Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hXdS7z_qf9aRZLCF5OoFwL_7q7I.roa
File: hXdS7z_qf9aRZLCF5OoFwL_7q7I.roa (raw, json)
Hash identifier: sn3hIUYs2SDwNc5gTuTDvI6IsgKe3gdzi1qAT3lgYp8=
Subject key identifier: 85:77:52:EF:3F:EA:7F:D6:91:64:B0:85:E4:EA:05:C0:BF:FB:AB:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4415
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hXdS7z_qf9aRZLCF5OoFwL_7q7I.roa
Signing time: Fri 19 Apr 2024 08:53:23 +0000
ROA not before: Fri 19 Apr 2024 08:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17429 (0x4415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 08:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=857752EF3FEA7FD69164B085E4EA05C0BFFBABB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:43:05:69:62:06:44:09:c2:2a:d3:a7:fd:
2f:6e:4e:c0:04:03:9c:41:f7:fb:3b:11:d7:ac:79:
a8:b7:2a:8d:86:f9:f3:20:33:74:81:d1:dc:89:49:
1c:b6:68:79:24:be:96:65:a8:68:2f:a3:f9:f3:38:
da:d0:d3:a0:df:a3:b8:83:de:8a:58:37:a5:53:34:
32:6e:e3:d5:15:29:8a:4e:02:3f:7c:a1:6b:16:ab:
6c:16:83:ee:fb:6b:da:20:3d:57:7c:7c:a8:31:5e:
68:a5:ce:e1:0f:52:e0:f8:da:03:5a:eb:34:16:e6:
56:08:1b:7c:5d:ec:1e:5d:58:4c:92:bb:ad:7f:58:
ec:7c:27:90:12:59:84:60:40:eb:41:ad:d7:21:6c:
e7:e0:b8:e7:ac:03:62:bb:c0:2c:97:7e:b7:d6:e3:
3c:4d:57:33:6b:ef:32:54:c7:a1:73:64:dc:a7:53:
25:03:39:e7:43:7f:bd:cc:c1:78:74:2e:87:02:8f:
4a:ba:74:80:0c:e9:35:18:cb:bb:29:f9:cb:4c:9f:
cd:20:d0:4b:18:70:07:44:b6:8b:cd:6d:72:d1:a6:
c1:f1:22:91:88:48:75:8f:24:7a:f7:40:0a:09:0e:
95:2a:d7:2d:80:81:84:09:b4:e0:86:e1:8b:6e:9b:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:52:EF:3F:EA:7F:D6:91:64:B0:85:E4:EA:05:C0:BF:FB:AB:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hXdS7z_qf9aRZLCF5OoFwL_7q7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:19:4d:c5:63:1d:15:fe:b9:88:88:5d:a1:91:42:8b:42:d4:
43:bf:77:7d:72:05:2c:fb:37:a1:9e:1b:8a:fa:57:3b:d1:82:
ee:f2:d2:e6:3f:32:30:6e:30:c7:af:f7:f9:18:3e:e2:95:3c:
6e:02:c7:75:5b:96:a5:82:f0:3c:7f:ed:98:a4:c3:2f:81:42:
68:0a:d6:18:8d:0c:39:01:a9:e7:b0:73:2f:fd:1b:19:b8:7a:
54:cb:b7:27:b5:ae:34:e1:db:6b:8e:dd:30:9b:40:a2:29:58:
48:29:bd:dd:c8:02:ed:b9:ad:08:e0:5c:a3:51:90:23:51:98:
1f:a0:41:41:3e:27:97:e1:52:ec:4e:7a:ef:a9:b6:88:0d:17:
99:94:4f:b4:9e:4b:3a:c2:ec:ac:e6:b8:95:ce:fa:99:49:60:
1e:3a:d9:c0:4e:88:a3:6e:d5:d3:c9:fc:57:93:21:e5:d7:b2:
4a:c9:70:98:4b:bf:89:92:d1:79:0b:61:92:d9:d7:24:fd:dc:
d3:a6:d9:cf:d1:72:f3:d9:3f:70:5c:4a:8c:37:2b:26:67:89:
76:51:1a:f8:d8:9a:9f:c8:87:41:92:11:83:8e:c2:ce:33:91:
74:e1:b2:81:cb:41:65:d7:a5:f2:ab:a6:4e:e5:15:72:96:78:
e8:28:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org