Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c4oicJmGYjcV1wVoE9P8W6vZrH0.roa
File: c4oicJmGYjcV1wVoE9P8W6vZrH0.roa (raw, json)
Hash identifier: IDO1PxbtEQeV5Yv0bCYbGHoQbprapz3iojd2VAn1Kzk=
Subject key identifier: 73:8A:22:70:99:86:62:37:15:D7:05:68:13:D3:FC:5B:AB:D9:AC:7D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3511
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c4oicJmGYjcV1wVoE9P8W6vZrH0.roa
Signing time: Sat 30 Mar 2024 08:22:16 +0000
ROA not before: Sat 30 Mar 2024 08:22:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13585 (0x3511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 08:22:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=738A22709986623715D7056813D3FC5BABD9AC7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:a7:c5:5b:c9:ef:05:f5:b9:5b:e8:e2:3f:
8a:52:c1:fd:8e:99:51:96:f2:5a:16:32:7f:ac:39:
39:ea:1d:8d:44:90:f7:44:c6:9c:a6:b7:cb:e7:ca:
31:20:91:00:56:b7:9f:a9:b0:2a:7b:47:98:46:91:
84:f4:b2:25:b7:61:6f:36:d2:dc:84:33:ec:12:f0:
12:b8:c1:a2:96:62:70:e0:58:68:e1:72:33:e4:ce:
9a:b1:ea:cb:ce:9e:fd:59:83:ea:5d:18:65:ed:64:
a9:1f:d3:d2:95:99:32:ef:64:a3:c3:19:da:bb:f3:
64:62:45:45:0d:28:3e:e6:ee:89:99:56:58:03:bd:
2e:20:fa:70:0d:72:08:50:c4:37:3f:72:e1:01:e7:
78:20:44:d9:63:26:b4:aa:e7:03:9b:30:8a:94:2e:
ae:a3:d7:cc:83:0a:4b:6a:f1:4f:8b:0a:35:dd:7e:
10:93:94:45:02:9b:6f:db:ac:8e:93:e8:6b:5b:fe:
1c:4f:78:ad:8f:b6:94:d4:bd:b9:fd:5a:95:b0:9b:
52:81:a7:60:94:53:8f:70:53:a8:fa:19:bc:10:df:
7b:87:1f:9a:fa:4b:23:72:f0:30:56:83:48:2b:5e:
5e:5b:35:ff:4b:72:1a:bf:84:67:73:6f:cc:62:97:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:22:70:99:86:62:37:15:D7:05:68:13:D3:FC:5B:AB:D9:AC:7D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c4oicJmGYjcV1wVoE9P8W6vZrH0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
61:0f:4b:57:69:e3:2b:19:dd:f8:03:2c:a8:d1:2a:e0:14:79:
f3:6e:90:42:49:1f:ad:34:3b:0a:0f:fe:1d:92:0a:14:82:1c:
98:b3:c3:9f:0b:f8:2e:e9:81:65:a8:60:92:ca:8e:0a:fa:26:
56:af:d2:79:db:e4:ce:f7:94:72:96:f0:36:c9:ac:d1:1b:91:
b8:77:bb:a8:fa:05:04:7e:3d:a0:3e:97:5f:d7:2f:df:a9:27:
3b:ab:b5:56:f6:46:66:17:5a:aa:ee:1d:c6:1e:db:a3:bc:eb:
70:93:cb:46:76:d5:30:f3:2d:a8:39:81:a5:5a:38:dc:36:a6:
cf:e4:56:47:05:c6:eb:ad:58:bf:be:71:5b:f2:ca:c7:8e:07:
86:8c:c1:19:a3:3d:2f:c0:05:79:8f:ad:e3:a7:38:f4:a3:10:
aa:3b:d1:98:a2:84:66:c6:d2:53:8f:97:7a:a1:a3:5c:37:d1:
27:47:30:14:61:1e:66:89:a1:7e:5f:e7:14:8e:0c:70:ed:72:
ba:e8:9b:45:2b:a1:3d:05:96:d2:c4:32:9d:af:6a:bc:d3:c4:
1c:77:57:8a:cc:95:07:ec:8b:42:ea:97:8f:22:ba:3e:56:cd:
90:2c:2e:8c:cd:4a:23:03:29:9d:30:e2:04:42:2f:66:9f:9e:
54:24:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org