Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XoHrEgHoABiXmogRlBd22xp6gMs.roa
File: XoHrEgHoABiXmogRlBd22xp6gMs.roa (raw, json)
Hash identifier: 426Ukkyu8wyh1ZAf49mZTAfcAqXFmCs18oI3652nP70=
Subject key identifier: 5E:81:EB:12:01:E8:00:18:97:9A:88:11:94:17:76:DB:1A:7A:80:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A75
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XoHrEgHoABiXmogRlBd22xp6gMs.roa
Signing time: Sat 06 Apr 2024 12:52:26 +0000
ROA not before: Sat 06 Apr 2024 12:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14965 (0x3a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 12:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5E81EB1201E80018979A8811941776DB1A7A80CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:63:0c:17:56:24:39:37:af:19:a8:ff:8c:
45:dd:35:7d:3a:82:e3:15:f5:7d:fe:c8:14:44:c7:
20:6a:ae:34:84:bf:cc:1a:2b:34:e9:8a:2a:c4:a0:
14:c9:bf:a9:7e:fb:d4:6f:81:a6:1e:f0:e4:55:b8:
23:a4:6b:f3:9a:bc:45:a8:18:83:20:78:45:ee:87:
8e:55:06:f0:59:7a:ee:db:eb:a6:61:df:c8:a1:d9:
2b:31:23:d7:48:af:28:54:a9:d0:81:ee:36:be:40:
7b:7f:33:3b:51:08:f2:52:fd:d0:38:9d:f6:ae:4a:
e1:43:4c:bb:07:7e:5e:27:00:37:98:b0:1d:24:97:
d7:0e:41:5e:3c:24:91:88:15:96:38:93:b2:a8:15:
31:30:de:ee:9d:fe:e4:d6:e0:31:2e:eb:cc:ef:b0:
27:23:19:fe:b7:e2:cc:fa:6e:b3:48:c6:91:7c:8e:
64:fd:6a:6f:83:c1:72:27:61:9c:45:3a:b8:02:0f:
13:84:e3:e1:77:44:f1:7c:80:81:e5:f3:c7:cf:30:
9e:91:dd:2a:0f:dd:d4:96:4e:ac:e3:57:94:1c:9c:
c4:4d:f8:69:f5:ca:1d:4d:1c:38:bc:e2:07:d4:cf:
50:0b:ae:24:9f:b2:d3:2d:91:69:02:25:92:aa:68:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:EB:12:01:E8:00:18:97:9A:88:11:94:17:76:DB:1A:7A:80:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XoHrEgHoABiXmogRlBd22xp6gMs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:9c:53:01:2e:18:ba:ee:75:ba:85:f4:e2:00:a0:e7:26:ef:
1a:de:8c:52:8e:33:7e:5e:52:44:8e:cd:48:15:22:40:dc:32:
c5:78:5b:58:e4:92:5f:4c:ed:3a:0b:ec:fb:fc:4a:fb:f7:64:
dc:d6:e5:2d:de:ad:35:f1:60:2c:04:9c:a1:41:f9:37:40:c9:
47:86:6b:4e:af:c1:fd:01:8a:df:dc:67:dd:f2:d8:e9:14:5e:
08:38:10:70:fb:8b:d2:45:0c:cc:bc:b6:d3:02:29:f8:03:53:
0b:af:c2:b4:f6:ee:ce:91:b8:6c:47:3d:44:96:98:e3:73:94:
99:1d:be:56:9e:56:61:20:38:77:47:cf:f8:34:54:1d:30:f6:
a7:a0:67:dc:9f:a2:72:59:63:52:d3:88:bb:af:d8:a1:e3:c8:
20:ad:b4:7e:31:b8:98:06:53:e1:2b:79:75:f9:c3:ab:d4:66:
a8:09:dd:67:f2:84:91:27:f7:8a:72:db:b0:c8:dc:68:39:0f:
89:37:9d:10:7e:e0:b6:d6:24:b4:ab:38:71:94:c4:ae:fb:64:
73:97:3e:c1:61:12:6c:ed:07:4a:f1:10:3c:df:05:57:b4:0a:
a1:31:fa:7d:eb:dd:16:10:47:8f:9e:62:df:40:d4:fa:c6:e0:
82:b4:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org