Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YW-E9gF4J0e8kmEMjOD_T6mZolY.roa
File: YW-E9gF4J0e8kmEMjOD_T6mZolY.roa (raw, json)
Hash identifier: oXLATg/5CsF/KpgO8LsE2m71d3QZpOwRYiDZhn0EXSQ=
Subject key identifier: 61:6F:84:F6:01:78:27:47:BC:92:61:0C:8C:E0:FF:4F:A9:99:A2:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DA1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YW-E9gF4J0e8kmEMjOD_T6mZolY.roa
Signing time: Thu 02 May 2024 02:23:39 +0000
ROA not before: Thu 02 May 2024 02:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19873 (0x4da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 02:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=616F84F601782747BC92610C8CE0FF4FA999A256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:34:a7:d7:45:b5:b3:f6:14:6b:c3:9f:ae:
11:a3:15:e3:b9:f6:61:8a:0a:83:72:80:f1:d2:fc:
5d:9d:05:73:38:69:45:30:43:21:81:a9:ae:35:b5:
43:88:e2:50:a1:6b:c3:5d:cd:7e:2e:5e:be:b0:bf:
c5:fc:4c:b0:f8:59:cc:de:10:4d:2d:c6:a7:f5:ba:
3a:01:3a:48:ad:b9:05:60:c6:40:52:ea:b9:48:94:
c0:60:78:bd:79:e6:ba:04:02:a5:cc:11:3c:4e:cd:
5f:3d:e7:61:d1:1f:67:da:6b:a0:b7:78:34:d3:fd:
b6:c6:4b:da:ca:86:a9:7a:fa:a0:9e:79:59:70:04:
32:32:4f:8a:43:60:92:c0:c7:4c:0e:f8:15:56:f4:
ce:24:ab:fa:95:55:7b:cc:aa:f0:b8:f2:ff:b5:31:
59:1b:65:e7:57:42:e6:58:a3:e6:71:12:61:44:aa:
98:0b:2d:c8:68:d2:3f:ee:6c:0a:a2:54:f7:60:50:
5e:45:6e:ed:c7:ae:82:a2:40:98:71:e0:31:fe:b5:
e6:b2:48:48:5b:57:7c:47:de:53:d3:40:9b:1f:6f:
de:cd:da:dd:9d:df:de:15:fe:dc:84:41:c9:37:39:
ea:73:32:76:b3:39:b3:9b:4c:d8:a8:9f:50:41:5f:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:84:F6:01:78:27:47:BC:92:61:0C:8C:E0:FF:4F:A9:99:A2:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YW-E9gF4J0e8kmEMjOD_T6mZolY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
35:cd:85:18:b1:2d:cf:0d:57:94:d2:ec:49:a7:7d:3d:7f:71:
22:36:4f:9f:e2:dc:83:4d:87:27:19:ad:27:68:a4:90:c6:42:
1c:49:85:a9:0b:74:e0:f8:e3:dc:1d:23:f0:c1:ef:5b:0c:3b:
85:df:85:44:90:5c:b7:50:4b:41:88:a8:0b:8f:44:cc:28:10:
08:4a:d4:0d:ad:7b:b1:2f:81:bd:cb:63:36:d7:c7:4a:26:f6:
b4:43:fa:96:64:fb:d4:ee:c5:01:44:f6:4d:53:e9:07:0a:91:
74:d3:1c:49:dc:d3:7f:7e:97:a7:24:09:63:9f:7b:f0:94:37:
4b:9a:47:d6:9a:42:65:48:84:88:28:61:02:37:6f:e0:46:7c:
8a:85:c6:99:8f:6a:85:7e:31:da:ea:c8:82:6f:4a:fe:1d:07:
ed:74:ae:d6:5f:04:ed:8a:30:10:35:60:44:fe:69:c2:21:14:
52:8c:8b:75:66:0b:69:16:94:02:6b:ae:a7:91:ba:5e:e8:c8:
16:07:2c:cc:87:7a:ff:e3:72:e2:f5:75:f4:1c:e7:98:07:d4:
b9:55:eb:14:d8:6b:07:65:e4:44:75:ea:b8:44:8c:3f:66:b5:
3f:a5:ae:d4:0f:1b:e2:a3:f4:3e:17:64:0e:98:71:19:2e:da:
a9:36:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:19 2025 by rpki-client