Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d-pAKWIbo8ON0ZIT1oL6wAupWJE.roa
File: d-pAKWIbo8ON0ZIT1oL6wAupWJE.roa (raw, json)
Hash identifier: g7YIKRtPX4gEEsvT3fu2RaR2/CiTm35sh6eQ8iyxBrg=
Subject key identifier: 77:EA:40:29:62:1B:A3:C3:8D:D1:92:13:D6:82:FA:C0:0B:A9:58:91
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 526D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d-pAKWIbo8ON0ZIT1oL6wAupWJE.roa
Signing time: Wed 08 May 2024 11:53:56 +0000
ROA not before: Wed 08 May 2024 11:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21101 (0x526d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 11:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=77EA4029621BA3C38DD19213D682FAC00BA95891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:2e:c3:3b:28:5c:7c:d6:05:8d:90:f7:dc:
4a:10:61:89:63:08:e1:56:58:e5:9b:fb:3a:fb:92:
c9:02:44:6c:2c:4d:8a:a3:a2:8b:09:40:6d:6b:27:
1b:b3:cc:66:fa:c7:ca:fe:73:2b:b9:4b:30:cb:c6:
83:4c:98:53:1d:c5:da:be:24:95:38:f1:ac:99:f8:
c1:37:87:0b:fc:9d:b6:4b:1d:2e:82:f4:cf:26:d6:
10:d5:81:7e:68:a8:3e:b4:e7:2e:65:49:a2:b3:f0:
20:85:70:8d:3b:8b:39:18:90:e5:86:7c:a7:88:c5:
32:11:fe:e7:4d:ca:6b:35:30:fb:43:63:a8:96:79:
1d:d2:6b:4b:07:a3:f5:17:d2:02:ca:fe:b3:fd:a0:
58:9f:f8:6a:23:e1:e9:10:68:37:ab:82:1e:51:2e:
56:1b:22:4f:77:f3:91:f7:e2:b8:31:e3:91:96:a5:
ab:48:8d:ae:43:9a:08:f8:5a:56:e2:b9:04:a8:7a:
e5:26:18:4b:52:5f:60:74:14:13:fa:7d:a3:1c:bc:
2f:30:38:ec:5e:53:f2:e6:d2:03:64:7f:05:f9:69:
76:01:fd:1a:c3:ea:18:64:33:78:71:ae:cc:5e:87:
47:af:b0:ef:03:93:78:2c:3c:b6:dc:58:ad:74:b6:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:40:29:62:1B:A3:C3:8D:D1:92:13:D6:82:FA:C0:0B:A9:58:91
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d-pAKWIbo8ON0ZIT1oL6wAupWJE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:11:0b:a7:68:49:74:2d:4f:69:bf:0f:72:80:1c:a1:9a:ce:
fc:da:a1:db:40:9c:ac:5b:3d:87:20:8e:61:5d:d8:cb:24:a3:
c1:19:a9:da:e2:ab:2d:9d:0f:7b:a5:40:36:fc:7f:52:23:01:
62:db:ca:47:d3:bf:88:92:e5:33:ff:f1:00:56:97:f5:b1:96:
bb:f1:51:f8:54:e0:ee:ac:de:38:d8:8c:cf:9c:5b:0c:ac:b9:
22:74:83:83:28:c6:3d:10:cd:5a:1d:ec:6e:b3:63:7d:c3:cb:
57:f5:f9:c6:e6:a7:04:80:99:c5:8f:9a:b4:99:e7:a4:30:dc:
97:a7:6c:10:5e:ab:56:4b:2f:72:96:65:1e:1f:0b:a3:56:bb:
1d:1c:34:c8:78:5a:17:c8:3d:41:73:b4:b2:11:3f:3d:70:fe:
ff:b2:3f:ba:59:41:4c:22:89:c9:9d:d0:c9:ac:5b:46:fb:99:
cd:8d:62:0e:e9:98:cb:ad:6a:c8:a9:6a:19:be:63:24:cf:f8:
02:e9:aa:e7:d5:cf:91:ec:30:3a:84:88:74:39:b2:1e:28:33:
6a:90:e2:07:a0:7b:55:57:a5:6b:90:80:8a:a5:02:2e:5f:c9:
37:57:71:d0:ee:20:3a:a8:83:64:f4:6d:16:84:72:6d:e7:82:
e9:00:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:56 2024 by rpki-client on console-ams.rpki-client.org