Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hPFIa4fopvkRCQRV_dDqvj7ju04.roa
File: hPFIa4fopvkRCQRV_dDqvj7ju04.roa (raw, json)
Hash identifier: PFySFEBQIYpDeCIAB35xRlbX/QNoO51inEOhR8volyg=
Subject key identifier: 84:F1:48:6B:87:E8:A6:F9:11:09:04:55:FD:D0:EA:BE:3E:E3:BB:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hPFIa4fopvkRCQRV_dDqvj7ju04.roa
Signing time: Wed 15 May 2024 19:54:12 +0000
ROA not before: Wed 15 May 2024 19:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22509 (0x57ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 19:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=84F1486B87E8A6F911090455FDD0EABE3EE3BB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:82:fc:8d:80:b6:c5:43:d4:82:70:1b:f4:
18:3d:5b:41:b0:0f:72:e6:83:9a:6e:dc:4b:d4:58:
11:96:61:27:12:2b:ef:03:25:6a:dd:4f:b6:a6:39:
cf:48:ca:f8:f1:b5:3d:a3:a2:fe:d7:52:2c:b9:3a:
78:2b:c9:f3:07:7a:f2:1c:98:47:7d:b8:dd:06:62:
57:5b:80:a1:0c:b9:51:de:5f:b3:bc:51:97:0a:c3:
9d:e2:af:13:e9:6c:86:1a:3d:da:c2:fe:a0:fe:0e:
ca:28:05:d3:55:fc:02:f7:46:fd:33:3e:de:d4:7c:
2a:76:b1:c1:0c:a6:93:5f:6e:dd:c1:e3:61:ea:9f:
49:7a:8c:e0:d9:bd:89:f1:db:6f:1b:a5:4e:7b:22:
06:b7:43:00:39:15:1c:87:35:78:fc:9c:70:aa:33:
c2:00:f8:e7:ab:d9:68:da:77:5d:d9:ed:1a:91:04:
c2:6e:05:f9:6c:09:44:84:c9:9b:e3:01:05:36:c2:
57:d1:99:0c:a2:71:70:5b:e8:a5:69:ff:65:7b:aa:
fd:0d:37:04:79:15:bf:ff:c6:2c:57:db:4b:02:3b:
98:e5:1c:40:64:df:f4:03:0c:75:46:28:40:07:9f:
86:b5:8d:a2:2d:be:50:70:fd:f7:3a:c0:7d:48:15:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:48:6B:87:E8:A6:F9:11:09:04:55:FD:D0:EA:BE:3E:E3:BB:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hPFIa4fopvkRCQRV_dDqvj7ju04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
83:0a:03:47:33:f3:3e:21:0f:08:b9:0b:a4:8d:8a:54:56:f2:
75:34:d7:65:39:ed:26:e9:f3:d0:35:0a:25:f1:0f:04:03:ee:
68:7c:fc:ef:ba:13:7a:a0:b8:b9:93:29:44:53:8c:6d:03:7a:
be:d2:33:ef:86:15:f9:5f:2b:f9:f3:1d:4f:5b:7d:dd:60:a8:
0d:e3:4e:77:b3:59:6a:09:4a:f1:17:de:ff:17:4a:ed:1d:4c:
98:c6:3d:cd:d2:f1:46:cd:f0:f3:8b:9d:20:6e:8c:98:b6:71:
de:cd:d5:78:7a:1e:c7:c1:ed:e8:75:9d:2a:bd:0f:25:1d:9f:
d8:19:96:18:aa:c9:db:2a:d5:1c:10:ba:93:ed:bc:dd:cf:56:
26:75:19:96:a1:26:a9:b7:68:08:93:4b:d0:4e:73:41:99:cc:
89:7f:39:62:b1:1d:b0:01:7d:a7:34:f1:1c:8f:2a:29:59:f9:
ad:4e:fe:61:fd:4d:35:f0:56:44:ec:33:8a:5f:32:4e:75:30:
7e:6e:71:05:8a:ed:f9:a6:cf:f6:cc:c4:2c:f7:45:04:86:51:
b7:48:b5:94:bc:cb:f5:87:c4:b4:8f:2f:2f:9d:7e:2f:5e:ba:
e8:64:86:e4:31:a4:e2:3e:12:88:8d:4f:cb:d2:95:30:44:82:
20:5c:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org