Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_hN4EHm1_yqvkZJYdK3DJlgfFcw.roa
File: _hN4EHm1_yqvkZJYdK3DJlgfFcw.roa (raw, json)
Hash identifier: xvDeNWCWbdZKXG3GA77T5AX6zCvNYegLknj/fVK8puc=
Subject key identifier: FE:13:78:10:79:B5:FF:2A:AF:91:92:58:74:AD:C3:26:58:1F:15:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5779
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_hN4EHm1_yqvkZJYdK3DJlgfFcw.roa
Signing time: Wed 15 May 2024 05:24:10 +0000
ROA not before: Wed 15 May 2024 05:24:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22393 (0x5779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 05:24:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE13781079B5FF2AAF91925874ADC326581F15CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:3d:1e:0a:0d:bb:61:12:7a:cc:78:da:a1:
68:f1:17:39:c8:26:c9:4f:a6:12:bc:c1:6f:14:e6:
ce:88:a7:5e:b0:37:fa:34:7e:0c:2b:b5:07:72:1a:
24:1b:9e:68:73:c5:62:67:e0:0e:02:ea:c0:36:a7:
84:6c:ec:b4:3f:62:a9:5a:ec:15:9a:a5:f5:c6:2e:
6a:e3:eb:73:76:db:cc:2d:45:7c:0a:14:d0:b7:39:
a8:bf:93:88:fd:80:70:5d:02:6b:56:79:b2:a8:20:
b1:6f:56:25:de:5c:0f:a4:e9:74:42:81:6b:ff:2f:
39:90:3d:e6:dc:f4:ff:01:04:4e:60:fb:ab:62:fc:
98:be:d6:58:e3:c1:6d:da:18:5d:77:26:a1:0f:fc:
9b:7d:d4:a3:4c:f3:85:fd:d5:1b:7c:3e:a1:b1:65:
67:a5:a6:99:6b:5e:6b:a6:06:64:f3:1c:93:74:60:
e5:15:cc:40:6e:2c:9b:0b:e5:43:08:b3:7d:20:c4:
8d:bb:60:b7:00:e8:75:b8:ed:ee:6f:fc:32:aa:58:
e7:05:a1:3b:30:f0:7c:b2:29:c3:b6:4e:3d:fa:0d:
51:86:db:22:5e:0b:ff:c3:7c:10:16:fd:a4:65:9d:
6c:cb:5d:72:0e:77:cd:59:4b:b8:f3:14:db:3b:b9:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:78:10:79:B5:FF:2A:AF:91:92:58:74:AD:C3:26:58:1F:15:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_hN4EHm1_yqvkZJYdK3DJlgfFcw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:cf:22:fa:bb:9d:75:09:83:fd:d8:24:94:56:a6:7b:c1:37:
2e:d5:ab:db:1a:ce:ec:66:4e:07:9e:fb:de:c1:72:81:d7:49:
07:b9:7d:b3:e6:b9:cb:4f:b1:83:49:10:95:1d:92:67:a8:77:
a6:5e:81:45:22:a3:22:8f:0c:e2:90:f3:2f:a5:95:f9:0b:7c:
c7:91:d6:92:5e:71:9f:49:39:b2:78:50:bd:cd:ec:b1:cf:96:
4a:f0:44:1f:e9:cb:dc:fd:ab:b8:9a:43:bd:59:9e:25:fe:f1:
b4:5b:ba:4b:64:11:62:8c:f4:c5:33:b8:5e:35:b4:5e:4b:b6:
c2:8b:57:b5:a8:dc:8b:81:a8:2e:1f:8c:b4:ce:1b:3e:be:91:
9a:a0:1e:7e:eb:61:ec:d7:f1:d9:37:bf:17:57:d8:14:fc:80:
3b:02:64:ec:e2:51:3b:b8:91:64:80:e3:55:ea:ce:c6:23:58:
88:28:d5:36:22:f3:3a:73:48:af:01:ff:85:e9:05:97:5a:e4:
2c:02:87:4d:f2:fb:32:1b:27:0c:f7:96:b2:89:bc:8e:33:0a:
14:87:9a:c6:68:aa:e7:59:9c:81:be:53:fb:0d:23:aa:63:68:
94:22:fa:d4:7b:2e:f9:d9:f9:c1:c8:fd:d9:29:ef:11:08:92:
fb:9a:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:53 2024 by rpki-client on console-ams.rpki-client.org