Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g7k0OsOqS5NxSP00vtSThfTchDg.roa
File: g7k0OsOqS5NxSP00vtSThfTchDg.roa (raw, json)
Hash identifier: ut2sW1Z2lhFehXfwZWHTjfX4ySjmUE3S0RDnlqT70Ag=
Subject key identifier: 83:B9:34:3A:C3:AA:4B:93:71:48:FD:34:BE:D4:93:85:F4:DC:84:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C2D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g7k0OsOqS5NxSP00vtSThfTchDg.roa
Signing time: Tue 30 Apr 2024 03:53:33 +0000
ROA not before: Tue 30 Apr 2024 03:53:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19501 (0x4c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 03:53:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=83B9343AC3AA4B937148FD34BED49385F4DC8438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:2e:02:57:46:58:05:86:b5:45:cd:b3:f3:
34:79:f8:dc:d6:5e:cd:1f:75:a2:f3:30:3c:b2:2d:
48:ef:2a:d5:6b:c7:0a:e0:1e:f6:aa:b7:17:0a:60:
8c:cb:84:a4:11:b6:68:96:19:44:fa:91:19:98:be:
c8:04:5e:4c:7b:42:b9:a0:b5:1f:45:42:5e:3d:ae:
e6:81:65:e9:ea:42:a2:2b:2a:b2:73:75:df:ad:13:
59:fd:0d:29:1f:06:8b:b3:63:f3:da:ec:0e:81:19:
a4:ea:fc:fe:0b:99:fc:75:ae:95:1e:98:98:c9:75:
86:3c:d8:3a:6f:99:6b:f9:65:11:37:4d:5d:a0:ce:
46:6a:e0:68:ab:d0:f2:dc:3d:62:dc:c3:74:79:b3:
18:cb:ea:b1:9d:23:2a:27:42:fd:cd:56:83:d2:9f:
27:cc:dd:4c:2b:f8:24:d0:e5:29:6e:96:fb:d3:1f:
c2:ab:cb:ed:dd:05:20:b2:e5:38:4d:ac:57:99:3b:
96:bb:0b:bd:05:71:5f:3c:0b:c0:8c:09:bc:c0:94:
2f:1d:ef:2c:7e:86:79:e2:0d:7c:b8:fc:cb:0c:b6:
63:7b:f3:53:3d:d7:ba:23:48:17:f4:70:18:92:d6:
a2:1f:fe:53:45:46:55:fb:b5:ae:96:03:6a:b1:6f:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:34:3A:C3:AA:4B:93:71:48:FD:34:BE:D4:93:85:F4:DC:84:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g7k0OsOqS5NxSP00vtSThfTchDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
52:db:b1:c0:9f:53:c3:cd:77:d6:7a:5f:11:8a:6a:2a:03:11:
86:01:3a:1c:9f:18:65:25:87:85:a4:f8:18:e6:e4:f3:f0:f4:
a7:83:c6:98:e8:29:47:78:51:c7:4f:a4:f0:8a:f5:a8:9f:0f:
e8:96:d6:27:47:4d:f1:60:44:8f:cd:3d:c7:28:03:7e:1a:1c:
4b:8e:63:31:ca:16:66:ed:eb:0f:6a:ec:c0:8d:e0:21:65:7a:
b6:20:a6:f3:21:1b:10:64:bb:eb:2f:bf:f4:6b:2f:bc:3d:bf:
7d:9f:e6:54:82:d1:26:f2:29:68:ca:1a:ba:85:58:fe:66:56:
87:09:a1:72:d0:b5:42:89:77:09:22:2f:d3:60:39:ef:cc:50:
23:61:47:0a:83:df:1f:e0:10:1a:08:9d:6b:ab:7a:47:c7:ca:
9a:fa:56:55:51:38:87:39:71:9b:1b:1e:3b:44:44:84:9e:76:
ed:b5:92:d7:97:fc:ea:03:90:63:23:93:ed:5f:64:b6:23:60:
4d:73:1d:21:ad:f1:84:69:db:4e:7b:af:e1:95:92:c7:d0:6f:
fe:df:98:8d:76:df:0a:f8:ec:81:92:4b:51:f0:e6:e7:e1:60:
9b:46:5f:a1:6a:9c:dd:4c:e1:d9:15:15:43:9e:c5:eb:8f:74:
c0:3e:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org