Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f1LAeS6SRBBH_k9KWtrBi4YYgD0.roa
File: f1LAeS6SRBBH_k9KWtrBi4YYgD0.roa (raw, json)
Hash identifier: WvWyXH10Py2W6f0yaamY4Zjyd6FFoza98gxA0KG1Zro=
Subject key identifier: 7F:52:C0:79:2E:92:44:10:47:FE:4F:4A:5A:DA:C1:8B:86:18:80:3D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D29
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f1LAeS6SRBBH_k9KWtrBi4YYgD0.roa
Signing time: Wed 10 Apr 2024 03:22:41 +0000
ROA not before: Wed 10 Apr 2024 03:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15657 (0x3d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 03:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7F52C0792E92441047FE4F4A5ADAC18B8618803D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:05:ae:ac:f2:05:9d:7d:23:fd:1c:5f:93:
2f:e5:87:73:15:ac:aa:0e:97:04:fb:c9:d1:32:78:
1d:cb:0f:71:3a:62:9b:7a:83:8a:11:4d:3c:5a:39:
14:b4:a5:7b:63:55:c5:a7:86:83:db:02:fe:16:00:
d3:7a:dc:45:04:5b:22:26:40:06:20:eb:07:08:8b:
a2:1a:28:8d:b3:8b:fe:26:e3:6f:da:7f:37:01:02:
0e:bb:b4:14:d5:e7:41:dd:66:6a:07:56:51:51:2e:
db:d9:5a:4a:22:97:99:25:02:b7:c1:6d:95:fb:d8:
9d:08:83:bb:3f:98:79:14:6b:40:08:17:78:62:d3:
78:45:e9:eb:32:82:e4:d1:64:3e:d6:92:45:7c:fb:
3e:ee:70:20:fb:a5:2c:e4:86:a5:e5:73:78:0e:bb:
62:a4:c7:d5:fb:ea:89:8d:8a:fd:8a:1f:1a:ca:4b:
71:85:72:8d:bf:7c:67:df:37:2b:40:ab:03:76:d6:
53:50:c9:ef:01:d7:1a:4f:e1:71:85:69:e0:50:21:
80:5f:f9:f3:90:3d:88:a4:22:9b:0e:df:65:27:60:
8f:fd:db:69:0a:15:06:1e:bc:3b:7d:56:4e:41:7d:
8c:fb:b8:45:bf:00:83:be:7e:6f:b2:06:06:d0:6c:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:C0:79:2E:92:44:10:47:FE:4F:4A:5A:DA:C1:8B:86:18:80:3D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f1LAeS6SRBBH_k9KWtrBi4YYgD0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:d7:76:cf:81:e4:61:a8:9b:ae:72:82:f9:9f:18:02:03:d7:
7a:76:ba:79:e0:58:ce:5b:36:75:36:1d:5c:e8:a5:c0:92:1d:
89:0d:5f:bb:75:7b:e1:ac:41:94:2d:6a:5d:b2:24:6d:7d:f3:
de:2e:c5:89:c2:d1:ed:ff:52:c9:08:4a:1a:ea:9f:09:73:84:
27:1a:d4:ba:28:05:4a:a4:b7:c3:0c:8c:6d:73:26:eb:55:d4:
3c:e5:da:c9:91:20:68:dc:37:89:db:52:63:bf:61:0c:14:51:
7b:e8:bb:cd:df:d7:52:bf:76:b6:19:53:dc:d4:bc:d3:5e:f2:
a8:69:86:35:6f:d8:58:e5:d5:b1:64:60:89:16:3c:68:cf:66:
74:10:a6:80:6a:a3:ab:63:4c:56:44:91:1c:78:e5:98:db:98:
9d:9f:93:5b:80:b4:86:fe:e5:33:30:54:1f:00:7e:9c:dd:bb:
8e:08:62:4a:12:b2:1b:c0:16:5f:c3:c3:fe:d2:57:1b:2d:3f:
28:c7:ef:ea:ba:61:be:17:2c:8f:82:91:c2:ef:09:b7:64:15:
38:7d:a0:a8:3a:1f:49:27:4f:a8:81:8e:93:91:8d:4b:03:11:
ae:f0:40:1b:75:1c:8b:79:47:8e:2b:40:a5:74:ce:a0:42:b7:
f4:ec:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:16 2025 by rpki-client