Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gUpJjFSmfCBw_g5hTSssudQACBY.roa
File: gUpJjFSmfCBw_g5hTSssudQACBY.roa (raw, json)
Hash identifier: DLp8OG6InkJh8ji5dDBBTzzq3I87vnbib0+Z4R/dmpo=
Subject key identifier: 81:4A:49:8C:54:A6:7C:20:70:FE:0E:61:4D:2B:2C:B9:D4:00:08:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4275
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gUpJjFSmfCBw_g5hTSssudQACBY.roa
Signing time: Wed 17 Apr 2024 04:52:59 +0000
ROA not before: Wed 17 Apr 2024 04:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17013 (0x4275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 04:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=814A498C54A67C2070FE0E614D2B2CB9D4000816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:fe:2b:12:20:82:ac:b5:85:b4:4d:e9:ca:
d8:12:ec:4d:47:01:7a:52:39:87:a1:e9:3e:4f:ea:
86:02:7b:11:c6:e9:5d:c4:46:ab:71:29:87:86:be:
72:e3:5a:1b:a6:9c:0f:a6:db:2f:1c:51:25:60:c7:
bb:2a:bf:d8:78:ae:aa:40:4c:b5:93:29:2b:79:a4:
7a:99:dd:aa:8e:2c:d7:26:02:ab:5f:53:a8:24:d4:
90:42:6c:72:c6:b2:c3:8a:26:1e:49:b9:42:e8:e7:
35:3c:c4:b4:b9:30:e2:dd:61:e3:a6:9d:3c:9f:00:
54:0e:bc:6c:5c:3c:69:cb:96:2c:1e:0d:11:1c:77:
f8:ca:d5:15:3d:2e:68:52:52:10:af:03:aa:4b:d8:
ec:f2:45:93:1d:6d:4e:18:3e:26:d8:9c:30:0e:15:
2a:fb:8d:f5:6d:97:04:13:d2:2c:a1:f3:b7:d6:43:
10:78:9d:9b:9a:bd:8c:17:fe:05:b8:56:99:9a:38:
fa:60:e9:a0:34:15:ca:d4:1f:9f:1e:34:47:e5:c5:
12:42:9a:66:dc:ad:a1:79:cb:fc:37:4d:99:94:9c:
f3:77:29:51:e1:9f:e5:ae:cc:b4:0c:41:79:dc:48:
9b:ec:86:09:e6:f6:04:67:7e:d9:8d:08:4f:80:44:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:49:8C:54:A6:7C:20:70:FE:0E:61:4D:2B:2C:B9:D4:00:08:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gUpJjFSmfCBw_g5hTSssudQACBY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:7d:1a:3f:3f:45:c0:5e:5e:32:e1:3d:07:84:84:af:c5:8b:
6c:79:fa:dc:4f:a6:2c:47:d7:9e:c1:39:b8:fe:fe:be:77:9a:
4b:ef:a1:2f:02:c9:34:a0:61:0a:4f:cb:f2:cf:6c:e0:62:70:
ca:95:cb:05:95:79:c1:d3:78:b2:4b:ac:9e:d5:7a:fe:56:52:
b7:75:d4:e1:37:a3:dd:ce:3f:cb:91:5e:c1:3f:ec:28:d5:d9:
ec:04:51:f1:38:af:9d:7f:8a:1f:69:57:1a:41:b5:ee:87:fd:
ec:77:ef:91:75:be:73:06:c8:bd:84:ef:ce:29:7d:53:d7:18:
8a:94:08:87:2a:97:74:8a:fc:22:55:c5:8e:69:8e:f7:f3:35:
b5:eb:ed:81:dd:ea:e8:3a:4c:e6:86:e5:4f:b3:50:cb:1f:27:
4b:84:9a:12:e4:bb:b7:f1:77:d2:3d:d4:7e:52:6b:94:6b:26:
8d:97:60:f7:1f:e5:43:7c:51:88:6b:5c:28:62:c1:4d:be:7b:
2e:e9:c7:6f:ae:86:32:30:af:2a:da:0a:22:6a:e2:2d:17:90:
7e:f3:e2:b6:58:a8:ee:a0:51:fc:6b:17:ec:77:bd:a2:52:b0:
20:5e:49:33:b7:76:55:bd:28:8f:b1:35:b0:b9:86:c3:f3:d0:
a5:f7:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:58 2025 by rpki-client