Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c_lBe4UkHedHLjh90hvvlHXwLtI.roa
File: c_lBe4UkHedHLjh90hvvlHXwLtI.roa (raw, json)
Hash identifier: wISdcP5LU8wU06fjVkSDxyKtsOj4yRGC/4vF/RQJ5Ig=
Subject key identifier: 73:F9:41:7B:85:24:1D:E7:47:2E:38:7D:D2:1B:EF:94:75:F0:2E:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5731
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c_lBe4UkHedHLjh90hvvlHXwLtI.roa
Signing time: Tue 14 May 2024 20:24:10 +0000
ROA not before: Tue 14 May 2024 20:24:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22321 (0x5731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 20:24:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73F9417B85241DE7472E387DD21BEF9475F02ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:c3:0e:3c:56:68:9b:37:d5:5a:5b:58:f4:
68:f3:3a:4a:67:73:c7:78:29:1c:9b:bf:70:0e:ee:
dc:d7:ff:00:0e:2c:1c:24:e0:25:a4:bc:73:1e:8d:
43:ba:b6:aa:7e:c4:cd:0d:c8:bf:75:95:0a:c9:65:
5e:f3:9b:77:7b:86:a6:b2:d0:4c:ff:41:a1:a1:24:
09:0a:03:78:2a:a7:67:36:f8:f4:0f:ec:2e:9c:4c:
76:9c:9e:fc:17:eb:8f:68:73:6e:b4:81:f3:42:71:
12:e7:59:3e:e2:95:d4:25:9b:d5:eb:28:d8:4b:6c:
76:5d:fb:45:8a:cd:0d:ee:38:4e:5e:af:e9:41:d9:
f4:f6:b7:91:59:6e:bf:e7:1c:da:e6:46:1d:85:47:
eb:26:bd:f2:43:6a:aa:cd:ad:d5:95:2d:a6:a6:a0:
35:73:1e:c5:c7:81:cf:2b:5d:61:7e:ec:99:74:25:
4d:dd:cc:56:65:ca:b4:37:49:1e:85:7b:c3:56:6a:
26:f5:2d:1d:da:13:c5:f5:e9:cb:8b:59:ca:db:4d:
17:88:e9:1e:f7:00:c2:80:ad:ea:1a:1f:f9:33:62:
71:e9:ef:4e:3a:e7:c0:17:25:90:ff:2f:3c:78:3b:
a9:e9:62:87:61:70:87:33:6e:2f:46:f7:b2:3d:ef:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:41:7B:85:24:1D:E7:47:2E:38:7D:D2:1B:EF:94:75:F0:2E:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c_lBe4UkHedHLjh90hvvlHXwLtI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:f9:1e:63:27:08:f0:e2:92:b0:0a:31:5c:b0:c4:b8:90:8c:
38:6d:46:3d:59:fb:40:4e:4d:5d:a9:fa:68:e8:65:29:6e:2a:
22:15:6c:8e:f2:24:87:cd:e1:54:37:c1:5c:4b:e5:30:da:4a:
8f:67:20:9a:c4:39:41:9c:00:e6:10:07:2f:88:bb:76:22:e1:
15:fe:39:99:9d:e9:2c:f8:15:75:35:f9:84:79:08:e2:e1:6d:
56:13:37:48:ab:61:e2:1c:78:e7:85:4f:c3:57:12:5e:cc:7a:
99:bd:7e:1e:de:c5:02:55:13:9b:42:7c:76:11:88:e2:85:93:
1e:bc:32:c7:df:ed:aa:94:9d:e2:01:47:2b:f6:c2:a6:4f:7f:
1e:3c:a4:84:05:a6:bb:2d:ce:55:bb:45:3f:b2:e7:0c:53:bc:
be:05:07:8b:bb:a1:6c:63:3c:ff:cf:42:40:20:7f:f5:f2:51:
cf:1d:78:ab:e1:14:97:d1:14:52:1a:d1:f5:f4:2d:66:62:41:
7f:4a:cc:fc:28:86:e0:05:4c:11:35:75:a5:1b:83:1a:97:2b:
76:a6:90:b9:9b:58:cc:c8:b3:7f:33:be:14:58:ec:4e:d3:f3:
ea:91:87:dc:be:25:8e:a4:94:42:cb:98:cf:dd:93:c2:e3:18:
2e:c6:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org