Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j645zDYKCfx5DL6yKd0LYydYyf0.roa
File: j645zDYKCfx5DL6yKd0LYydYyf0.roa (raw, json)
Hash identifier: /xUoXnLpJgdC9JEwyUZMCIEV3MW4kCg0/onItu841V0=
Subject key identifier: 8F:AE:39:CC:36:0A:09:FC:79:0C:BE:B2:29:DD:0B:63:27:58:C9:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j645zDYKCfx5DL6yKd0LYydYyf0.roa
Signing time: Mon 01 Apr 2024 19:52:11 +0000
ROA not before: Mon 01 Apr 2024 19:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14061 (0x36ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 19:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8FAE39CC360A09FC790CBEB229DD0B632758C9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:37:67:b5:b7:39:eb:51:6c:73:79:83:4c:
4a:0c:5f:8f:45:bc:bd:6b:db:63:d9:f5:40:a6:02:
4a:93:42:61:87:f5:c3:34:3b:31:1b:a1:52:cc:00:
3f:8e:9f:2f:92:20:ff:86:a6:73:7c:67:3d:b1:8c:
d1:07:fb:50:50:81:24:c3:4d:3a:88:70:51:3e:ff:
ab:1a:d5:f2:15:84:16:86:0a:0e:a3:00:a9:9a:e6:
36:e8:74:ab:62:35:ab:81:4a:b2:a1:a4:59:13:ad:
4a:6e:42:f8:40:5e:e5:52:55:5c:45:ad:bf:63:22:
a8:83:d4:d6:f8:63:72:ac:33:b6:f9:4a:5b:1a:99:
b2:10:13:8b:4e:d5:f1:f2:68:95:b1:d7:a3:f7:9f:
d8:dc:9b:0b:07:57:62:2d:a3:df:cd:07:3c:33:5b:
6c:28:36:6c:7e:5a:95:69:4c:63:ab:93:b6:1f:81:
74:19:1d:13:7d:46:b4:7d:5e:34:41:f2:26:6a:fd:
48:8f:e4:83:d3:ff:18:57:b8:22:82:04:cd:ff:06:
e1:d2:d1:91:02:a3:0e:5b:ea:e7:22:ca:1f:2a:ae:
57:9e:91:e8:e3:60:60:ca:a0:36:ea:4f:03:e8:05:
e3:50:2b:a1:b9:c3:51:42:85:d8:02:66:6a:53:d3:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:39:CC:36:0A:09:FC:79:0C:BE:B2:29:DD:0B:63:27:58:C9:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j645zDYKCfx5DL6yKd0LYydYyf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
85:09:a6:74:79:cb:c3:06:02:35:05:d2:9b:05:78:3c:8f:35:
9b:73:18:b4:92:f8:5a:de:10:da:99:cb:c4:a8:49:b8:02:db:
8c:48:05:e3:25:cb:f6:a3:2e:a8:ad:d8:26:92:6c:34:f7:e6:
57:ad:a6:8a:9c:3f:61:f2:8a:57:3d:2d:75:bf:45:af:14:b8:
b5:17:87:80:07:39:34:36:f4:ce:9b:34:0a:42:0a:a6:a0:90:
96:db:6f:87:22:57:bc:2e:7d:14:60:f9:43:d6:90:55:58:5e:
fd:64:4d:fb:5a:c4:17:f6:08:fd:ee:f5:ad:f8:1b:f9:9b:96:
b8:54:bc:51:18:97:08:7f:17:78:f9:13:5e:f7:20:76:7a:59:
70:a9:9a:bf:f4:ab:33:bf:98:38:60:b0:d6:55:09:3b:9e:50:
6b:45:cc:f6:f6:33:6d:57:30:9e:6f:01:fc:48:6f:3d:f6:dd:
d8:5d:66:6f:87:be:9b:aa:45:57:45:59:7c:3b:6b:09:37:fe:
33:78:53:b9:10:6f:d1:fa:14:75:43:c8:42:74:ad:60:99:56:
39:38:78:55:ed:1d:8c:f1:82:45:82:a2:f6:30:ad:3e:08:0e:
07:64:5e:d5:46:8a:2d:36:35:76:4e:78:84:68:eb:e4:f9:f9:
bf:9a:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org