Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eutKfZgV5RNbaHSsBwNtRpmdV08.roa
File: eutKfZgV5RNbaHSsBwNtRpmdV08.roa (raw, json)
Hash identifier: 4FDEEGqykrdX2b1DNxCQpdbRHlaEumXMtdJI4nuRPXo=
Subject key identifier: 7A:EB:4A:7D:98:15:E5:13:5B:68:74:AC:07:03:6D:46:99:9D:57:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DB1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eutKfZgV5RNbaHSsBwNtRpmdV08.roa
Signing time: Wed 10 Apr 2024 20:22:43 +0000
ROA not before: Wed 10 Apr 2024 20:22:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15793 (0x3db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 20:22:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7AEB4A7D9815E5135B6874AC07036D46999D574F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:96:cf:3b:0a:51:b2:79:84:ec:65:9c:e0:
13:4c:96:7e:51:86:88:53:7c:7d:29:70:41:11:07:
f9:e3:8f:6e:a8:51:ac:54:77:e4:2d:47:86:e0:48:
df:48:45:2f:84:63:b8:88:9a:ca:fa:0e:d7:3f:b7:
19:14:ee:0a:4e:32:3b:29:62:f7:30:c4:97:a1:2d:
87:cb:95:a4:db:f2:9c:38:e8:09:70:e3:d3:a9:03:
22:bf:d9:ac:c8:31:93:bf:de:e4:0b:1f:44:9b:68:
f9:1c:db:e1:a1:e5:be:4b:8a:4d:94:88:cd:df:b2:
18:30:54:3b:40:a4:a7:ce:20:8d:11:54:ea:4d:90:
87:e1:e6:6a:67:8d:01:c0:44:ee:eb:8e:eb:eb:9a:
98:20:3e:40:f6:60:25:58:ed:91:35:e0:0d:bb:21:
09:28:ed:3b:02:4f:ef:c6:00:fb:f7:30:6d:d6:69:
d0:6c:b0:e2:44:af:6a:e7:41:5d:aa:1d:d0:45:df:
a0:08:8f:ec:05:ae:8e:48:11:58:9e:e5:7a:e4:83:
64:51:8d:6f:70:a5:9f:95:bd:d7:75:e5:04:d8:49:
e7:3b:b9:27:ef:33:51:e9:aa:ff:10:35:68:51:62:
cb:46:a0:fd:38:46:3d:fc:84:9e:a1:be:bb:70:98:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:4A:7D:98:15:E5:13:5B:68:74:AC:07:03:6D:46:99:9D:57:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eutKfZgV5RNbaHSsBwNtRpmdV08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
12:85:78:d7:5a:f3:4e:81:ec:55:bb:47:1e:56:27:03:7a:13:
01:57:d5:36:4f:9a:16:10:fe:3d:94:e8:e2:71:c0:3d:0b:f1:
13:9d:74:65:46:32:43:aa:fb:64:13:bc:3b:49:8e:fb:0e:8f:
81:5d:06:64:93:8b:bf:d3:6d:b4:90:10:55:94:85:3e:83:34:
f6:6f:2a:9b:2f:3f:06:c2:c9:11:76:69:2a:90:87:4b:8c:41:
84:d6:96:c3:9d:75:b3:21:b2:ba:57:e6:cc:68:42:6c:96:79:
9b:05:6e:5f:d6:9d:bd:61:d8:d9:9b:8a:9a:5c:b8:ee:74:82:
61:a3:bf:7a:08:c4:d2:c4:9e:b6:fb:95:2e:dd:66:d9:9b:5d:
90:8c:b3:95:fe:67:7c:9f:5f:39:b7:20:18:c6:c1:ae:de:86:
9b:b3:52:b2:5f:b4:58:98:3b:40:a2:73:da:34:90:93:56:78:
f1:2d:0a:de:c8:34:47:c4:ef:01:41:b4:50:67:7e:8e:39:20:
c6:92:e0:77:48:8f:97:1a:89:91:a4:5e:17:a2:e2:e5:22:e3:
3e:4f:83:bd:8a:f9:d8:3a:03:c9:a6:75:7b:8a:4f:c1:5c:c0:
2e:fe:2e:d1:74:f5:47:ba:6e:19:f7:38:20:92:74:b4:85:82:
94:a6:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:59 2024 by rpki-client on console-ams.rpki-client.org