Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/alOwz9pN6D4R3u9ueTjwchJ0kQs.roa
File: alOwz9pN6D4R3u9ueTjwchJ0kQs.roa (raw, json)
Hash identifier: BIjp4xRGQx+GEgaDM/Dz47ZSt0Lt8v2AzgJfKnFIwn0=
Subject key identifier: 6A:53:B0:CF:DA:4D:E8:3E:11:DE:EF:6E:79:38:F0:72:12:74:91:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3661
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/alOwz9pN6D4R3u9ueTjwchJ0kQs.roa
Signing time: Mon 01 Apr 2024 02:22:37 +0000
ROA not before: Mon 01 Apr 2024 02:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13921 (0x3661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 02:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A53B0CFDA4DE83E11DEEF6E7938F0721274910B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:f2:28:67:db:a0:30:f2:7a:4a:7d:53:32:
34:a2:c5:1e:bc:ec:49:44:02:6c:24:12:aa:7a:6f:
95:30:92:6a:74:75:f3:dc:90:24:eb:d8:d4:5e:69:
21:8e:53:7b:80:99:42:c8:57:fa:fd:bb:69:8a:65:
35:cd:31:bf:44:3d:2e:5c:b9:82:f4:c5:8e:11:60:
14:1d:0e:9f:7d:50:6c:7a:67:a0:73:23:f1:5d:0e:
58:c1:35:71:cd:ef:b6:66:33:83:f2:4b:ab:77:7e:
da:f1:67:fe:45:c5:36:0b:0f:24:80:8a:2b:c5:4b:
3c:c5:94:d6:3e:61:ae:ee:d6:30:d4:bb:de:4b:99:
68:0a:1d:f1:a9:d8:90:87:f6:d1:54:54:e3:52:6b:
73:18:cf:9c:ed:ef:3f:41:5e:ff:01:b3:ac:ba:15:
0b:c2:d6:f4:76:d9:fb:0b:e5:ef:de:7d:5b:11:21:
4c:eb:cd:f0:34:a8:32:30:c4:3e:eb:d9:c7:b3:79:
06:5d:5d:25:00:6f:a3:48:0d:70:da:d5:c9:e7:06:
b5:84:16:75:87:32:49:8a:b9:de:e9:78:a4:f4:1a:
5b:01:15:8c:4a:fd:7d:90:51:bd:35:aa:18:ce:37:
e6:08:1f:48:f4:5c:03:12:eb:ae:ae:af:0a:ab:bc:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:B0:CF:DA:4D:E8:3E:11:DE:EF:6E:79:38:F0:72:12:74:91:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/alOwz9pN6D4R3u9ueTjwchJ0kQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:eb:62:82:cd:6c:8a:78:68:e8:23:2f:d8:0d:7f:7d:58:94:
19:a6:df:f1:b3:d0:7c:2b:ee:36:80:44:11:16:ab:a0:73:d8:
6a:6e:7d:c4:58:4e:cd:fe:67:4b:b6:11:1c:4a:bc:59:ce:9f:
23:e4:ef:82:48:88:1e:0d:31:f6:93:ed:e9:e4:bc:fb:02:f5:
22:95:a9:14:ba:72:f5:0d:64:f2:b8:a8:01:67:bd:45:05:50:
61:3a:47:6f:3a:2e:3a:dc:8d:56:c9:eb:4b:22:12:15:a3:70:
b6:10:b8:5f:5d:07:c5:fb:06:56:3b:e9:51:f6:7e:2e:ea:99:
35:85:fa:41:c9:ed:65:a4:f9:09:ab:0e:35:9f:d2:d0:e5:07:
a3:75:df:ad:89:77:9b:a5:45:5c:a9:9c:18:26:38:6a:93:57:
ee:1e:e1:ed:5e:9d:26:12:33:6a:34:ae:a6:ba:71:a2:7d:0f:
5c:a6:a2:ea:fe:9b:b1:72:4c:27:55:fb:1f:fc:46:f8:28:07:
6e:51:9f:9c:51:4f:a7:7d:a8:a2:fe:4d:f9:0a:a8:3c:eb:d6:
0d:88:f8:9c:b6:90:7b:65:3c:bc:f6:ef:dd:fb:62:9a:f6:a0:
10:5e:a0:c2:92:4c:48:82:8b:94:00:d9:fa:60:f3:d9:e5:f2:
a1:01:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:54 2024 by rpki-client on console-ams.rpki-client.org