Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hG1HJ4jiJFCHNTa4MCCwGkFfVEQ.roa
File: hG1HJ4jiJFCHNTa4MCCwGkFfVEQ.roa (raw, json)
Hash identifier: arkXiDgUhoEA4FdrcUsrwiy9jIGdtmjdAoKCk8Od2FQ=
Subject key identifier: 84:6D:47:27:88:E2:24:50:87:35:36:B8:30:20:B0:1A:41:5F:54:44
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4425
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hG1HJ4jiJFCHNTa4MCCwGkFfVEQ.roa
Signing time: Fri 19 Apr 2024 10:53:04 +0000
ROA not before: Fri 19 Apr 2024 10:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17445 (0x4425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 10:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=846D472788E22450873536B83020B01A415F5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:ea:79:c4:b2:f1:b8:4c:ac:dc:e0:be:ce:
a0:ac:a8:a2:06:07:2d:e8:ca:68:c2:1a:15:a1:b6:
c8:9b:c6:3f:21:56:87:dc:e2:5d:17:a6:ec:fa:fb:
6b:a6:83:f2:04:da:d4:7d:e4:11:20:66:4f:fa:cd:
89:48:4e:da:1f:97:82:70:e3:e6:f7:0f:37:89:29:
24:21:d4:02:ed:1f:b9:96:54:72:12:f4:9c:1f:80:
c6:0f:d7:38:0f:df:be:53:b1:fc:6a:61:97:92:17:
e5:f1:00:10:65:1b:32:26:da:b0:c4:c6:f0:43:7b:
72:f6:27:6b:59:9f:6e:65:bb:0b:67:2d:54:8f:01:
60:8c:ed:32:11:3f:75:f9:ee:77:67:17:78:c9:b8:
6d:37:1b:e3:31:6b:7a:7a:9a:c1:fe:c9:4a:13:42:
98:95:f7:b6:aa:6e:ed:5f:70:6f:48:eb:15:6d:38:
69:52:78:77:59:4d:52:f4:ce:08:98:ad:16:d7:9e:
d6:d6:64:ec:c5:77:7b:5b:89:99:4c:92:2b:fe:5f:
5d:15:21:ad:d9:43:1f:71:68:e9:c9:88:c0:27:1b:
16:cf:1e:03:40:61:a0:4e:1c:bf:0c:c9:6c:3b:64:
80:e7:78:8b:cc:2a:c0:28:a7:89:99:c5:2c:ca:98:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:47:27:88:E2:24:50:87:35:36:B8:30:20:B0:1A:41:5F:54:44
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hG1HJ4jiJFCHNTa4MCCwGkFfVEQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:bb:70:20:8c:14:4a:af:b0:15:0f:20:f5:84:f3:aa:9d:1c:
bb:6e:c4:e0:3b:33:11:8b:ba:31:82:8a:1f:b7:1b:e6:61:3f:
59:18:9c:d2:44:53:39:ff:06:e3:81:e9:c6:dc:02:c6:65:fe:
dd:df:0b:49:87:96:2c:53:af:c9:c6:47:67:8a:93:b7:41:96:
df:64:d0:7b:00:70:95:ef:e2:fa:a2:7c:db:f0:45:76:98:9d:
33:41:64:69:ae:3a:48:1e:59:38:82:ad:2a:f4:29:91:d0:86:
9a:c4:21:c9:c5:aa:a2:1b:0a:dc:b2:40:33:e6:30:6a:49:f6:
e0:d4:82:a9:a4:cb:2a:f3:33:cb:2f:32:4e:ab:ac:4d:57:95:
19:09:c1:00:1a:f9:37:29:c3:64:f1:03:23:8f:7a:e5:aa:08:
1e:79:12:85:0b:b0:73:f5:94:ef:ea:17:35:cf:3f:c9:9e:7f:
99:8b:16:00:1d:f4:36:2c:f3:de:76:e7:88:a4:2c:3e:a0:57:
36:ef:79:76:b2:de:4c:31:60:fd:5d:97:54:28:68:af:4a:30:
2f:12:6a:ad:48:6e:30:73:33:5f:c9:72:01:38:4e:a8:81:78:
43:4a:d0:76:91:17:cf:07:3d:e5:2d:fc:5b:b1:60:55:81:8b:
15:68:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org