Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/h_j6xAJfJmHMKVHbsiW5UiG2w_o.roa
File: h_j6xAJfJmHMKVHbsiW5UiG2w_o.roa (raw, json)
Hash identifier: y0bIiUgyN4CnzRubG3HZcc2MMFvJuAVmZtIC5EppY0M=
Subject key identifier: 87:F8:FA:C4:02:5F:26:61:CC:29:51:DB:B2:25:B9:52:21:B6:C3:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5411
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h_j6xAJfJmHMKVHbsiW5UiG2w_o.roa
Signing time: Fri 10 May 2024 16:24:03 +0000
ROA not before: Fri 10 May 2024 16:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21521 (0x5411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 16:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=87F8FAC4025F2661CC2951DBB225B95221B6C3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:8a:1a:8b:3d:50:3f:7d:a9:5c:b7:38:c8:
99:85:8e:80:92:1a:2d:b9:5e:b1:d8:45:8c:f2:59:
51:29:b9:72:79:16:c7:7e:99:33:21:ff:0b:dd:4f:
64:cc:bb:49:68:22:eb:91:2c:3b:93:36:63:af:47:
90:8d:b4:bc:8c:22:9f:57:3a:fe:04:7b:f4:ba:68:
09:67:4d:77:27:17:7e:08:69:47:fa:83:05:2d:d4:
d8:32:aa:0f:cb:db:cf:a5:5e:9f:2b:00:f3:75:75:
66:36:72:4f:4d:3e:a7:43:70:bc:1f:52:d1:51:7a:
83:74:7f:c2:a8:94:20:60:07:5b:3a:6e:c4:6c:87:
20:4e:19:9d:bc:e8:1b:fb:ce:65:4b:7c:6e:de:75:
b6:9a:f5:e4:8a:4e:bf:0f:90:99:63:98:ef:db:5c:
34:b5:4a:80:26:46:7d:93:aa:42:9a:56:35:ba:08:
4e:46:a0:56:4d:ca:36:73:d5:e8:59:1b:6f:b5:61:
c0:99:cc:51:86:33:60:0a:57:17:d9:58:7d:2b:f0:
9e:e0:2f:40:c9:e7:59:d9:73:7c:d5:84:bb:d6:09:
bc:df:9d:e9:3b:29:45:e2:b1:34:7d:3b:9f:6d:b9:
32:a9:12:86:3c:83:5f:6e:fb:39:f3:b2:f6:df:d6:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:FA:C4:02:5F:26:61:CC:29:51:DB:B2:25:B9:52:21:B6:C3:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h_j6xAJfJmHMKVHbsiW5UiG2w_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:44:99:7c:d9:7c:62:72:b8:77:ea:0c:d5:a0:97:f7:35:d5:
47:e1:23:79:bd:a2:e1:ef:0a:4c:26:91:53:65:3b:f4:32:72:
fa:5d:36:47:b5:ea:7f:3c:6c:87:b1:58:46:89:3b:6e:b3:b4:
10:01:8f:7d:32:47:54:40:7a:ff:c8:bf:21:50:b6:e8:12:f0:
fb:59:a1:9b:a3:c9:08:1f:2d:39:30:52:7c:08:03:6e:c4:96:
44:1d:14:49:c9:31:b2:b3:03:b9:fb:49:e4:49:f0:55:4f:d8:
3a:95:40:8c:52:e2:99:d9:c5:b9:be:2a:1a:81:58:31:ed:87:
60:56:48:e6:f4:21:87:b3:38:85:48:ce:60:5c:08:c0:c6:b6:
a3:f3:41:20:8a:93:39:ef:5c:99:82:a0:ea:ff:9c:68:3c:be:
b0:99:d1:a1:47:bf:e8:0e:21:ee:fb:df:dd:12:fb:90:ef:ad:
04:b9:f4:e5:e9:b7:4b:ee:c9:63:73:93:08:70:6b:f4:56:06:
a2:d5:ca:52:9c:42:a8:8e:b8:b7:fc:23:0e:1f:d7:f2:32:63:
a0:ac:92:7d:dd:2f:40:e4:29:d7:b9:97:1d:6a:e3:3e:0f:96:
24:50:63:3b:27:53:d1:0a:74:66:86:84:1d:4d:73:d5:f2:cb:
92:4f:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org