Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f0_eNRfyJ1DrceE6xWa79RHxCJw.roa
File: f0_eNRfyJ1DrceE6xWa79RHxCJw.roa (raw, json)
Hash identifier: 7r8r+wVw4rRLVGdqH6nd8VRmHSmKue47rvi7EVTAxWk=
Subject key identifier: 7F:4F:DE:35:17:F2:27:50:EB:71:E1:3A:C5:66:BB:F5:11:F1:08:9C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 376D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f0_eNRfyJ1DrceE6xWa79RHxCJw.roa
Signing time: Tue 02 Apr 2024 11:52:17 +0000
ROA not before: Tue 02 Apr 2024 11:52:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14189 (0x376d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 11:52:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7F4FDE3517F22750EB71E13AC566BBF511F1089C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:c8:8b:dd:68:d8:6d:6b:1d:35:a0:dd:f8:
33:85:a1:c3:55:41:21:71:9f:bb:e2:88:0d:cc:ac:
db:91:47:9c:4d:31:55:49:95:e2:97:1c:f2:ce:5a:
10:17:c2:da:ec:1d:2a:b4:86:a2:9b:b4:24:db:85:
19:c6:46:0f:85:ee:42:e4:77:2d:3b:a5:37:e3:f0:
9d:de:93:d0:ac:22:e8:30:dd:80:9a:51:d4:0b:86:
c8:7f:a5:a7:9a:f1:69:13:c1:51:0c:ea:3c:7e:ed:
ad:86:d6:1e:be:d0:32:a8:55:b7:a2:da:24:bb:29:
0d:f6:4e:a5:5e:aa:ec:ff:8f:a1:4a:37:fc:ad:a2:
5a:af:50:77:2b:7d:dd:86:00:a8:21:2c:fb:ae:f0:
b3:01:97:df:9a:51:b3:1c:f6:53:ea:dd:cd:09:3b:
8f:c9:70:d2:ec:6a:92:12:b9:4a:fd:21:a2:de:99:
b2:27:da:bf:2c:28:c1:d8:e3:ab:cf:da:1f:a0:0b:
7e:54:d9:d6:53:00:4b:1d:83:b5:da:50:8c:e2:b2:
ef:fd:4f:82:a0:f2:b4:ed:bb:e4:29:d4:ef:ea:5c:
db:5f:a1:3f:f0:a1:fb:55:08:ad:1e:31:c5:e1:90:
5c:9b:e3:c7:c1:d9:b9:e5:39:7e:95:ac:b3:94:d9:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4F:DE:35:17:F2:27:50:EB:71:E1:3A:C5:66:BB:F5:11:F1:08:9C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f0_eNRfyJ1DrceE6xWa79RHxCJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:f4:4c:5c:70:1f:48:f5:9e:8d:2c:72:97:b3:2f:43:37:cf:
12:d7:dc:25:8e:1a:63:09:b1:fa:64:76:58:fe:54:e0:5c:66:
ce:9e:06:4d:d2:f6:1c:92:6b:ff:07:ed:f6:02:ba:08:d5:88:
70:60:fd:00:0b:89:04:5b:a4:05:75:b9:b5:64:8e:a1:8c:9a:
32:7d:d4:fd:1e:3e:5d:b6:58:44:fb:3d:43:af:6f:00:2f:6c:
31:fc:82:98:28:56:18:0c:b9:30:06:24:39:1a:c3:79:ee:66:
3e:90:f0:c8:01:71:63:7b:13:ad:ad:3a:c2:f6:41:f3:af:75:
dd:f5:96:a5:fa:66:96:85:2c:09:f8:0d:3b:90:a1:fc:a7:bf:
bb:7f:7b:d5:c5:f7:6a:52:f1:7b:31:93:c8:66:ce:23:95:a4:
c1:9d:8c:ca:4e:3e:1a:df:2a:94:28:fd:ff:5b:22:a6:a8:d2:
36:f4:a2:5f:ed:5e:c9:c2:6c:59:d7:8c:52:07:18:f0:0c:0d:
e5:d2:0c:10:77:33:36:3a:8c:4f:ba:7d:f3:32:56:87:17:ae:
cc:57:d5:23:e4:90:a5:3c:78:ef:d4:d6:5d:a4:eb:6a:e6:a5:
02:e5:9b:5a:9e:5f:b8:f0:0f:b0:35:0a:6a:7b:32:31:c8:67:
bf:68:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:59 2024 by rpki-client on console-ams.rpki-client.org