Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f0qrRxf5tVDiOIaKySAAhfAJNXw.roa
File: f0qrRxf5tVDiOIaKySAAhfAJNXw.roa (raw, json)
Hash identifier: ZSAHydoiTlROSPc6LNH6C6ykD4NV7qJwpqk/Mzp0sc4=
Subject key identifier: 7F:4A:AB:47:17:F9:B5:50:E2:38:86:8A:C9:20:00:85:F0:09:35:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54B1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f0qrRxf5tVDiOIaKySAAhfAJNXw.roa
Signing time: Sat 11 May 2024 12:24:07 +0000
ROA not before: Sat 11 May 2024 12:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21681 (0x54b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 12:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7F4AAB4717F9B550E238868AC9200085F009357C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:24:be:4e:03:2e:c7:07:dd:dc:97:47:2d:
1e:80:f8:fc:03:f6:c0:b9:aa:d6:36:27:78:7b:75:
f9:a7:47:eb:e9:db:f0:fb:ed:cd:66:35:99:f2:a5:
9b:b0:6f:37:20:e5:44:ef:7c:4b:36:43:e9:7e:63:
81:ed:58:98:12:06:cc:41:50:5a:79:ce:9f:66:f3:
f6:89:b8:42:29:e3:66:7a:c9:e6:07:82:6d:6f:75:
c4:6c:96:76:c7:bd:87:04:bb:aa:81:b8:b4:4a:a5:
ad:3e:fd:ad:c2:d4:0c:1f:a0:46:a5:49:49:a0:a9:
af:03:6a:46:a4:30:ee:40:c2:82:fc:3f:ff:72:c0:
00:88:a8:28:ae:56:12:88:59:2e:13:63:8a:e8:d3:
d2:b9:58:dd:25:1f:bf:ec:6a:61:27:9a:05:a0:d1:
62:ef:5b:ef:85:97:43:37:aa:e3:94:e6:f9:06:66:
ff:b7:12:b5:78:ce:88:89:10:4e:44:3b:f3:cc:58:
e7:b7:38:72:59:9c:b0:23:1b:aa:4f:e7:71:20:d2:
b3:79:29:ac:74:1e:9b:2b:50:b1:5d:c8:45:98:45:
ea:e5:a1:18:a0:c7:02:dc:17:a2:9b:1a:86:22:ca:
98:e8:e9:2a:c6:77:11:ab:ca:d5:44:a9:4c:d5:1f:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:AB:47:17:F9:B5:50:E2:38:86:8A:C9:20:00:85:F0:09:35:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f0qrRxf5tVDiOIaKySAAhfAJNXw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:f0:b5:ae:f6:59:1b:59:34:3d:3f:f7:2f:6b:7b:a7:53:52:
de:19:ce:e2:b6:14:69:4b:42:59:a1:53:b3:2f:8e:e8:81:53:
94:c3:b2:9f:b0:85:87:52:fc:3e:77:68:ff:95:05:72:0c:d6:
93:40:76:10:c9:c4:77:4b:d8:23:4a:75:72:a9:bf:d8:bc:c4:
84:c7:95:06:6f:8b:a3:e5:a7:7f:30:42:ec:7b:c6:5b:02:cb:
08:bb:7b:43:58:b3:94:27:a6:85:3f:e5:de:bb:2d:2f:0c:1f:
f1:59:1c:63:45:31:61:84:6b:b4:b7:4c:82:ee:53:a6:9b:18:
53:55:48:58:bd:a3:92:01:bf:d8:5c:c7:7f:a6:ee:a5:1e:bd:
bd:c3:6b:05:14:c2:d9:bb:3b:dd:86:91:c3:55:4f:55:77:b2:
aa:74:14:c9:89:65:f0:1c:a3:5f:5e:ee:6b:fe:8f:a5:1a:75:
8f:a3:08:70:b2:7d:f9:80:8c:3e:66:3d:84:72:32:8f:8b:13:
0a:77:d6:e3:15:62:09:f8:e8:fa:a4:0b:b9:cc:77:df:d6:1f:
b0:da:b1:4c:82:1f:9f:5c:19:5d:0a:c0:1b:21:db:73:ba:21:
fe:30:6d:f2:bf:99:73:51:66:93:c3:8e:e7:8d:16:9f:a2:62:
20:ba:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org