Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/i_1g747jwMIOsUbbR7qXM7U3deU.roa
File: i_1g747jwMIOsUbbR7qXM7U3deU.roa (raw, json)
Hash identifier: qmlV7fRj9Yzg4bUD5nv8DxBhYKvzM4IxGJxvei6bW60=
Subject key identifier: 8B:FD:60:EF:8E:E3:C0:C2:0E:B1:46:DB:47:BA:97:33:B5:37:75:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 32F1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i_1g747jwMIOsUbbR7qXM7U3deU.roa
Signing time: Wed 27 Mar 2024 12:22:09 +0000
ROA not before: Wed 27 Mar 2024 12:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13041 (0x32f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 12:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8BFD60EF8EE3C0C20EB146DB47BA9733B53775E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:00:00:6e:d5:6d:88:96:51:0d:2f:80:39:
36:3e:1d:f5:e3:83:f6:3d:5f:a1:b1:1f:e2:2d:ef:
e5:c8:1d:71:7d:24:d6:88:8a:67:90:78:c1:a1:e6:
3a:61:4e:c5:be:93:7e:ef:19:18:be:75:0c:18:d2:
6c:67:46:21:9d:1b:89:d0:30:73:9e:1e:f9:82:ea:
ef:cc:3c:ff:d0:87:9d:94:5b:46:99:7f:59:c9:2c:
82:f7:72:c6:5a:20:14:b4:00:40:b1:0e:63:e5:77:
d4:cb:c8:98:e3:44:2a:6a:af:76:73:4f:29:47:d5:
fe:32:7e:6a:31:f9:ec:fc:af:46:e3:ec:f3:ad:e1:
71:d8:7c:c8:99:d1:71:46:c2:a3:56:61:dd:7e:c5:
8a:f2:f7:0a:bb:99:61:75:5c:06:1d:b0:88:39:d8:
a9:80:df:b8:b1:b1:bb:9a:0d:3c:cd:a8:ee:8e:80:
3f:ee:a9:33:36:d8:f0:50:a2:5e:50:18:02:3a:6d:
c6:2f:9b:4c:6a:eb:06:d0:59:79:e9:e5:f7:0d:5b:
e1:13:0e:6e:72:82:a4:0b:3d:be:2e:ec:95:a6:c0:
96:f6:e7:21:a4:2c:71:e9:bf:37:e2:ec:90:bb:a4:
03:a9:e7:f2:cb:f7:e8:8a:19:83:56:ca:4c:a5:51:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:60:EF:8E:E3:C0:C2:0E:B1:46:DB:47:BA:97:33:B5:37:75:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i_1g747jwMIOsUbbR7qXM7U3deU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:29:a7:f2:05:65:04:6d:5b:72:ac:c4:80:eb:ce:1b:78:6f:
20:90:c2:e3:e8:de:dc:7d:44:19:1f:75:2a:ee:b6:13:12:4a:
37:e9:65:df:05:45:4f:3f:c2:01:68:6b:64:11:30:f9:ce:24:
b6:15:3c:30:c0:81:19:39:bf:06:e7:22:61:fc:92:53:ac:9a:
30:0f:27:1a:c2:c8:a2:09:b6:9a:9e:99:ab:a7:f3:d8:e4:02:
89:69:68:2e:e7:70:53:66:d4:26:53:15:63:58:f2:58:80:d1:
09:5a:42:94:58:54:91:e8:17:a8:17:5c:d6:b0:d8:9e:84:1f:
f1:68:45:ba:85:5d:b4:fb:e1:c9:58:cc:60:9e:7c:80:81:de:
1e:d4:0e:73:90:38:d5:20:6f:0f:7c:63:b5:4c:2d:60:58:a0:
5b:34:a5:01:d6:05:da:e2:c8:ed:1c:a6:41:98:c4:15:f0:c4:
16:19:16:fe:35:ba:2c:54:d5:10:66:b8:d5:79:52:c7:13:ec:
63:9c:16:36:31:84:9f:ce:5e:3c:92:5a:83:6d:00:6e:d6:e2:
f7:57:98:02:e9:c4:da:e4:f9:07:fb:5a:80:05:a4:31:52:74:
00:37:af:fb:05:4a:47:e4:2c:dc:a5:76:23:39:92:09:b6:0d:
95:6f:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:45 2025 by rpki-client