Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hgexBwKVtq6XtZN0sEtVA-LBcrs.roa
File: hgexBwKVtq6XtZN0sEtVA-LBcrs.roa (raw, json)
Hash identifier: DfRSZpf60QlmUuz1tS10wWRfWF8/x0tCpYKTa9sZ0Tk=
Subject key identifier: 86:07:B1:07:02:95:B6:AE:97:B5:93:74:B0:4B:55:03:E2:C1:72:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F51
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hgexBwKVtq6XtZN0sEtVA-LBcrs.roa
Signing time: Sat 04 May 2024 08:23:58 +0000
ROA not before: Sat 04 May 2024 08:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20305 (0x4f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 08:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8607B1070295B6AE97B59374B04B5503E2C172BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:18:01:41:8a:b8:b2:19:20:d4:23:be:2d:
ab:f0:82:ac:d4:85:8b:d8:73:17:be:21:95:29:a1:
c5:ed:ff:21:8c:2e:6a:46:49:18:61:df:49:05:a0:
59:87:41:5b:ef:5b:4f:85:5e:3e:43:dc:19:19:d2:
3a:50:ee:b2:7d:b4:58:ff:c0:2f:e2:23:6a:31:a7:
e1:27:26:64:b5:aa:8a:fb:c0:54:09:14:08:82:a8:
01:3d:b7:ac:5f:a9:11:31:bf:3d:f3:62:93:64:df:
3d:44:3b:35:07:02:96:3b:c6:3d:10:1c:83:78:70:
08:e7:6e:24:58:be:14:4d:6a:89:56:b1:1b:49:3d:
a3:f4:1a:d1:30:00:b3:dc:ac:3c:87:e8:0f:f0:31:
58:b4:56:d9:df:f5:74:8c:47:6b:7a:8b:2c:5e:d3:
89:37:05:d0:6a:d6:d5:9e:8c:75:fc:78:9b:b3:b0:
be:90:5e:ed:d5:11:f0:22:e8:fc:3f:89:f1:e0:07:
c0:b2:ae:e8:b0:e9:da:cd:6e:43:de:fd:18:bb:89:
5b:42:81:66:77:90:ca:b9:b3:ec:13:6c:2a:d0:46:
6c:64:f7:43:55:e0:92:d1:53:4b:af:4b:c6:5f:9e:
26:a9:dc:c8:2f:0f:d8:92:a5:73:84:e9:1c:5f:7a:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:B1:07:02:95:B6:AE:97:B5:93:74:B0:4B:55:03:E2:C1:72:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hgexBwKVtq6XtZN0sEtVA-LBcrs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
05:01:bb:f5:1a:d8:47:89:0f:33:33:01:5c:3f:8d:f5:a6:de:
f4:84:37:3d:1b:96:e6:f4:d6:02:61:f7:2f:04:a0:a2:0c:e8:
69:75:73:88:df:da:de:9b:bf:b5:5d:3f:3e:df:8a:d8:eb:e5:
35:e4:fb:2f:74:db:ee:5b:44:22:69:30:d8:8a:5b:ac:60:d3:
c4:da:49:8d:5e:ce:f4:97:75:b1:66:b7:d3:0e:fb:7a:57:35:
61:b0:0e:38:95:59:24:cb:17:99:d1:6c:26:ba:5a:78:a6:8f:
f0:f5:b0:8a:2e:34:91:c4:68:94:fa:27:21:e1:49:0d:de:b0:
0d:57:d4:a8:b4:fd:09:0c:c7:ba:fc:de:9f:c8:f0:e8:63:3c:
a5:5f:d4:36:e3:9d:60:81:c3:68:39:b2:e5:29:95:5d:5c:19:
b6:4b:ba:95:c7:9c:f9:65:24:f8:b6:74:7c:38:51:f4:d6:a6:
c3:c5:a6:ae:09:62:ba:9d:cb:19:53:12:8b:64:0f:ae:3a:6e:
80:e1:b9:c3:05:15:77:eb:f6:76:f0:29:59:c0:7b:13:57:fa:
51:48:7b:c7:3d:3b:fd:c8:7c:64:57:57:e1:7e:4e:73:94:eb:
0f:f4:e0:ef:1c:1e:57:76:bf:2b:db:bf:31:38:4e:30:8b:bc:
dc:d1:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:43 2025 by rpki-client