Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j-0YW_8sZkkkZxSXllOxw1mHAyg.roa
File: j-0YW_8sZkkkZxSXllOxw1mHAyg.roa (raw, json)
Hash identifier: CBsobfyG8JefjScRICUx6uGJ3NHcfwMcSOtSpIDLQFM=
Subject key identifier: 8F:ED:18:5B:FF:2C:66:49:24:67:14:97:96:53:B1:C3:59:87:03:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4265
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j-0YW_8sZkkkZxSXllOxw1mHAyg.roa
Signing time: Wed 17 Apr 2024 02:52:57 +0000
ROA not before: Wed 17 Apr 2024 02:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16997 (0x4265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 02:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8FED185BFF2C6649246714979653B1C359870328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:97:3a:ae:23:2a:d7:38:8b:cb:98:6e:b3:
14:04:e0:69:76:c5:ef:c6:86:ac:b9:63:8d:3f:c1:
c5:f3:8c:a0:15:7b:c9:da:ee:76:24:19:68:4e:b2:
2a:6c:c9:4d:af:94:05:35:2e:62:57:3b:f4:d1:fb:
3f:3b:2f:b5:4d:65:94:21:f0:ee:17:2b:43:08:e9:
88:05:a0:2b:1a:4e:c2:33:42:ed:16:e1:c1:1b:a7:
ed:4e:62:91:ab:07:30:9d:d8:f5:ec:e9:74:88:f5:
96:d3:8a:24:3c:dd:84:74:7f:e5:6b:37:e6:a0:11:
4c:65:c8:9c:b8:27:0c:15:97:f6:0b:34:01:e0:79:
0d:e6:5f:12:4c:ed:a4:d7:17:e6:7d:bd:ef:fd:40:
64:1a:e5:54:ab:9a:7f:06:d3:91:f4:98:e4:43:f5:
e9:fb:b0:4e:67:b3:b5:79:42:cf:ec:9b:0f:57:41:
9a:9c:91:b9:ba:7d:58:3f:01:6b:76:78:6d:4d:cd:
40:0a:20:6a:36:05:9d:a8:24:4c:0d:bf:f7:f2:ad:
ee:a3:10:04:8b:65:3e:87:b6:c4:c1:65:2d:1c:16:
e4:c2:03:4f:61:ee:48:b1:b9:77:d2:5b:78:c6:70:
b0:e8:0b:e0:5c:13:cc:09:7e:62:9a:8c:73:66:14:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:18:5B:FF:2C:66:49:24:67:14:97:96:53:B1:C3:59:87:03:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j-0YW_8sZkkkZxSXllOxw1mHAyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:c4:1c:f9:ec:c6:ee:61:46:00:0a:23:03:db:4a:dc:84:f0:
13:cf:81:1c:64:ed:0b:58:25:40:dd:e0:0d:eb:f8:13:b2:36:
03:c9:ce:ac:bb:d8:61:07:d0:7d:50:fb:63:52:71:a9:a0:e0:
24:e9:cb:62:54:59:73:5b:83:63:1a:4c:17:d5:3c:e9:de:5e:
09:7c:64:44:d2:96:58:24:b4:06:48:b8:a1:1f:de:90:d4:65:
39:a5:4a:76:eb:1c:30:26:f9:31:da:9e:33:5f:d5:8d:a0:41:
fb:c5:e0:5e:a0:b8:9a:09:b6:ae:0b:84:f9:c4:0f:08:9b:99:
e0:81:10:6b:89:e8:bc:60:55:82:41:3a:87:47:9b:95:10:a4:
23:2b:74:82:01:df:57:13:fc:c6:10:34:41:bf:43:67:d7:fb:
22:21:df:d7:81:e3:dd:35:be:34:3e:e0:9a:09:94:e0:e3:5e:
6f:97:46:3f:f0:9a:c3:2d:2a:a5:9f:e9:f5:04:ee:35:d8:3c:
d4:cf:54:22:16:e6:20:33:21:89:93:b7:a2:45:ae:f5:b2:fb:
01:a8:f4:f7:3b:c1:fe:fe:18:1d:69:32:b6:cc:43:ea:58:53:
23:27:2b:f3:82:82:7f:d5:6c:dd:bf:90:4f:0d:14:23:8b:54:
da:c0:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org