:76:ef:
b7:f2:72:b2:82:2d:af:55:3f:02:01:e4:a6:43:c9:
49:0a:17:d3:2b:1e:dc:81:8d:da:cf:4d:08:96:1f:
19:39:ea:c5:b8:7c:92:95:df:f4:19:58:f4:21:35:
90:9c:63:9e:58:34:91:8a:79:56:94:0f:0e:8c:06:
b0:db:4a:c9:43:21:3f:91:13:4f:d6:e1:42:38:86:
10:a6:9e:28:9c:ba:d7:87:30:c3:ed:a0:0f:43:2b:
02:50:a4:e7:a1:63:1d:18:1a:e4:71:d3:76:92:c7:
9d:48:b8:bd:d7:99:b4:96:5a:f4:c7:51:43:81:c7:
84:94:58:5a:32:18:ed:6f:a1:c7:62:70:65:4e:be:
3d:bc:79:f6:d6:c4:5f:c8:54:26:f4:6c:66:ac:10:
e8:8a:12:e4:e9:23:d7:a5:0f:64:3b:97:e6:ff:23:
b6:0d:de:a7:85:cf:22:07:2d:b9:44:ab:db:45:8d:
eb:41:92:25:a4:9d:f3:c1:6f:07:16:58:24:46:06:
2a:b3:57:d3:96:34:87:9f:86:eb:15:39:8d:b4:b7:
55:78:01:32:16:95:a1:17:c2:da:d7:86:a6:3e:19:
2c:e9:cf:34:40:8f:9a:bd:1c:b4:73:0b:3c:b1:c3:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:65:20:B1:57:F2:E8:05:0E:BA:43:AB:13:B5:08:2B:9E:37:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X2BlILFX8ugFDrpDqxO1CCueN-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
69:28:a2:d2:2a:03:fd:48:ba:16:68:7d:2c:a4:42:64:31:d8:
90:4a:9e:e3:a2:c0:ae:27:a2:a3:b8:8a:1a:46:6a:4e:bb:92:
34:7b:3d:b9:ce:81:22:99:dd:40:04:f4:66:f6:03:58:0b:c0:
dc:14:4b:4e:14:9f:61:8c:b7:98:c0:a3:c3:1d:50:de:76:a1:
3e:f9:06:86:cb:d7:39:b5:88:c6:24:2b:d8:04:a8:2e:db:94:
94:bf:73:27:5f:95:a8:96:55:a7:60:45:63:01:4f:a3:79:9b:
6a:a6:b9:6c:ca:7c:4a:5e:5d:d5:b0:cb:94:e8:4b:53:ba:eb:
0b:39:3a:45:3e:00:3e:ba:8a:da:78:3e:d4:8a:ed:8b:61:fe:
0a:36:6a:08:4a:05:ed:d1:15:8e:51:ba:5f:44:f5:af:19:7b:
90:a0:e8:92:15:96:28:e7:de:c1:9e:29:87:20:d1:f2:89:55:
e2:9d:42:0b:42:60:d3:4e:8a:6e:dc:7b:ed:21:52:66:6c:da:
e3:aa:4d:16:31:81:9c:ea:2d:fe:37:a1:68:8d:e1:4c:c1:24:
96:0d:29:b0:72:f8:a3:bd:ce:9d:27:6d:55:b5:7d:fc:b5:ac:
fa:f0:be:37:5a:a8:22:15:24:33:7c:19:f6:ea:b8:46:c0:f5:
2d:03:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org