Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kkwGIZuzzBZTQqpv2sF4PH-CB34.roa
File: kkwGIZuzzBZTQqpv2sF4PH-CB34.roa (raw, json)
Hash identifier: jh8d6ftKyylqF6x63AEWYa9N06KDryP+bxGrdxQ19Fk=
Subject key identifier: 92:4C:06:21:9B:B3:CC:16:53:42:AA:6F:DA:C1:78:3C:7F:82:07:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5091
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kkwGIZuzzBZTQqpv2sF4PH-CB34.roa
Signing time: Mon 06 May 2024 00:23:49 +0000
ROA not before: Mon 06 May 2024 00:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20625 (0x5091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 00:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=924C06219BB3CC165342AA6FDAC1783C7F82077E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:bd:1b:4d:22:a0:c3:02:aa:59:a5:5d:14:
fe:6c:0b:81:9b:0b:9e:98:6e:b3:54:ec:de:30:e1:
c2:8d:5f:cf:ac:60:26:59:cd:6e:dc:46:ef:fb:62:
36:8d:f4:a2:8f:c7:33:d0:6d:66:bf:c7:ab:c9:a1:
65:d6:0d:30:4c:0e:8d:96:c4:79:bc:8e:f9:de:b0:
d1:f5:ca:69:44:44:fa:f0:e1:21:b6:b5:13:80:81:
52:12:02:86:79:c1:e0:9c:1b:2f:c3:0a:24:08:fe:
1a:c6:d4:67:29:dc:c2:2c:ea:b3:a4:4e:47:6c:e7:
76:33:92:b3:ef:08:6c:47:cb:39:b4:64:6a:d7:89:
1d:00:4b:d8:8b:99:c1:7c:0b:77:eb:a8:f4:02:ac:
c0:c6:94:85:9d:8d:9d:ca:f4:c1:d6:cb:0a:16:d3:
ff:24:b9:3f:b1:b8:22:41:64:fb:02:26:cc:36:11:
bd:5f:83:38:91:0f:de:ae:8e:07:20:42:d7:ca:c8:
eb:e9:12:83:27:03:2f:f1:70:4e:67:fe:c2:eb:ae:
93:c6:2d:5a:bf:8b:09:47:53:52:67:b6:43:01:35:
a4:f0:ff:a7:00:9e:44:a4:5c:3e:13:ad:c5:c3:8f:
92:c0:82:87:09:8e:cd:13:95:59:78:28:98:b4:a3:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:06:21:9B:B3:CC:16:53:42:AA:6F:DA:C1:78:3C:7F:82:07:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kkwGIZuzzBZTQqpv2sF4PH-CB34.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:ff:a5:f3:ac:50:e5:e1:0a:0b:23:70:c6:12:87:58:6e:55:
30:57:3e:bb:ea:67:32:f4:84:ef:32:09:f6:14:87:a4:e1:ff:
28:6d:63:90:24:be:60:b0:b5:dd:cf:9f:35:6f:4a:a1:0a:52:
8b:44:b1:67:b6:5a:96:be:52:7a:18:30:19:f3:53:79:55:6b:
95:5a:43:bb:0b:f5:85:78:15:19:fb:9a:59:a4:ce:01:4b:e7:
91:45:7d:53:bc:b3:7e:f2:51:b4:5e:e4:f2:c4:f5:95:97:5a:
12:41:e1:1b:df:2d:ce:81:a6:cf:f1:fc:96:bd:89:78:81:30:
25:d8:6e:f9:f4:47:96:35:c7:14:6a:e3:9f:6c:8c:fc:48:f8:
68:d2:e8:94:2e:5c:1a:fd:45:8d:dc:2f:8d:c9:3c:54:56:dd:
e1:4c:1e:47:2a:ea:fc:50:e6:f8:94:a1:4a:da:17:57:2d:52:
a7:f7:9b:1a:99:ef:0a:c6:65:b3:eb:2d:ea:2d:40:61:b8:c4:
45:37:e6:83:26:db:87:e9:86:e0:9c:5a:80:54:12:f1:8a:16:
f4:3f:1c:4d:09:ef:7d:da:62:f7:32:6a:64:d8:25:24:17:af:
c9:4c:a3:09:1a:43:15:c9:c4:d7:73:ac:b1:df:2f:28:4f:7d:
6c:86:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:06 2024 by rpki-client on console-ams.rpki-client.org