Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_W-jUw_LzIjt5Z9_Xk6tX95iUCA.roa
File: _W-jUw_LzIjt5Z9_Xk6tX95iUCA.roa (raw, json)
Hash identifier: 1aGWbUYv9+7HXE/cu3auUb6abxewe7E03iZVdHhExEw=
Subject key identifier: FD:6F:A3:53:0F:CB:CC:88:ED:E5:9F:7F:5E:4E:AD:5F:DE:62:50:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CC1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_W-jUw_LzIjt5Z9_Xk6tX95iUCA.roa
Signing time: Tue 30 Apr 2024 22:23:35 +0000
ROA not before: Tue 30 Apr 2024 22:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19649 (0x4cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 22:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD6FA3530FCBCC88EDE59F7F5E4EAD5FDE625020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:c6:96:e4:16:8c:dc:b8:e1:49:8b:27:19:
7f:0c:88:1f:27:64:c5:12:c3:f0:76:75:69:47:5a:
e5:58:a9:53:2c:96:f5:b4:70:be:e5:31:4d:a9:2e:
f3:58:a2:3e:3a:da:0e:77:e0:4f:5f:e7:3c:fe:a8:
af:3d:db:42:2c:9a:2e:bb:a0:45:d4:1d:62:15:24:
f0:9f:66:37:72:14:44:e2:70:0c:b3:a4:4c:c5:5c:
00:e0:cc:9f:ee:fb:af:6f:59:50:70:89:5e:6e:f4:
1b:3f:83:9c:c5:05:70:9e:ff:72:20:be:68:dc:20:
3b:73:8d:59:5d:08:58:cb:7c:2d:cb:27:9e:c5:18:
0d:77:ca:7b:72:01:f2:b2:23:a8:fb:4b:25:a8:bb:
f2:59:67:88:a3:54:fa:74:cb:a5:43:fb:f9:1a:81:
d5:69:a5:4c:d8:d3:dc:25:68:ed:3b:5b:ea:5b:09:
c5:32:6c:06:3e:b0:32:39:3b:43:72:7d:18:0a:67:
45:55:5d:2d:83:9b:03:3c:bf:26:ec:b7:a5:8e:6b:
75:32:44:c7:c3:c8:c5:c3:77:11:b9:e1:fe:6e:69:
ba:89:bc:0d:89:ea:1f:36:41:1b:d1:e9:d3:d8:a6:
75:4c:70:d4:e3:df:c2:db:51:d4:6a:04:99:56:12:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:A3:53:0F:CB:CC:88:ED:E5:9F:7F:5E:4E:AD:5F:DE:62:50:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_W-jUw_LzIjt5Z9_Xk6tX95iUCA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:fe:6a:15:b2:14:da:0d:cf:dd:00:0e:97:e8:5e:43:03:6e:
71:59:d2:89:53:f2:c5:ba:23:8b:2d:c4:12:39:75:07:f2:cc:
df:be:1d:38:c6:54:22:42:e3:45:df:b6:6f:94:12:24:45:95:
02:b4:b4:74:56:20:d6:96:af:ee:12:0b:d5:d9:65:ac:34:ee:
54:12:54:00:bb:9b:ea:03:6f:a5:e0:ce:47:4d:bb:16:dc:5e:
d9:1d:83:83:99:10:65:c1:2b:55:6f:6b:22:8f:3f:a6:fd:9a:
2f:ad:d9:ba:32:f2:ca:5e:d7:30:0e:c4:a2:4d:ff:a4:c9:ec:
06:a4:ad:da:1d:2f:e2:c8:8a:8b:2f:4c:68:89:9d:b2:16:a4:
50:24:f8:1a:22:d1:4d:34:5b:09:36:59:b1:78:d1:04:bf:82:
92:45:90:e6:31:c7:4e:ff:db:04:13:cf:9d:69:24:7e:d2:c4:
dd:9a:c8:39:79:84:50:5a:61:68:e4:ad:fc:e9:c0:32:06:52:
ef:89:33:5e:7f:f2:b2:a2:10:08:32:0b:fd:56:96:be:8c:25:
f0:cb:1c:c3:38:ce:0f:37:2e:4e:35:df:87:09:4b:35:84:a3:
dc:39:d6:c3:3c:d1:91:bd:f4:b2:bc:5c:03:1b:00:72:5d:91:
73:7b:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:52 2024 by rpki-client on console-ams.rpki-client.org