Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/drKVsn1fktoOp8oTDJf_gR1kw2Q.roa
File: drKVsn1fktoOp8oTDJf_gR1kw2Q.roa (raw, json)
Hash identifier: bu3Bx7vsLxGHpXbnZDwTwtGHzBacpuogrWv79VrN1qs=
Subject key identifier: 76:B2:95:B2:7D:5F:92:DA:0E:A7:CA:13:0C:97:FF:81:1D:64:C3:64
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5775
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/drKVsn1fktoOp8oTDJf_gR1kw2Q.roa
Signing time: Wed 15 May 2024 04:54:10 +0000
ROA not before: Wed 15 May 2024 04:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22389 (0x5775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 04:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76B295B27D5F92DA0EA7CA130C97FF811D64C364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:7b:e6:c8:41:4b:a2:04:6c:29:08:21:3c:
2d:8c:ca:8a:b8:2c:fa:8b:7e:18:df:e5:4d:27:3a:
90:5c:b6:e8:e1:cc:eb:4c:ce:8a:1a:24:dd:1a:0f:
51:5e:a8:96:9e:07:30:a4:a1:81:d4:9e:c6:c6:81:
95:77:b6:08:b6:07:64:30:0a:3c:bc:96:3a:48:48:
31:49:95:a3:ab:6f:c4:b3:9c:78:cc:83:c1:94:a5:
70:da:96:85:f3:9c:88:26:c3:e5:2f:f8:3f:7a:8e:
bd:7c:38:be:cf:d9:d0:4c:fb:af:f7:d0:d6:5c:e2:
f9:41:07:ec:43:6b:6b:e3:be:07:70:25:04:ba:eb:
fe:8e:bd:40:1b:a2:23:de:c5:c9:2c:eb:6c:81:30:
49:86:54:3f:3e:ae:97:35:0a:6e:ef:84:03:04:76:
d3:29:a1:8e:d0:41:c4:2f:b0:89:c4:e2:60:48:db:
37:55:3b:f2:f5:6d:ee:9a:4b:45:78:ef:cc:1d:84:
ab:3d:91:bd:b5:9c:c9:cf:a4:2f:57:a6:f0:8c:42:
84:8d:7c:e9:15:99:19:6a:30:34:87:04:5d:07:81:
ce:0d:43:8b:45:60:ad:fc:1d:d2:14:d5:af:85:ff:
37:81:56:82:c8:e2:0e:a1:8d:4b:ff:27:90:a3:44:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:95:B2:7D:5F:92:DA:0E:A7:CA:13:0C:97:FF:81:1D:64:C3:64
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/drKVsn1fktoOp8oTDJf_gR1kw2Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:a9:a8:05:2b:6c:00:85:e8:83:63:7c:be:82:46:e6:88:ef:
a8:1f:0b:08:6e:07:f5:09:60:8a:2d:42:45:38:b0:d1:60:47:
91:a5:ba:37:ac:d4:29:02:97:2a:1a:6a:55:c8:ae:db:d3:62:
51:ad:06:b6:d1:0a:4f:e3:57:3c:9e:89:99:1c:ae:e4:1c:44:
15:1f:3f:37:3e:ad:5f:01:79:24:36:80:9a:15:21:b9:18:d4:
d8:a0:f8:39:f3:f5:1d:b4:50:2c:6e:0c:39:02:17:0a:0b:fd:
be:cc:f2:37:38:6f:f8:cc:d2:52:b6:99:8c:6f:2f:84:f2:2c:
e4:49:3a:5d:fd:e9:90:f7:6f:44:fa:4b:ad:64:28:fe:60:be:
9e:15:73:89:ac:d5:96:78:d2:45:55:92:d5:49:6d:5d:4d:61:
b6:17:9e:5d:a2:0f:aa:aa:cd:e0:87:14:3b:10:e2:78:a3:d5:
cf:08:c2:81:56:99:57:7f:18:8e:21:16:8c:26:40:18:6b:ca:
ab:ec:c5:ad:27:a6:70:b1:a2:17:00:a2:a6:4f:3f:ac:3c:44:
0d:20:51:8c:98:2d:a1:ed:80:b2:b5:a8:37:96:76:cf:71:ca:
27:54:9f:08:c5:08:53:67:ad:6a:9d:b4:02:a7:d7:4e:29:2e:
6d:3f:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org