Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_hf8wk_DK4P3MSDm5JmAJClqc9g.roa
File: _hf8wk_DK4P3MSDm5JmAJClqc9g.roa (raw, json)
Hash identifier: EhOvFplhFZ+KCjSbok7LL2wme+kQTb8r7myBads2d4g=
Subject key identifier: FE:17:FC:C2:4F:C3:2B:83:F7:31:20:E6:E4:99:80:24:29:6A:73:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F29
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_hf8wk_DK4P3MSDm5JmAJClqc9g.roa
Signing time: Sat 04 May 2024 03:23:58 +0000
ROA not before: Sat 04 May 2024 03:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20265 (0x4f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 03:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE17FCC24FC32B83F73120E6E4998024296A73D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:3f:b0:6e:94:03:be:b4:cc:7d:2c:ca:ee:
81:9c:13:46:8f:43:31:ad:95:19:9d:7d:40:ac:f2:
81:bb:32:43:18:f4:9d:54:70:62:fd:7f:42:38:2b:
30:86:0e:0a:13:78:e4:a3:9d:af:74:dc:8e:d8:5f:
82:5d:6f:54:c3:d4:48:87:41:d3:7b:1f:fd:d5:75:
82:7f:bc:d7:9e:69:c2:4c:a2:bd:b1:36:fb:84:61:
54:9a:61:ee:c5:a1:92:2c:b5:f2:ee:29:aa:45:a3:
e4:17:e5:bc:0e:fe:c5:22:af:fa:e5:5d:67:da:b3:
44:cc:13:74:b9:73:f8:5e:c0:a5:e6:ad:17:2e:f8:
3e:b8:42:c8:41:0e:b5:1d:98:4a:df:58:0c:53:4c:
cf:fd:78:2d:e1:3c:4d:97:59:8c:fe:27:78:fb:36:
b4:12:17:89:f5:2e:b4:6d:6c:11:69:65:7b:c5:bc:
6b:8b:7d:5b:77:cb:de:87:d2:65:ea:d8:a6:b3:b3:
20:e9:dd:be:73:4f:4a:fb:d7:3a:72:da:ff:cb:92:
25:a3:73:17:f5:86:ca:32:8a:57:75:49:00:df:b5:
5d:2a:9e:8c:04:4b:96:42:fd:94:67:43:57:bc:8f:
c8:33:62:b7:d2:87:fe:a4:05:5c:d9:1d:5a:9e:1b:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:FC:C2:4F:C3:2B:83:F7:31:20:E6:E4:99:80:24:29:6A:73:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_hf8wk_DK4P3MSDm5JmAJClqc9g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:64:c6:49:22:47:02:72:41:78:03:80:29:9b:10:66:e8:b8:
78:3b:4b:ef:9d:40:c2:f7:9d:25:dd:77:5c:fe:7b:1e:50:f8:
8d:66:87:a3:55:08:1d:ad:c7:39:b7:db:1e:8b:41:cb:a1:fe:
02:f5:30:f0:e5:8d:6d:c1:26:43:02:78:63:1b:f7:5e:2d:47:
b9:b3:33:e7:1c:06:8a:8b:87:32:2a:83:d4:de:8d:a5:7b:e6:
9e:89:3a:93:6d:d7:1f:82:b8:bb:5e:c5:a6:f9:79:3a:ec:74:
86:5d:94:45:53:40:6f:42:16:63:7a:6d:6a:44:69:38:e9:07:
c2:ce:0c:c1:50:2e:a6:56:eb:b7:cf:ec:c9:ae:c4:96:d4:63:
67:fb:9c:fc:da:f7:c8:e9:6c:89:6a:5c:d8:c6:60:dc:7d:99:
e4:42:09:b6:35:d1:c3:22:6a:62:29:1c:dd:a5:ae:be:cc:33:
80:bf:f3:08:ee:84:0c:5b:1b:69:a1:aa:4e:7b:9a:2f:f2:cf:
3d:e1:c9:de:2a:d9:d9:e4:d5:db:a1:3b:58:88:70:20:4c:98:
ad:4c:6e:ef:37:51:f6:34:81:f3:6c:9c:20:07:6f:a1:bf:e0:
a4:ca:7b:b9:95:a2:63:4b:65:b9:0b:ee:d7:0d:10:60:8d:a5:
c6:4b:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:53 2024 by rpki-client on console-ams.rpki-client.org