Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fVHVmadnuD-kakWZfcmTh_U1Oa8.roa
File: fVHVmadnuD-kakWZfcmTh_U1Oa8.roa (raw, json)
Hash identifier: Dyg2dD2iQeIYoP6E9V1ZzTlAa9QDlLSWJHX9EFn4BOw=
Subject key identifier: 7D:51:D5:99:A7:67:B8:3F:A4:6A:45:99:7D:C9:93:87:F5:35:39:AF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40E9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fVHVmadnuD-kakWZfcmTh_U1Oa8.roa
Signing time: Mon 15 Apr 2024 03:22:52 +0000
ROA not before: Mon 15 Apr 2024 03:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16617 (0x40e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 03:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7D51D599A767B83FA46A45997DC99387F53539AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:54:a6:d6:53:9d:61:4f:ef:26:d1:ce:b9:
6a:a1:cc:39:f3:55:a4:0c:00:46:49:43:85:fc:fe:
ac:8e:5e:bf:43:2d:4e:6d:0c:97:82:9b:c9:83:a2:
b0:1b:42:03:98:9e:8c:ca:e5:f1:fc:40:43:ed:f9:
cf:cd:2b:5d:27:d0:de:6e:94:21:c1:cf:7a:9b:2d:
43:0c:bf:6e:06:75:da:75:ca:27:f9:67:0b:ee:34:
49:b8:5e:92:ed:15:60:a9:95:e5:d9:56:5e:a2:cb:
dd:fb:eb:ab:e6:0a:49:cd:41:b7:0f:44:05:08:8b:
2f:73:2b:3b:0a:cf:9b:58:7e:3b:d6:23:ef:61:b9:
ad:e0:57:93:17:de:50:d4:74:2d:c0:e9:02:b1:22:
7e:bd:86:17:c0:da:52:17:dc:13:d3:b8:d7:94:f7:
7c:71:c4:db:79:ca:f1:56:8c:81:39:68:cc:6c:d5:
71:cc:47:85:f4:89:bd:14:fe:6a:85:eb:8e:1b:11:
dc:f7:d9:5b:bf:71:8f:ae:f9:69:08:dc:2e:3f:d7:
10:f9:0c:36:0e:ea:18:ca:1c:98:48:17:ef:45:f8:
7d:74:c6:97:b6:6c:32:53:16:4e:ee:37:97:86:5c:
c9:48:e3:6e:fa:92:71:7a:51:32:a4:12:ec:63:65:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:D5:99:A7:67:B8:3F:A4:6A:45:99:7D:C9:93:87:F5:35:39:AF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fVHVmadnuD-kakWZfcmTh_U1Oa8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:a1:3c:82:6a:1e:52:49:3b:5f:9d:93:b9:0d:81:28:33:4e:
52:cb:2a:e8:81:b9:35:d1:f7:8e:78:5f:e3:71:ee:f4:1b:94:
f2:a4:e1:5f:21:13:36:09:de:53:f8:da:9e:a1:51:52:75:47:
42:48:dd:09:6b:e4:9d:22:8b:b6:86:c4:90:66:b7:47:43:93:
9d:eb:a3:cf:10:21:aa:f9:df:d0:ae:b3:6b:72:0f:42:e4:9c:
cd:ea:6c:bf:b4:8c:f2:a9:c2:ab:0b:d8:44:fe:80:90:65:1d:
a2:27:82:09:0c:9d:a2:ad:44:32:b8:f2:8b:f1:52:fb:23:de:
67:47:16:b1:28:c6:90:db:9b:e7:03:67:aa:65:e5:16:49:0c:
d3:05:4b:33:fd:5e:29:80:12:3e:a7:71:56:4c:eb:6f:1f:6e:
6c:30:a8:d0:f1:cd:bd:28:eb:1f:16:9d:02:8c:60:28:38:8d:
4a:aa:d3:f5:b8:c8:08:2f:d4:2b:ef:0c:76:93:37:4e:13:52:
dc:b8:04:45:8f:04:4c:e8:ea:e6:e3:f2:77:a1:0b:88:82:b5:
a6:99:00:2f:d7:27:71:02:3e:5e:9e:9a:59:58:81:38:84:d9:
63:8b:3f:17:3c:11:86:70:37:37:9c:b6:91:40:ca:bc:b9:f5:
5c:1c:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:00 2025 by rpki-client