Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_kZT3kew-dFFuSF434GGTSDah48.roa
File: _kZT3kew-dFFuSF434GGTSDah48.roa (raw, json)
Hash identifier: XfIq2hVzigN7c30KEOVXxinrNL/35P6mudYaCOBtcLU=
Subject key identifier: FE:46:53:DE:47:B0:F9:D1:45:B9:21:78:DF:81:86:4D:20:DA:87:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5259
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_kZT3kew-dFFuSF434GGTSDah48.roa
Signing time: Wed 08 May 2024 09:23:56 +0000
ROA not before: Wed 08 May 2024 09:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21081 (0x5259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 09:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE4653DE47B0F9D145B92178DF81864D20DA878F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:4b:15:1c:e5:15:3b:b1:88:60:bb:bb:18:
f8:ef:e9:27:9f:bb:f9:73:50:54:ac:04:df:21:c7:
28:e0:bd:0a:e6:a8:89:c1:5c:9a:cc:f9:d5:66:25:
8f:7f:d3:ca:ca:2a:f5:52:79:1e:9e:bd:2e:fc:58:
5d:5f:d6:6f:60:0e:ab:f7:95:4d:6e:c8:c9:39:4b:
99:f6:80:40:05:48:90:98:3c:45:ed:e9:cc:f0:83:
40:a8:03:41:ad:da:44:20:dd:aa:0a:98:ed:fb:b3:
b4:b3:be:a5:35:c4:b1:ab:dc:37:51:b3:53:32:22:
91:9c:4e:95:46:60:76:d7:58:f0:94:6f:9f:25:7a:
ff:3d:e8:2c:43:4c:3b:66:18:20:45:a7:23:da:78:
72:33:fe:a3:c0:12:c0:31:de:33:07:46:96:f2:06:
66:58:79:cf:35:94:17:d8:bd:e0:35:68:c8:1b:4d:
bc:72:f1:f1:47:27:ef:3a:e1:ee:f5:01:16:62:02:
fa:69:98:ff:00:58:d7:24:58:74:d0:b4:4d:97:e0:
19:c9:18:5c:fb:fa:3e:74:19:1a:bc:5e:8e:76:39:
89:7a:4f:9e:28:77:14:12:82:d0:d7:33:3d:77:5c:
18:fb:ba:58:12:12:8f:24:ce:2a:26:dd:df:34:25:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:53:DE:47:B0:F9:D1:45:B9:21:78:DF:81:86:4D:20:DA:87:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_kZT3kew-dFFuSF434GGTSDah48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
16:00:d7:e3:84:c0:e4:d1:65:6b:df:58:03:e6:9f:4a:b6:e6:
65:52:cb:d0:f7:96:38:7a:3b:ed:3f:aa:fe:8a:5b:e1:8a:31:
8a:bb:a7:75:62:7b:1c:36:56:77:e6:ae:db:e6:c5:66:15:7f:
d5:34:ab:c6:65:54:ba:bb:e6:32:29:94:2f:2e:83:7c:bd:39:
5d:9c:21:91:b4:35:d5:69:a2:f2:4c:e8:bf:53:d7:6b:2a:67:
6d:ff:3c:f9:cb:87:0f:1e:76:73:58:06:df:da:1f:01:dc:a7:
79:28:3a:45:4d:76:ad:8e:4d:18:a9:1d:f3:bc:1c:10:3a:77:
92:ae:fb:ad:2b:26:5b:83:c8:37:0e:32:08:c5:74:38:b9:6a:
2a:f3:74:97:48:8c:dc:84:c8:a9:f6:98:5f:d0:50:00:1d:a0:
f8:90:b3:4d:40:78:92:2a:49:51:d8:ca:79:75:0f:24:b2:7d:
e4:83:09:00:e0:0a:ec:cb:15:61:d1:ff:60:8b:14:d2:4c:95:
34:1d:91:bb:6c:5b:54:fe:01:c7:28:7c:e3:3c:09:5c:17:d1:
98:a7:ec:69:66:5a:29:77:eb:33:15:57:8c:f5:ec:dc:b3:16:
06:b0:6c:81:8f:5d:f7:a4:4f:0c:49:1f:8e:df:de:19:5e:1a:
6a:64:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org