Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ggMSsAu3ZL0cJFmo-yHkT3KzRzQ.roa
File: ggMSsAu3ZL0cJFmo-yHkT3KzRzQ.roa (raw, json)
Hash identifier: oSQCxAnIc14rAWA4fdiYKrTlYTw0sR1ahfCmqg5OcGk=
Subject key identifier: 82:03:12:B0:0B:B7:64:BD:1C:24:59:A8:FB:21:E4:4F:72:B3:47:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 566D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ggMSsAu3ZL0cJFmo-yHkT3KzRzQ.roa
Signing time: Mon 13 May 2024 19:54:06 +0000
ROA not before: Mon 13 May 2024 19:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22125 (0x566d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 19:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=820312B00BB764BD1C2459A8FB21E44F72B34734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:c5:cb:ea:ef:d5:32:0c:ab:fc:75:3d:e6:
08:82:61:52:0c:e6:27:44:92:cb:10:02:b5:d9:64:
db:ae:9a:1f:f0:56:cf:13:a0:00:39:3d:3b:5c:52:
88:51:61:9e:2c:59:b8:f0:d4:e2:49:c0:4f:b5:4b:
87:07:67:87:1b:5b:c0:fb:4f:cc:96:0d:02:6d:75:
ce:63:8c:93:1f:4c:5b:d5:77:8f:4c:a0:0d:ce:2c:
74:a4:04:de:d4:90:57:53:e7:d3:cb:6b:c7:fc:4e:
7a:dc:67:6f:b2:ba:46:95:c8:7c:11:0d:5d:02:93:
24:d6:fc:12:99:3b:5a:ec:6d:f1:df:f5:3a:b6:50:
a2:17:2a:77:10:f8:84:3d:86:40:64:af:e7:0f:32:
db:a0:2f:db:e7:fc:a4:e0:ef:f0:96:d7:7c:96:39:
8a:27:75:8b:b2:5a:34:83:0b:5e:8e:7f:fc:ff:c1:
06:d5:4a:e1:5a:f2:70:13:ed:61:bd:ac:ab:c7:6d:
dc:95:25:7c:01:06:2c:0a:8c:42:9e:c5:86:9c:79:
ac:f8:53:1b:09:ab:db:0e:b0:ae:d4:61:6a:57:30:
5b:ef:72:f6:27:1e:22:12:69:41:21:8d:d9:00:dc:
5d:ee:6a:1d:8f:b2:fb:da:17:5d:35:f9:dc:9f:b0:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:12:B0:0B:B7:64:BD:1C:24:59:A8:FB:21:E4:4F:72:B3:47:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ggMSsAu3ZL0cJFmo-yHkT3KzRzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
01:e4:3c:91:dd:5f:ef:6f:6f:33:ed:d9:78:b5:ef:32:00:b9:
48:3a:68:6c:96:f2:f4:54:43:96:ea:d8:fa:75:4d:a9:78:47:
91:60:40:28:85:70:8d:8b:74:ce:b6:e7:5a:fb:57:e7:4e:39:
8f:ff:7e:4c:f0:49:0f:c6:fe:b6:ac:5d:e1:af:1a:f0:ad:f1:
5b:bf:47:6c:b5:2c:10:83:cd:9e:0c:9c:79:85:ae:45:56:69:
35:36:7b:50:2e:0f:cc:09:50:67:bc:30:68:c3:a4:ae:d8:00:
2e:c9:ec:b7:cd:e4:bb:8e:d2:c7:27:05:2f:96:ed:80:c0:c7:
65:30:78:e7:0b:6a:85:d1:89:3e:09:27:2d:7e:dd:29:39:19:
df:8b:55:98:18:79:be:f9:33:00:61:e5:e5:dc:09:1b:42:da:
b7:71:34:9e:95:dc:80:ee:ca:fc:b9:80:46:ae:3c:c6:04:f5:
16:63:41:4e:e9:81:09:3c:68:ac:4c:ce:93:3d:3b:87:a8:c0:
59:a3:b6:e6:bc:4e:dd:1c:93:9d:e6:d0:7e:7f:b2:d1:cc:54:
d6:66:65:1a:94:bf:fa:ae:b6:54:ac:9d:65:aa:e8:28:ac:93:
87:8a:36:11:95:c2:d1:42:04:10:f0:ab:09:8c:66:f7:06:e9:
06:df:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org