Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jNWPZXZ0f3VtTCz1ifN41msUSvs.roa
File: jNWPZXZ0f3VtTCz1ifN41msUSvs.roa (raw, json)
Hash identifier: XJRzA8t8o8JueshYkwE9woy5v+FVmwVmBodOO2XBXOc=
Subject key identifier: 8C:D5:8F:65:76:74:7F:75:6D:4C:2C:F5:89:F3:78:D6:6B:14:4A:FB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B91
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jNWPZXZ0f3VtTCz1ifN41msUSvs.roa
Signing time: Mon 08 Apr 2024 00:22:59 +0000
ROA not before: Mon 08 Apr 2024 00:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15249 (0x3b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 00:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8CD58F6576747F756D4C2CF589F378D66B144AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:cf:05:da:13:70:3b:7f:4a:c8:51:5b:f1:
74:e6:06:e5:3a:57:96:f7:cd:c7:d8:f1:22:6f:90:
28:c4:58:c0:49:c8:f0:82:25:f3:41:f2:5f:4d:ad:
0e:ca:23:39:1f:66:fa:73:f4:11:c7:54:8c:d0:68:
c9:3b:d8:cd:e1:37:8c:19:27:fd:6c:71:53:a6:22:
90:1f:8d:14:7a:da:f9:d0:c6:26:9f:ae:6d:80:0a:
b1:f9:6c:e6:2b:1a:cc:39:81:1b:f8:0a:5e:48:05:
5a:1b:76:61:47:bd:9b:62:a7:05:7d:ed:38:d1:9f:
d6:72:74:4d:32:e0:b7:d0:2f:16:df:0f:dc:05:a6:
8f:ff:25:bc:ae:ec:e8:72:18:b6:cd:87:b5:76:ba:
d6:db:27:b4:6a:75:83:9f:b2:54:aa:02:9d:77:16:
21:48:cf:ee:21:b6:b2:9f:9a:34:3a:8d:09:5d:39:
2e:64:b9:8d:d2:07:4a:c3:33:25:56:a4:27:25:68:
6c:12:3b:3d:4c:a0:91:c7:44:6e:89:57:76:5b:32:
f5:d3:9f:8c:f5:1d:1b:fb:9e:20:d7:1c:72:58:a6:
bf:db:0c:d1:09:07:95:38:96:11:84:0e:f8:1d:ba:
d7:f3:01:fe:d2:f1:97:3c:de:ca:e8:74:e3:fc:56:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:8F:65:76:74:7F:75:6D:4C:2C:F5:89:F3:78:D6:6B:14:4A:FB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jNWPZXZ0f3VtTCz1ifN41msUSvs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:7b:c5:af:d6:11:f5:40:f9:b0:1c:a1:c8:13:f5:60:ef:59:
d9:d1:f6:4c:97:ba:de:6a:77:4f:ea:a2:53:2e:5c:6f:30:01:
0b:82:01:8d:16:6a:33:a5:38:fd:73:11:3e:75:57:e8:50:8e:
17:20:ee:31:df:1e:b0:e8:33:42:58:01:ca:96:9c:f0:3e:33:
52:bc:57:b2:4a:eb:91:8b:90:b1:16:dd:bc:44:ed:c0:d9:cf:
e7:b3:63:a3:41:8a:9f:3b:25:e3:7b:ff:a6:93:59:06:70:36:
ee:bc:19:ce:26:4f:fe:89:18:49:7f:f9:48:f9:30:4c:85:b4:
54:fa:46:11:ae:c7:25:a3:8a:3c:5c:52:64:eb:97:3b:a1:93:
01:24:10:35:f2:c8:37:2f:80:1b:cc:f4:83:44:d7:0d:2e:10:
ea:6b:2b:cd:b9:10:2f:58:a5:d7:8c:54:31:c4:ad:56:20:fc:
02:75:1c:30:05:4b:55:7a:c0:46:42:50:7f:5b:14:10:ae:65:
cb:e9:50:7b:cd:15:a6:c2:6a:9b:fc:62:11:20:62:b7:58:0d:
a1:70:1b:bd:8e:14:07:b8:a2:e4:4e:bf:53:aa:11:03:00:10:
07:8c:d8:a5:5d:9b:e0:34:06:b4:4d:59:07:22:a9:81:ff:39:
7d:07:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org