Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jzpLzTd8jfkR9VHUoPeI6VQ-TRA.roa
File: jzpLzTd8jfkR9VHUoPeI6VQ-TRA.roa (raw, json)
Hash identifier: /dIuMIulGMBP45Rpno04kgei5/KH565t+bXrDMJ4z2E=
Subject key identifier: 8F:3A:4B:CD:37:7C:8D:F9:11:F5:51:D4:A0:F7:88:E9:54:3E:4D:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A95
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jzpLzTd8jfkR9VHUoPeI6VQ-TRA.roa
Signing time: Sat 06 Apr 2024 16:52:32 +0000
ROA not before: Sat 06 Apr 2024 16:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14997 (0x3a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 16:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F3A4BCD377C8DF911F551D4A0F788E9543E4D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:2a:c8:e6:00:ea:01:b8:41:1a:e0:36:c0:
c3:86:52:5d:14:ef:de:ea:41:86:c1:8e:97:b8:b4:
79:da:10:c8:eb:1e:7c:b4:0e:51:95:f5:58:43:81:
b8:06:17:99:72:f7:75:ed:06:b5:f3:01:0f:51:d7:
aa:8a:a6:f3:88:13:03:c2:c1:2c:61:42:01:fe:52:
6b:6a:ff:b4:d0:4a:b7:dd:63:2d:5f:d0:00:74:10:
88:da:ef:27:29:14:25:f5:45:fe:1e:2e:f6:bb:0f:
c0:9f:ad:94:3f:e8:b5:ff:0d:0a:04:2b:27:ed:b5:
93:eb:7e:0d:d5:bd:26:b6:e2:e4:1c:5b:dd:cf:6b:
84:b2:6f:b0:8c:6e:4a:9e:11:81:7b:dd:14:94:c7:
39:2b:95:a0:c9:3d:12:f3:67:ad:a7:eb:06:0e:eb:
cb:39:21:ba:70:fc:e1:6b:b3:bb:a9:ec:d6:e5:2b:
7a:23:04:6f:c2:44:28:19:d6:88:5d:5c:6f:da:f9:
e0:fc:38:2d:23:8a:ce:f1:aa:e2:f8:a4:83:81:05:
46:5e:d8:27:7d:96:7a:1d:23:f3:f5:6b:d7:22:c3:
55:a5:2e:79:b0:a5:a6:8c:66:8d:c9:41:1f:95:3c:
17:4e:eb:be:a5:89:fa:c3:32:24:c5:84:12:d0:09:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3A:4B:CD:37:7C:8D:F9:11:F5:51:D4:A0:F7:88:E9:54:3E:4D:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jzpLzTd8jfkR9VHUoPeI6VQ-TRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:ff:be:34:a2:24:28:53:1a:19:07:dd:d9:4f:e9:39:44:b6:
91:4b:bd:c5:9b:97:29:b1:c8:19:98:96:bd:4f:85:6e:a9:40:
99:ea:71:81:e9:dd:56:0d:69:0f:7b:7e:20:01:0e:68:85:84:
34:69:c5:59:b2:75:88:bf:6e:1a:0b:cd:b1:f6:16:a4:86:3d:
90:e2:65:89:bb:01:70:3c:3a:e6:32:61:2e:61:6d:a9:7d:18:
28:6b:87:73:41:25:96:79:6f:f4:29:43:0a:93:7d:40:ad:f8:
fd:e6:96:ff:00:93:35:31:e2:95:67:b5:41:4f:87:22:ae:6f:
5f:b6:65:c6:fe:70:8f:e7:f2:af:68:82:58:28:cc:18:bf:cd:
f1:ce:73:97:16:13:05:90:ef:15:56:3b:d1:7b:8d:a9:5e:50:
6d:07:c4:8f:7b:a5:54:b4:c7:1b:75:00:2a:75:a5:cb:29:d2:
49:b4:85:51:be:3d:06:96:db:9d:d7:52:de:da:31:78:c9:2c:
eb:a5:4d:2d:2c:dd:34:9c:a4:38:b3:fb:df:43:ab:8c:25:75:
0e:c0:40:22:e3:45:bb:21:2d:69:ff:60:cb:89:38:d4:01:3b:
dd:53:d9:16:2c:7f:4a:46:35:eb:8a:7b:35:28:3d:1f:22:e0:
eb:b1:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:05 2024 by rpki-client on console-ams.rpki-client.org