Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XafsYmC7IHPTSlaf_8FbI1Q-uYY.roa
File: XafsYmC7IHPTSlaf_8FbI1Q-uYY.roa (raw, json)
Hash identifier: R4H+NsHznxFQ7XLdJua7bkBPBg5ysHaCMyBn4OpOyqA=
Subject key identifier: 5D:A7:EC:62:60:BB:20:73:D3:4A:56:9F:FF:C1:5B:23:54:3E:B9:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B49
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XafsYmC7IHPTSlaf_8FbI1Q-uYY.roa
Signing time: Sun 07 Apr 2024 15:22:32 +0000
ROA not before: Sun 07 Apr 2024 15:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15177 (0x3b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 15:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5DA7EC6260BB2073D34A569FFFC15B23543EB986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:e7:ac:f9:d2:2f:0c:a8:3a:23:23:72:fb:
f9:cb:88:ef:32:60:a2:39:57:e9:8f:b5:de:c0:5a:
9c:13:70:05:8a:3a:15:c6:e3:ee:21:b9:f5:50:a6:
90:2d:a9:d8:5d:c2:ad:0e:6b:88:61:41:90:55:23:
6e:5b:a2:78:ac:93:69:f7:19:6e:4a:f4:b2:a4:9b:
a0:1b:ab:6d:06:ae:b9:45:2b:49:77:b9:74:84:a2:
df:9f:30:4b:56:c9:bb:ec:33:3b:af:3f:5e:93:ed:
42:30:ef:06:cb:6a:4b:c8:62:44:2c:68:4d:53:be:
ca:31:33:87:3a:06:61:71:89:ea:6e:3b:f8:04:7c:
a5:a4:5b:bd:a8:95:97:78:c2:af:66:93:20:a5:55:
80:0f:a2:be:d2:4e:57:06:0b:b1:a5:e0:43:68:e4:
d2:bf:67:bd:7e:c3:01:1b:20:a0:3e:81:8e:bd:1f:
24:4a:6a:38:9a:41:f4:40:e4:c1:ae:df:54:9e:e7:
29:8e:15:9d:8d:ce:e9:da:ef:d1:2c:05:35:11:66:
09:6f:08:cf:7c:bd:e6:73:48:b4:4c:95:90:8b:0f:
04:3a:4a:28:ac:ff:fc:14:57:9d:c1:33:1d:80:08:
b1:40:a6:2e:01:46:aa:ed:b3:d3:89:26:f0:48:a2:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A7:EC:62:60:BB:20:73:D3:4A:56:9F:FF:C1:5B:23:54:3E:B9:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XafsYmC7IHPTSlaf_8FbI1Q-uYY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
97:d0:ce:8e:7a:27:2b:52:12:62:54:c0:17:10:41:76:35:62:
32:bc:31:d3:89:c8:15:b0:23:89:fe:15:8a:d7:40:b0:25:be:
db:f9:b9:4d:c5:03:e7:35:2a:9f:38:1c:70:de:af:b9:ec:e2:
2b:eb:19:c9:6a:dd:06:a9:05:ad:52:5a:56:07:c5:30:06:77:
03:61:39:a7:1c:99:b8:6a:0a:8c:b4:1f:4a:50:79:36:7d:75:
70:99:1f:34:99:06:f3:1f:a4:92:d6:c8:da:5c:43:95:96:46:
24:a7:3a:c0:f4:c3:07:91:a2:8e:ff:59:9e:bb:33:5e:b2:69:
cc:e5:5e:cd:7a:7f:70:f9:a2:af:23:9f:1f:f7:62:4c:92:05:
db:f7:e9:ef:a7:d9:66:8f:02:5c:62:8b:5e:59:9e:a7:32:bc:
d9:5d:04:2f:6e:ae:ae:7b:0a:72:a1:07:ef:f6:d1:ac:57:9a:
3e:69:32:f3:e3:17:8a:12:b3:91:d0:ed:c0:16:b0:04:76:99:
15:a5:a3:70:2e:e7:7a:1f:5d:18:db:11:a9:74:c8:8b:ca:f0:
16:f6:0c:65:24:56:d6:fe:94:05:54:3d:c9:5b:25:f5:7c:ec:
41:2f:7d:e8:0f:e9:c1:d6:95:2d:db:05:a8:ea:07:d4:53:8b:
bf:49:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:49 2024 by rpki-client on console-ams.rpki-client.org