Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eWwLlA7GMyEPeGijM_PrkKfXE-U.roa
File: eWwLlA7GMyEPeGijM_PrkKfXE-U.roa (raw, json)
Hash identifier: YpFb9bZkXieVCchjc8ocFRXxRF4WShltPVaKKVQGHps=
Subject key identifier: 79:6C:0B:94:0E:C6:33:21:0F:78:68:A3:33:F3:EB:90:A7:D7:13:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C19
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eWwLlA7GMyEPeGijM_PrkKfXE-U.roa
Signing time: Tue 30 Apr 2024 01:23:31 +0000
ROA not before: Tue 30 Apr 2024 01:23:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19481 (0x4c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 01:23:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=796C0B940EC633210F7868A333F3EB90A7D713E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:80:79:0a:e2:b3:be:d3:f3:f7:ef:fe:c7:
55:b3:d8:0c:2f:2a:15:35:77:c1:80:45:2c:e8:cb:
70:58:74:56:49:47:5e:85:48:99:fc:d8:1f:ef:f4:
60:88:fe:d5:7a:8d:9c:f8:b4:b9:97:94:a3:78:2f:
01:1c:b6:9c:4c:99:12:41:12:63:9f:74:04:75:b9:
8b:8b:59:b8:3d:aa:07:2f:51:6a:4f:31:aa:27:21:
f4:07:23:8b:0d:19:a1:ac:69:97:c2:55:9e:1a:e8:
86:8f:53:dc:f7:69:cf:9f:be:47:27:19:09:de:53:
b5:5a:d6:26:43:5e:01:fd:be:94:f2:4c:61:da:3f:
87:61:33:cd:98:ef:31:56:47:1e:3f:37:d0:e1:7f:
81:da:0e:98:ca:3c:68:9a:e5:10:eb:9d:d0:2d:2f:
65:dc:76:8d:db:43:ec:de:8e:25:77:d5:35:99:63:
20:18:b6:dc:ce:6b:81:84:aa:48:75:e3:ad:90:9d:
1a:46:ac:2f:b8:37:5a:d6:2e:cd:fd:c8:52:64:30:
1a:e6:fa:98:c0:c8:df:e2:da:4c:bb:e4:54:bf:44:
a8:14:93:ca:63:d4:17:94:f2:75:24:ca:92:1b:a1:
02:84:b9:e0:3b:e6:54:a2:62:e1:4f:c2:5b:f7:36:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6C:0B:94:0E:C6:33:21:0F:78:68:A3:33:F3:EB:90:A7:D7:13:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eWwLlA7GMyEPeGijM_PrkKfXE-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
78:1e:d7:3c:2c:ad:c6:a6:8f:33:95:06:55:7f:37:56:f7:5d:
4f:ab:7f:04:8d:85:c1:1d:97:73:4b:24:62:e7:ab:14:8c:d9:
ec:bc:8a:53:78:4f:e5:11:83:5c:1e:e3:71:bd:2f:c6:72:10:
a3:19:8b:2e:e4:3f:39:bd:3c:fa:e0:42:0f:68:ef:44:01:16:
6b:21:0c:6d:47:ea:da:21:c4:b1:37:9c:d8:0b:ed:83:39:cf:
84:6b:92:dd:da:dc:32:1e:ea:e5:bc:98:fb:77:73:5f:c7:2f:
57:6c:d6:6f:bb:1f:1e:fd:e5:78:ef:79:d5:55:a5:af:07:7c:
32:ac:00:fd:ce:4b:df:0e:7b:ec:28:e7:aa:3b:bd:33:13:f0:
a6:ca:d6:ba:62:8e:74:65:5d:a7:84:24:7e:51:84:a1:f2:2e:
93:19:86:6f:c7:2c:cd:67:f0:53:b1:c6:34:77:87:0b:3c:71:
49:b4:b3:d2:e4:5c:21:f2:f8:9e:d0:4b:ce:37:b2:55:39:e7:
bc:75:13:73:7f:2a:45:d5:f8:45:f3:56:54:99:45:77:1c:cb:
76:aa:f3:2a:24:ab:55:49:82:b3:dd:64:e8:7a:4f:8a:cd:23:
09:47:7a:0c:48:80:bb:cc:94:98:4a:02:b4:ad:3c:ba:ac:77:
2c:dd:5e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org