Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d1FRLZIdtYRZyJ1I-UygkY3GVIE.roa
File: d1FRLZIdtYRZyJ1I-UygkY3GVIE.roa (raw, json)
Hash identifier: 4buhaAxTyc6gtbcfMDjwwVSoN8wdIWjyGznAEIjxoxU=
Subject key identifier: 77:51:51:2D:92:1D:B5:84:59:C8:9D:48:F9:4C:A0:91:8D:C6:54:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CD9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d1FRLZIdtYRZyJ1I-UygkY3GVIE.roa
Signing time: Wed 01 May 2024 01:23:36 +0000
ROA not before: Wed 01 May 2024 01:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19673 (0x4cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 01:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7751512D921DB58459C89D48F94CA0918DC65481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:94:5f:11:bb:bd:41:a6:45:f9:63:8e:34:
35:2e:42:a1:28:f0:e3:73:58:70:83:42:f9:eb:05:
90:a9:91:f4:67:e0:49:1a:9e:41:30:15:21:76:93:
91:8c:0a:52:92:80:49:50:79:3a:18:b2:a0:73:b6:
01:22:0c:57:6b:58:74:7c:a4:ce:03:5e:1b:46:53:
5d:af:62:4a:1a:43:43:69:24:4e:6b:5e:f0:85:dd:
99:06:72:72:b6:55:0d:6a:db:10:bf:c1:71:45:f8:
2f:14:f9:01:36:10:d6:ab:12:c7:8e:46:a0:53:78:
f2:b0:bd:b4:8b:6b:20:63:80:44:56:ee:fb:9b:d7:
81:48:74:05:de:d6:4c:86:c0:1c:51:fe:d2:b9:1a:
19:63:e5:97:30:e1:0c:3b:f0:ca:ab:df:83:94:6d:
19:41:20:a8:d0:2b:d8:5b:bb:2c:96:d6:ae:1b:11:
2d:7f:df:d8:6e:ee:58:4b:31:da:bd:66:02:df:26:
00:68:6a:45:7a:f0:8b:ad:58:31:19:7a:07:b2:8e:
ec:cc:31:2c:ff:98:25:40:6e:d7:53:78:94:2a:d9:
76:db:9c:e8:37:a2:37:f8:ca:f5:4b:b6:c4:5b:e8:
e8:a4:8d:73:98:02:f6:a5:fa:04:a0:de:dc:57:d8:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:51:2D:92:1D:B5:84:59:C8:9D:48:F9:4C:A0:91:8D:C6:54:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d1FRLZIdtYRZyJ1I-UygkY3GVIE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:d0:f8:ac:d6:c7:91:61:19:30:9d:55:c0:de:88:3a:ee:d4:
22:54:a1:ef:14:d0:a7:b6:86:e9:4b:9d:8a:a2:97:6a:e4:01:
c2:e2:78:47:a0:c2:84:62:fb:bb:77:b7:35:1c:57:42:30:1f:
fd:7a:82:6e:64:63:17:fb:32:70:22:b7:00:b4:fc:a0:73:35:
de:a5:97:40:09:8b:9d:0b:83:0c:e3:c0:8a:ce:3c:ed:87:f9:
4e:56:f9:7e:8a:18:4f:77:c2:2e:5a:7e:8d:43:0b:20:f7:f8:
18:bb:4d:ad:20:8f:fc:29:4b:a3:1b:2f:7b:d4:13:0b:1d:d0:
d1:03:60:fd:22:57:bc:5c:03:4d:db:f0:38:14:56:0e:da:8a:
69:02:0f:08:b0:65:51:0c:0c:bc:e8:c4:df:d8:30:1b:59:4d:
cf:f5:6f:34:63:99:b0:b0:e9:a7:2c:c7:43:1d:a2:56:b7:93:
a0:c6:c0:a0:a7:55:20:17:32:02:f0:0a:ea:7f:88:27:e0:2d:
55:85:7f:9b:d7:59:5f:7e:67:1b:df:76:2a:37:40:46:6f:89:
b3:8c:01:62:5e:40:9e:c6:5f:b8:ee:dc:53:67:88:b5:dc:7a:
c9:db:6f:39:4f:4d:84:1d:3f:b3:35:4e:31:75:6d:fe:81:08:
c9:c8:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org