Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jD9WajLzTn_gzt0A_oK5do8kKk0.roa
File: jD9WajLzTn_gzt0A_oK5do8kKk0.roa (raw, json)
Hash identifier: f5tmIfPqTUdbjj1p7aSvZPAINjBzS6NmgBvcUbdstE0=
Subject key identifier: 8C:3F:56:6A:32:F3:4E:7F:E0:CE:DD:00:FE:82:B9:76:8F:24:2A:4D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3799
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jD9WajLzTn_gzt0A_oK5do8kKk0.roa
Signing time: Tue 02 Apr 2024 17:22:13 +0000
ROA not before: Tue 02 Apr 2024 17:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14233 (0x3799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 17:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8C3F566A32F34E7FE0CEDD00FE82B9768F242A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:71:8b:b7:72:e2:3f:af:2b:3b:5f:fb:16:
69:d1:39:d5:f3:63:93:94:10:5e:99:96:8e:2c:ff:
a7:11:c3:6f:2b:76:aa:5c:6c:56:43:08:e5:20:d1:
17:e7:54:e9:e0:7c:47:4a:f4:47:b8:e1:7b:ff:83:
df:52:d4:ed:34:03:91:83:96:7c:97:94:af:33:fb:
9c:78:f5:b4:16:7f:7a:ab:df:3e:4e:48:91:3a:14:
18:31:b9:48:8e:79:52:53:3a:d7:ae:2a:a9:9d:f2:
9a:a3:39:42:d0:2f:84:7e:25:8d:2e:37:24:55:25:
23:db:3f:13:22:50:5e:5f:3c:76:06:d5:ae:ea:3f:
47:8b:8a:5b:f3:91:2d:5f:af:ba:fb:4c:51:58:c2:
dc:d3:de:33:2c:7d:d6:38:b7:8c:33:54:9b:3b:2d:
ec:3f:b9:bc:17:fa:42:d3:2d:cf:00:04:70:b1:20:
38:55:42:93:e8:77:4e:c4:26:02:bf:de:e4:68:60:
78:0d:33:0f:e2:38:3c:98:b5:88:42:97:f6:37:3c:
d1:16:e8:15:c7:d2:43:0d:3e:8f:5b:46:53:f0:07:
80:0b:ea:e5:b7:44:6d:2b:49:f2:92:b0:1d:a2:c9:
3a:57:51:21:3c:ee:1d:8a:6a:ef:63:ea:2d:fd:6b:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:56:6A:32:F3:4E:7F:E0:CE:DD:00:FE:82:B9:76:8F:24:2A:4D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jD9WajLzTn_gzt0A_oK5do8kKk0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
14:5c:b1:75:33:d7:c0:40:44:55:b6:ae:1f:ff:1b:6d:57:17:
4a:e6:74:dd:7a:0a:17:25:be:f8:9d:4e:58:18:08:fb:33:93:
f5:1d:1b:3d:37:aa:b9:49:9a:ee:56:2b:2a:d5:b4:2c:dc:0a:
1a:d9:90:b4:c0:9b:dd:4e:48:94:1a:bd:db:72:cf:d4:88:9f:
18:3f:4b:8c:67:97:e9:eb:9b:00:4f:b1:f4:97:6a:97:0a:e2:
77:82:8d:f8:27:29:5b:11:fe:2b:69:6c:f2:d2:88:3a:3a:d2:
a2:fb:ba:66:b9:dd:35:8c:bc:f2:21:5e:34:42:00:37:d5:21:
fd:f2:33:88:98:07:40:b3:a5:ef:73:ba:d2:94:a2:c9:40:db:
c1:9e:ab:c4:e8:ba:da:86:c2:0b:52:62:a6:02:57:46:a7:2f:
fa:ab:9d:21:57:04:e0:b4:94:ba:12:03:c2:35:cc:c1:63:1e:
0d:9b:d8:96:69:ef:53:3a:df:30:97:60:18:0b:4a:d0:52:c3:
31:14:fd:88:29:00:0d:6f:dd:86:9b:89:c7:a4:e3:7e:36:6f:
b3:7e:77:bf:e9:6d:e5:6a:d1:b7:ab:90:ca:e0:c4:a5:76:bf:
b1:4a:9d:75:c7:16:70:d8:74:8e:19:30:aa:67:be:f2:75:ee:
be:6e:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org