Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XB_ZyKkXp-tkzUHugUPP6YAoysE.roa
File: XB_ZyKkXp-tkzUHugUPP6YAoysE.roa (raw, json)
Hash identifier: dakOzQxWgkyaE6L0oEaDhJvu4IFuC3K9p0utSc67QO8=
Subject key identifier: 5C:1F:D9:C8:A9:17:A7:EB:64:CD:41:EE:81:43:CF:E9:80:28:CA:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5665
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XB_ZyKkXp-tkzUHugUPP6YAoysE.roa
Signing time: Mon 13 May 2024 18:54:19 +0000
ROA not before: Mon 13 May 2024 18:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22117 (0x5665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 18:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5C1FD9C8A917A7EB64CD41EE8143CFE98028CAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:2e:06:d1:7a:75:46:39:16:7a:b6:20:85:
7d:1b:b2:2f:1b:0a:d0:01:56:cd:ba:c0:ec:93:57:
75:f0:17:44:59:1b:55:a3:e2:3d:57:5a:e7:f4:06:
2f:71:01:4e:08:f9:10:ff:b2:4f:f7:a1:39:b9:f1:
a9:84:7b:b5:c4:05:94:65:8b:a2:26:df:ea:00:07:
48:f3:1d:03:46:49:b5:8b:ba:27:4d:3d:3b:09:3f:
90:b2:6e:65:06:b3:41:49:b1:23:7e:5e:92:02:b1:
f7:4b:3b:9b:0d:03:c3:87:28:08:28:0a:d0:0c:e9:
b3:30:b6:fa:2d:21:c5:fb:1d:50:5b:fc:53:c3:30:
fd:64:ae:15:c1:68:3f:a5:d8:8a:20:10:6a:b7:c6:
db:e4:86:1b:a6:63:3e:be:fd:36:cc:bd:3e:7e:d5:
96:6a:5a:8c:70:dc:76:c3:10:44:e2:99:34:af:73:
d7:b2:33:26:8e:1c:5a:d0:24:ac:4d:17:f2:fb:08:
0b:53:8b:51:8e:2d:75:f6:e1:3e:df:b8:28:ba:f4:
94:6c:12:75:f2:b4:53:11:80:4c:7f:a2:94:8b:7a:
7a:32:51:05:77:f1:45:f0:f2:fb:79:32:84:c8:f9:
7e:57:1f:73:64:d4:ec:05:34:a7:6a:f3:0b:4a:c7:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:D9:C8:A9:17:A7:EB:64:CD:41:EE:81:43:CF:E9:80:28:CA:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XB_ZyKkXp-tkzUHugUPP6YAoysE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:8b:00:f4:0c:82:25:ea:45:1c:3c:4e:2a:ea:0b:f9:32:e2:
6d:42:1f:50:a0:06:b4:bf:33:78:af:b2:92:8c:30:43:41:88:
76:ae:93:ff:a7:e2:ae:f2:65:d4:b6:38:46:d9:56:9e:07:17:
c7:cb:28:18:9b:ee:49:6f:f2:64:fb:75:50:66:e3:0e:a3:58:
5f:c4:2c:48:9b:88:3f:b5:53:04:bf:2a:56:01:27:78:27:d1:
e6:00:1e:28:0b:08:2e:cb:fd:3c:3a:55:73:68:b2:b1:3c:22:
70:18:26:26:50:61:c4:ad:80:0c:f4:53:f8:14:b4:bf:40:00:
10:cd:b9:f9:b5:c7:40:aa:b1:d5:0c:d0:56:62:7f:c5:57:97:
68:2a:86:38:78:92:a5:1a:1e:4c:de:e0:fc:d2:f9:72:1e:85:
52:80:ae:c7:56:3b:65:28:4f:d1:6a:22:62:08:a9:d5:68:85:
4c:1f:07:b9:82:3d:27:17:7c:df:1a:b0:c6:5a:d9:41:c2:3e:
ad:de:f1:ba:11:f5:72:db:7c:bc:32:6c:19:1b:b2:8e:40:b0:
46:ea:49:19:17:0f:ad:71:10:08:04:9d:b2:70:ee:c5:80:91:
bb:70:26:ff:e8:19:72:e8:9e:c2:a4:6c:e0:12:87:bf:af:e9:
7f:c5:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:48 2024 by rpki-client on console-ams.rpki-client.org