Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_RIiRhPwXwdclWbBYMKtfEGF-Wg.roa
File: _RIiRhPwXwdclWbBYMKtfEGF-Wg.roa (raw, json)
Hash identifier: yM/yobRySQnIA15RAKTFgOB3UfPEEC2tbZm+8FW4Pxk=
Subject key identifier: FD:12:22:46:13:F0:5F:07:5C:95:66:C1:60:C2:AD:7C:41:85:F9:68
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E69
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_RIiRhPwXwdclWbBYMKtfEGF-Wg.roa
Signing time: Thu 11 Apr 2024 19:23:15 +0000
ROA not before: Thu 11 Apr 2024 19:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15977 (0x3e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 19:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD12224613F05F075C9566C160C2AD7C4185F968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:8e:9f:6c:8b:06:4d:30:fc:ae:4b:3a:58:
ff:7d:fd:3a:d9:41:4e:e6:52:60:28:63:84:24:92:
64:d2:9a:84:ab:65:4c:52:5d:6c:cf:91:cf:bb:6e:
af:b6:da:23:03:55:1d:cd:ae:60:77:59:3c:a6:53:
a4:c1:f1:39:47:66:3a:3a:b1:cb:0a:ce:e7:f2:2d:
63:13:97:67:dc:9b:5a:ee:98:ec:fd:44:07:50:06:
a2:cc:52:1d:c7:76:23:69:f5:12:1f:a0:a4:6b:79:
44:c6:67:54:7c:be:f8:48:bf:39:9d:8c:ab:d1:39:
7e:3c:ac:b9:26:ca:d5:6e:a3:d5:8a:ed:66:39:b1:
37:98:68:ef:ed:a9:7c:df:4e:e8:88:d9:29:1b:0f:
af:a2:92:00:91:1b:7b:4f:bb:fc:2c:62:b1:ed:8c:
3d:55:0c:57:2f:36:94:bf:52:54:9a:c7:ad:a8:65:
3f:8b:cb:e0:c8:de:61:b6:99:c1:dc:f6:e6:74:19:
c0:b5:3f:b0:0b:79:2b:67:bd:a4:ae:11:bc:90:e2:
2d:62:76:32:7e:f4:07:b5:71:3f:75:35:3b:1b:14:
fb:2a:34:bf:d8:c0:3c:12:b5:b5:b5:de:a5:62:76:
96:59:51:2b:01:54:82:7b:de:85:38:cf:0f:ef:e2:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:22:46:13:F0:5F:07:5C:95:66:C1:60:C2:AD:7C:41:85:F9:68
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_RIiRhPwXwdclWbBYMKtfEGF-Wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
69:f7:b9:6c:5b:48:02:db:2a:28:d7:93:a3:b2:14:54:44:4f:
09:79:7c:4d:a7:b1:6a:95:2e:0b:de:86:ec:fd:81:e5:c2:33:
d2:5c:ff:87:7d:89:57:cd:46:19:bf:39:10:70:c7:19:3e:2c:
49:af:26:bb:53:1e:be:91:72:2c:ba:d7:59:73:12:b6:f0:8c:
16:f3:98:55:70:2a:65:77:f9:76:6f:7e:32:ac:74:4b:9d:51:
e0:fb:40:53:3c:91:85:4f:fc:06:32:7b:28:6c:88:5c:0e:3b:
f8:7c:22:ef:4e:bc:9f:cd:03:2c:cd:4d:de:72:7a:b6:3f:b5:
67:1d:fc:64:6b:a0:7d:b2:61:83:6b:f3:f0:ed:60:64:fe:8f:
d5:b9:89:09:01:1b:7c:02:c9:a7:c6:a8:c4:15:76:da:e8:c1:
4b:bb:0a:9f:78:9f:94:8a:31:0d:1f:eb:33:f3:e6:b5:9d:dc:
80:33:57:93:5f:25:ab:cc:96:6d:bc:cd:cc:ac:fb:bf:07:f6:
49:35:e4:0a:80:d7:73:fd:01:e9:85:d7:d6:00:be:6b:ed:d3:
c8:4a:6c:47:a2:a1:f6:af:6b:64:94:fc:87:13:d2:65:cf:37:
32:c8:65:ca:db:87:d8:b7:93:11:6a:4c:fd:8c:8b:2b:6b:f4:
cd:e0:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:52 2024 by rpki-client on console-ams.rpki-client.org