Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bJaBHFCprZE4yWq3FpGKGo5VAYw.roa
File: bJaBHFCprZE4yWq3FpGKGo5VAYw.roa (raw, json)
Hash identifier: UNZcN2o7Ry/zwonIAbPCixA9ZDnqzxToof41oJ5ANEY=
Subject key identifier: 6C:96:81:1C:50:A9:AD:91:38:C9:6A:B7:16:91:8A:1A:8E:55:01:8C
Certificate issuer: /CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Certificate serial: 20DD
Authority key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bJaBHFCprZE4yWq3FpGKGo5VAYw.roa
Signing time: Fri 21 Jan 2022 02:14:09 +0000
ROA not before: Fri 21 Jan 2022 02:14:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8413 (0x20dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Validity
Not Before: Jan 21 02:14:09 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6C96811C50A9AD9138C96AB716918A1A8E55018C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:be:fb:d3:94:b8:55:c2:ca:a7:17:2f:79:
14:68:ec:ca:f2:95:7f:c9:df:93:26:89:f7:08:ce:
0b:8d:f1:3f:a6:f1:23:d9:d5:d1:d2:61:42:28:28:
b4:ef:1a:4e:32:16:f6:26:3c:c7:55:fd:71:05:d0:
df:1c:69:09:82:3c:b1:f4:97:63:d8:ea:78:9a:4c:
c5:42:af:51:40:68:26:e9:94:12:57:87:27:88:58:
03:f2:ff:a6:5e:51:32:33:c5:7f:4e:b2:f3:be:50:
99:cc:b5:09:40:18:94:0b:c8:f1:8a:87:b8:4d:ac:
09:d2:ce:16:90:08:b2:59:be:52:c6:ab:48:75:a7:
de:cc:f6:38:3c:93:d7:cf:56:c9:3c:8b:58:33:68:
2b:f6:ea:e7:ea:14:7b:0b:10:10:bd:b0:9e:b4:14:
1d:e5:8a:d7:02:43:c3:70:e1:f7:ea:ce:3d:1f:86:
6a:9d:5e:83:23:ca:1e:60:64:67:32:a0:b8:fb:14:
15:52:67:d8:03:c0:b8:22:2d:7e:95:10:db:b6:7a:
28:a1:df:48:64:72:0d:2f:75:4e:97:9b:10:da:ad:
2b:4e:ce:21:6e:17:41:56:68:d4:84:82:73:00:e1:
04:5e:43:57:0b:05:99:da:c1:19:a8:d0:fb:0d:ef:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:81:1C:50:A9:AD:91:38:C9:6A:B7:16:91:8A:1A:8E:55:01:8C
X509v3 Authority Key Identifier:
keyid:51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bJaBHFCprZE4yWq3FpGKGo5VAYw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
65:6b:fd:d1:26:09:e0:5c:3f:2e:87:d0:ed:a6:82:9d:0c:ea:
1e:e5:bd:66:19:08:49:a5:cb:dc:88:4d:e4:cf:f0:06:0a:32:
0f:38:38:bf:84:f9:85:b5:fd:65:dc:32:6d:38:d5:1c:1f:9f:
64:38:af:fd:5c:65:ca:7b:56:67:98:4e:88:a2:b7:a9:c2:b8:
72:a1:60:ec:91:f1:68:f5:1b:96:80:32:fe:4e:80:e5:ec:4c:
9a:54:9c:91:f7:91:b2:2b:71:9f:b1:b8:6f:df:5a:dd:b9:27:
41:5d:8a:e7:9c:ab:3f:03:75:86:d3:f7:ee:95:25:5d:a4:98:
1f:5b:60:f3:bb:b8:12:b5:7f:23:b1:f3:34:58:cf:5f:ba:d2:
f1:65:05:51:6e:c9:96:8e:38:d7:9a:7f:c6:b9:f0:bd:0f:5c:
67:56:c1:a4:dc:ee:a3:8e:1e:1a:cc:1d:56:8d:6c:28:2e:bc:
8f:92:d0:b6:68:cc:3d:8d:46:9e:cc:cd:ab:b0:02:b8:0a:5d:
b6:69:b8:60:ed:96:97:50:89:d3:dc:68:3a:b0:29:14:97:24:
4b:97:6b:ed:f3:46:a9:02:cb:c0:88:a7:9b:b4:79:a7:b0:17:
64:40:9c:db:a7:8b:94:9d:58:75:21:22:f7:1a:34:d1:3b:60:
d4:16:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org