Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jkMbxsM1odYyCZ30hU95EpXYQbY.roa
File: jkMbxsM1odYyCZ30hU95EpXYQbY.roa (raw, json)
Hash identifier: qb03Oln0aFm+ZsLdm3PcSMHX9DJKHFnUmB9FJb0E93U=
Subject key identifier: 8E:43:1B:C6:C3:35:A1:D6:32:09:9D:F4:85:4F:79:12:95:D8:41:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E45
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jkMbxsM1odYyCZ30hU95EpXYQbY.roa
Signing time: Thu 02 May 2024 22:53:42 +0000
ROA not before: Thu 02 May 2024 22:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20037 (0x4e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 22:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E431BC6C335A1D632099DF4854F791295D841B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:55:26:90:4b:1c:a6:a4:6c:41:7e:37:65:
d8:e0:61:cd:15:eb:fc:83:a0:1e:c3:72:2f:42:42:
0a:50:1c:b9:13:07:bd:0b:f9:65:e0:1a:25:ae:c2:
73:33:9c:63:aa:a3:dc:80:75:e7:62:ee:23:e4:05:
f9:f1:10:79:35:11:90:0f:41:54:65:2f:0d:73:97:
5f:9e:d6:50:51:2e:6f:b1:cf:63:8d:c4:6c:b8:00:
22:0d:1e:71:79:41:f1:9b:95:6c:47:c5:4b:2f:c8:
af:65:75:24:d2:a9:71:63:e4:b1:18:0e:97:1b:af:
67:58:aa:52:ff:ce:76:6b:af:5f:df:fb:6d:45:1d:
92:51:fd:7c:58:88:b8:da:79:b6:24:8a:a8:ac:ef:
60:cd:b6:92:04:52:00:52:c4:5f:05:5b:4a:6c:10:
67:c3:f2:f3:2a:80:d5:69:16:10:22:a1:0c:00:ee:
3c:33:72:13:81:cc:2e:c1:f1:5a:7a:e3:c5:a2:e7:
40:fd:4c:0b:55:85:a3:a3:6c:a4:0d:b2:7b:57:6e:
a0:ab:bd:49:af:d2:91:dc:6a:9c:62:31:f4:0f:4f:
f9:76:09:06:45:e6:97:93:63:dd:c6:9d:4d:5d:4f:
1d:35:5a:dc:38:57:fa:c6:7c:ab:46:a5:b5:9c:f7:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:1B:C6:C3:35:A1:D6:32:09:9D:F4:85:4F:79:12:95:D8:41:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jkMbxsM1odYyCZ30hU95EpXYQbY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:b4:51:7e:f0:87:70:55:69:ad:d3:45:9f:aa:06:c3:71:f6:
5e:7a:a9:da:0f:01:ab:3f:d7:df:9f:a0:18:20:72:fc:4f:91:
35:74:5b:93:22:28:1f:e1:79:9d:74:85:cf:7a:9a:df:37:49:
03:f5:7f:2b:e6:ca:16:2c:2c:5c:56:0f:a1:8c:fa:75:de:b4:
d0:51:07:45:f0:fc:6a:ce:36:38:b0:b9:34:33:7f:fa:f9:fb:
cd:eb:cf:8d:1a:c2:b9:5b:61:45:4d:b6:e9:a5:79:f8:72:5d:
f5:d9:82:01:06:15:c8:6a:ef:ba:de:40:73:0c:9a:af:40:67:
48:de:1f:a2:6a:9f:b4:f6:bb:32:b3:b9:3f:bd:5b:f8:d4:86:
ae:9c:6f:5e:75:1c:e1:f0:46:53:d6:92:28:92:28:2d:51:42:
3b:a7:0b:8c:66:3f:43:3c:49:c5:ac:f9:f5:7c:3d:d6:34:28:
a3:37:3e:af:28:ee:1d:2f:19:0f:ea:c2:f3:6d:09:12:15:e5:
b0:c6:c3:4e:21:fe:88:e4:bb:9b:22:d4:46:b1:98:4a:21:ff:
40:5e:e5:ca:a2:ee:70:c9:66:0f:47:c0:fc:14:4c:29:b7:73:
3e:7b:2e:1b:43:8d:40:8f:14:c8:ab:36:dd:84:ef:c7:15:d3:
bf:00:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:58 2025 by rpki-client