Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ylg4ifDQBlRoT7ZW307OijIlurc.roa
File: Ylg4ifDQBlRoT7ZW307OijIlurc.roa (raw, json)
Hash identifier: 4fU9P9U2iAUnBhhuKWVj9tZmPHVPKN3dp4rRvFNk8W8=
Subject key identifier: 62:58:38:89:F0:D0:06:54:68:4F:B6:56:DF:4E:CE:8A:32:25:BA:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B75
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ylg4ifDQBlRoT7ZW307OijIlurc.roa
Signing time: Sun 07 Apr 2024 20:52:33 +0000
ROA not before: Sun 07 Apr 2024 20:52:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15221 (0x3b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 20:52:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=62583889F0D00654684FB656DF4ECE8A3225BAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:7c:de:78:2d:bf:98:04:ee:83:ac:1c:89:
23:f0:09:15:9a:9f:1c:bb:15:3b:09:bd:c5:72:bd:
a2:10:1d:cc:dc:05:3c:53:11:80:d5:b3:81:69:16:
7e:4c:79:8f:1c:31:42:07:e4:c7:bc:e4:43:b6:7e:
4d:fa:9e:0a:f9:18:71:39:9b:e1:fc:02:55:ed:b9:
e7:7d:28:31:c5:40:77:4f:83:97:ee:06:7a:c8:71:
9b:0b:fb:c0:99:32:d8:1c:93:04:f0:d2:7a:4c:8c:
ce:0b:ec:4f:1d:7f:56:74:2e:49:17:af:f3:09:83:
38:36:a5:e2:79:5a:6b:bc:f5:73:4b:a4:ac:6f:22:
2c:d2:eb:66:9d:ed:71:4a:59:ad:4a:26:6b:da:41:
1d:38:2f:3d:27:f5:93:43:3f:1f:68:b3:4d:4b:bb:
0a:2b:76:9f:74:dd:77:5c:a6:5d:b6:02:e4:e6:d1:
89:ae:38:db:4a:4e:d4:d8:46:df:f8:5f:c5:b2:65:
92:83:48:b6:00:2d:d8:12:31:81:d1:66:01:92:2b:
a0:3a:ac:65:24:1b:a0:68:6b:0b:0e:75:a0:0e:60:
2a:1d:da:f8:f4:c0:6a:4a:e8:5c:a8:9c:2e:fa:ec:
59:fb:07:bf:9f:fc:20:07:1b:f4:2f:98:68:f0:43:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:38:89:F0:D0:06:54:68:4F:B6:56:DF:4E:CE:8A:32:25:BA:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ylg4ifDQBlRoT7ZW307OijIlurc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:3a:b2:4e:1e:73:43:0c:ce:3c:3b:55:40:4a:a1:b2:c2:66:
20:35:28:9f:f9:d3:10:80:f6:42:dd:be:43:3f:8d:79:8c:7f:
86:1a:a0:d5:fc:30:26:2e:4f:0a:0b:37:e7:1f:76:3e:6e:08:
e1:e7:2d:70:87:65:3b:a6:d9:d3:fb:4d:ec:db:a6:8d:b0:d5:
4a:c7:f1:0d:0c:bd:d1:1d:e9:a6:5e:de:d9:be:44:e6:73:f5:
9a:12:a9:b2:60:fe:bb:24:80:cc:a0:ae:a6:2d:f2:d9:a2:ac:
bc:7d:12:4d:e7:6a:e6:43:9c:19:e7:05:41:ca:c7:fa:0f:c4:
48:c4:f7:5e:94:3f:37:1a:59:72:10:ac:58:46:33:8c:06:40:
ac:ab:66:3f:f9:b2:38:03:20:b8:bb:dd:36:0e:3a:b1:fb:65:
2c:4b:3b:f2:d1:57:a4:1f:92:36:3e:fa:1f:91:74:7c:65:37:
7b:0c:64:58:8c:9e:d8:58:2f:9f:4c:30:16:24:0c:fd:26:21:
00:cf:91:0d:fe:d7:80:b4:cd:b7:a2:a1:cb:6f:f5:4d:2f:1c:
5e:3e:40:02:ee:fb:b3:a9:55:f6:80:47:cd:59:6e:c0:26:12:
1e:66:c6:77:96:33:81:81:a0:80:38:f6:1a:e8:3c:83:ac:d6:
81:76:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org