Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/k24JogMqGLSNaT4lgFW6F9c73Jk.roa
File: k24JogMqGLSNaT4lgFW6F9c73Jk.roa (raw, json)
Hash identifier: 33kSofUCU56sMlUHrGzpFjnZQnNYRC6aIZaNLiBIM+M=
Subject key identifier: 93:6E:09:A2:03:2A:18:B4:8D:69:3E:25:80:55:BA:17:D7:3B:DC:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DD1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k24JogMqGLSNaT4lgFW6F9c73Jk.roa
Signing time: Thu 11 Apr 2024 00:22:43 +0000
ROA not before: Thu 11 Apr 2024 00:22:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15825 (0x3dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 00:22:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=936E09A2032A18B48D693E258055BA17D73BDC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:0e:90:0c:e5:ce:1f:c4:32:bf:02:a3:21:
89:45:28:94:c4:76:ab:c4:b9:49:79:f1:65:db:7b:
04:d4:80:a0:d6:66:b7:a7:37:b1:7b:20:53:30:fb:
8c:40:3c:a5:cf:3d:3a:6b:25:0f:d3:35:0d:5e:b4:
34:8f:bb:e9:1f:57:98:8f:8c:c8:4b:32:59:ee:2c:
ca:25:25:02:f4:4e:2c:f6:d6:a8:d7:04:d7:4d:01:
0c:d6:b1:a0:b7:e9:0a:58:41:ff:94:f5:c6:f6:97:
9c:af:c4:a5:3c:1f:ec:c6:c9:70:40:ac:02:22:b0:
22:d4:c1:a5:c4:b7:d4:69:52:b7:08:97:c8:de:08:
2e:2d:a7:f6:ad:0e:fa:b6:23:c6:6a:37:44:3a:60:
03:83:44:5a:35:c8:8e:16:f9:18:a7:58:72:e8:d9:
42:48:63:03:04:ae:d1:e9:1c:3d:57:1c:a5:36:91:
9a:39:c9:6f:09:fa:76:3e:5a:66:09:ee:a6:74:29:
ea:fe:63:b1:e2:b8:fa:0a:b4:75:29:66:f4:55:1b:
86:09:bc:02:3e:d0:11:38:bc:1e:a0:08:f6:d7:18:
74:2e:32:e3:9e:32:dd:c4:ab:e8:c8:76:c1:04:af:
72:da:49:b0:26:11:29:d9:04:6a:28:9d:73:1f:c5:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:09:A2:03:2A:18:B4:8D:69:3E:25:80:55:BA:17:D7:3B:DC:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k24JogMqGLSNaT4lgFW6F9c73Jk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:f7:85:f5:48:2f:52:ee:9c:be:2e:98:a4:f3:f8:27:47:53:
94:65:c9:19:81:9b:68:b4:a8:10:4f:7b:1b:59:e2:67:bd:7b:
90:ef:28:20:cc:3d:c2:78:c4:0a:3c:a0:5a:8a:78:1f:e8:c0:
2f:6b:70:82:d0:c1:dd:84:57:fc:dc:49:1d:46:e2:ef:b2:29:
ca:e8:bb:45:d8:62:72:35:40:d3:42:60:07:b1:44:19:53:3b:
d6:4e:be:35:b7:f0:d7:80:6e:26:2b:28:a6:08:ff:b6:bc:1f:
ee:ce:31:e4:79:14:d3:be:c7:dd:63:6f:46:ef:82:1b:0f:38:
92:16:80:f0:9a:f3:83:1c:d8:7b:fe:ec:a5:4a:70:9b:cb:b9:
cf:75:22:50:cf:75:e8:67:35:91:df:15:83:ac:8a:86:3d:fb:
1f:b5:6d:bd:1d:91:ef:a1:83:24:5f:74:b0:99:c8:64:5a:47:
f3:60:85:f5:80:02:d7:8d:5f:59:43:6e:ff:26:e3:fe:8b:91:
2a:a1:05:a8:2b:6d:a8:74:b5:63:0d:dd:bc:ed:6c:38:24:cc:
b9:ca:ac:c9:99:c3:31:04:c4:16:52:dc:dc:02:ec:c8:3a:42:
da:2f:99:93:a4:60:ee:83:f2:4b:81:7b:49:00:0f:7c:43:b7:
e8:a8:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org