Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eCLJB4xjM_vDyhnd-PAWQ97OraI.roa
File: eCLJB4xjM_vDyhnd-PAWQ97OraI.roa (raw, json)
Hash identifier: gzZiWAfpKuz6IoSyD3/PnB9ulrBqPZkNqKzhLRoeGfM=
Subject key identifier: 78:22:C9:07:8C:63:33:FB:C3:CA:19:DD:F8:F0:16:43:DE:CE:AD:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5499
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eCLJB4xjM_vDyhnd-PAWQ97OraI.roa
Signing time: Sat 11 May 2024 09:24:08 +0000
ROA not before: Sat 11 May 2024 09:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21657 (0x5499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 09:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7822C9078C6333FBC3CA19DDF8F01643DECEADA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:5d:e7:aa:94:c1:82:de:65:97:5b:65:ce:
9a:59:58:5a:c7:1b:62:a0:bc:af:14:50:ae:4f:c0:
d4:ee:63:86:ce:53:cc:9c:f8:f8:54:b4:21:a4:e2:
79:d3:95:99:18:64:2d:16:6b:7e:b6:f3:ee:77:08:
ea:ff:4a:d2:e4:65:c1:d9:aa:ea:f4:ac:5e:15:f1:
ed:9b:77:f5:f4:ce:ce:8b:6f:fb:1c:c5:37:a8:87:
61:ad:f0:70:0d:27:55:05:5c:b1:c0:5d:8d:b5:88:
29:13:99:94:b6:bc:27:d9:48:25:41:8b:d5:7b:25:
45:99:cf:21:67:3e:a2:3d:ce:8e:f6:78:ec:1b:f0:
67:5b:62:dd:47:28:b9:b8:b7:9f:a8:78:5c:a9:a2:
ba:af:37:0f:bc:52:e9:41:ae:05:13:15:23:b1:5c:
97:00:ef:7c:b1:01:67:0a:3d:78:de:24:18:35:47:
f7:22:b3:18:ef:8b:a7:7b:84:94:3e:c8:c2:df:81:
a0:96:78:e5:0f:e7:e0:9e:6b:04:29:6f:06:5e:44:
2e:b1:df:fc:aa:a6:01:5f:80:f3:8a:05:ea:cd:60:
51:73:61:85:2d:d2:11:81:1c:19:6e:32:df:5d:e5:
7c:d9:6f:cf:1a:d9:fc:e7:e9:80:84:bb:21:12:5b:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:C9:07:8C:63:33:FB:C3:CA:19:DD:F8:F0:16:43:DE:CE:AD:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eCLJB4xjM_vDyhnd-PAWQ97OraI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:bd:b1:de:ee:68:ca:1c:73:82:10:f5:69:e6:ac:80:30:35:
ed:f5:60:21:e7:36:48:bb:12:4b:4c:5d:3e:92:e5:ef:95:e6:
5f:28:c9:5e:5d:e3:c6:b7:3b:75:7c:cd:d8:58:04:32:31:3d:
88:95:5d:58:25:52:6d:ba:f0:56:ce:f2:7f:a1:e2:4f:df:da:
f9:0a:41:50:02:82:6b:09:71:57:59:5b:00:f9:ac:f2:4b:4a:
e0:70:e5:7f:3c:37:45:e3:5c:14:35:31:93:0a:1d:be:bb:07:
42:6c:d3:32:18:37:07:89:af:e2:f3:de:1f:be:28:9e:a9:cd:
1e:a7:65:e1:8a:d7:07:79:1c:10:c5:c1:32:7f:02:4f:c4:50:
6a:22:1a:d9:b0:0a:ea:1e:6b:b9:7e:60:a7:ac:1b:5a:77:da:
31:12:d9:98:82:0f:a0:0c:af:cd:38:e9:1c:39:76:8c:4b:3e:
00:6f:fa:b8:95:8f:d1:4d:a0:d8:96:fc:f1:f2:c5:3a:86:95:
1b:75:f8:d2:7c:67:e1:18:ef:2f:e4:a1:1d:ca:5f:a6:9e:f4:
e7:6f:62:fe:98:7a:fa:66:4d:15:22:23:0f:0e:6d:2a:cf:ff:
44:0b:41:dc:a3:81:da:a2:20:0f:b7:86:bf:6d:35:0e:6c:c8:
f2:e3:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:58 2024 by rpki-client on console-ams.rpki-client.org