Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c3OUIYIT6GAnumY9ozD-TVLc8Vg.roa
File: c3OUIYIT6GAnumY9ozD-TVLc8Vg.roa (raw, json)
Hash identifier: W6vQJHiYm0fpGIvdTCO0hz3nWSlLGNNnyJ9aehTewpA=
Subject key identifier: 73:73:94:21:82:13:E8:60:27:BA:66:3D:A3:30:FE:4D:52:DC:F1:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4119
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3OUIYIT6GAnumY9ozD-TVLc8Vg.roa
Signing time: Mon 15 Apr 2024 09:22:53 +0000
ROA not before: Mon 15 Apr 2024 09:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16665 (0x4119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 09:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=737394218213E86027BA663DA330FE4D52DCF158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:d9:be:32:b7:f7:6e:c4:e2:cd:61:fc:3b:
f2:7c:77:0d:91:8b:31:b2:73:64:6b:94:08:55:c5:
60:a4:33:7a:c2:13:d9:ba:b5:af:2f:9b:c0:63:5b:
28:62:26:fd:23:81:ad:52:15:19:28:3b:e7:1e:7a:
8c:ee:d8:5a:6b:25:f6:c5:25:70:f1:76:65:d1:11:
74:7d:92:52:6c:d3:ff:af:25:bc:b8:13:77:09:e6:
80:d9:31:cf:22:30:25:54:1e:5d:ea:f9:bf:85:12:
10:2e:e5:c2:ea:e0:27:38:b3:11:0f:41:bd:38:fc:
fa:2a:df:59:08:70:b9:e7:7f:b4:ac:ec:f0:48:c5:
b8:da:f3:64:b2:36:a1:03:c3:13:94:9c:f4:c6:78:
e6:fd:75:24:f0:4c:1f:16:c3:44:f3:28:da:e9:74:
e4:e7:8c:ae:08:9e:03:49:e3:2d:0f:da:2b:32:d7:
94:90:43:87:63:7b:9b:26:93:a4:2c:b4:a0:fa:09:
d1:39:eb:28:d6:17:cb:c7:c4:04:2d:10:c6:90:70:
c7:23:8a:5c:34:79:9c:f9:86:07:60:8e:ee:ce:e7:
29:9d:3f:91:5d:a6:91:31:69:fd:9f:25:76:19:ef:
89:5f:02:ed:46:f3:8b:71:45:bb:ea:b2:7c:97:ea:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:94:21:82:13:E8:60:27:BA:66:3D:A3:30:FE:4D:52:DC:F1:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3OUIYIT6GAnumY9ozD-TVLc8Vg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
52:a0:b1:ac:99:28:ae:40:d9:d9:12:af:c8:de:c2:49:33:0c:
c0:4e:ed:29:c6:7c:f4:e4:3c:91:b4:c0:35:6b:8d:2b:f6:9f:
1e:9a:98:31:9b:c8:09:92:ab:52:65:a9:cf:c8:5c:11:ae:c1:
bb:e4:37:e0:33:fb:13:95:de:37:2f:f1:57:b4:01:63:cc:cb:
55:8c:16:1d:c0:18:d1:64:3e:6f:03:a8:57:20:b3:4b:8f:91:
56:3b:4f:23:c9:ce:26:6e:e1:ad:de:26:24:c6:90:4c:53:79:
f9:e9:9a:a0:49:42:2b:cc:50:3b:e4:54:99:6f:e6:18:ef:7c:
db:13:07:02:6b:94:e4:c3:45:a6:de:0f:02:10:53:29:9e:20:
76:5a:a3:af:ab:fb:63:51:42:e1:b3:0b:8e:83:02:ce:9e:26:
37:42:1c:2b:ee:28:07:05:0c:c3:cd:84:7f:78:3f:de:ce:0a:
7f:07:7b:98:3b:11:9b:d0:92:d5:fc:82:78:50:1c:fd:58:0b:
9d:a4:0e:50:f0:0e:3b:cf:a5:0b:f4:cd:1c:b7:25:cb:70:c8:
6f:bd:a1:3b:f0:8d:5d:9c:f2:a3:cf:8d:d8:f9:37:9b:83:f3:
15:2a:85:8d:43:1d:c7:b9:30:b7:41:cc:02:5c:24:85:8e:2d:
77:b7:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org