Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kpO6AH3tKtLolw2CqD24lEiTL7g.roa
File: kpO6AH3tKtLolw2CqD24lEiTL7g.roa (raw, json)
Hash identifier: EV8rYd5D/bmFsUnNWppsVTSWEyBVLSAzXlQnRmjLgz8=
Subject key identifier: 92:93:BA:00:7D:ED:2A:D2:E8:97:0D:82:A8:3D:B8:94:48:93:2F:B8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A35
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kpO6AH3tKtLolw2CqD24lEiTL7g.roa
Signing time: Sat 27 Apr 2024 12:53:41 +0000
ROA not before: Sat 27 Apr 2024 12:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18997 (0x4a35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 12:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9293BA007DED2AD2E8970D82A83DB89448932FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:4b:15:5e:2e:3b:60:0e:e4:f2:46:24:23:
7a:d3:ee:bf:26:1e:48:3d:a3:ac:96:95:c5:e4:0b:
3a:f7:2b:f8:4f:31:78:11:1f:5e:aa:2d:fc:a7:8f:
44:41:b0:8d:51:ef:39:37:06:78:b7:7c:91:f4:0f:
12:d9:b2:0f:66:e9:65:e2:02:c7:c0:7f:16:50:eb:
7a:8e:f8:e0:0e:4b:07:11:e8:3e:75:4a:41:a9:59:
3b:da:5a:80:31:1d:d8:0b:ec:6f:2d:43:9a:ac:0f:
ca:df:07:c9:3c:80:61:6f:6a:37:33:76:e6:77:3f:
bd:0f:e6:c9:35:a7:8e:94:b8:04:70:28:60:bd:5d:
8d:f0:63:1a:a4:0d:54:87:a2:12:a1:81:6d:bd:7e:
cf:fd:69:94:3e:a8:33:8c:56:02:ec:2f:69:52:f8:
c2:a5:0a:55:c7:78:d1:52:8f:17:7a:0e:f2:ff:e0:
e9:f8:35:84:37:52:6e:f1:66:96:67:3e:3b:60:aa:
57:aa:4e:1c:27:dc:e4:f1:73:e2:47:22:90:68:16:
4a:33:18:8b:84:73:54:56:a6:8b:dd:e7:bf:6a:02:
42:30:a6:07:7e:b9:14:2d:cd:e1:42:04:0d:c4:b2:
86:a4:76:e6:24:2e:90:5b:67:f3:dd:3e:34:8b:83:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:BA:00:7D:ED:2A:D2:E8:97:0D:82:A8:3D:B8:94:48:93:2F:B8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kpO6AH3tKtLolw2CqD24lEiTL7g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:97:99:dd:46:e2:7a:33:17:6f:03:65:cc:7f:b0:3a:11:7e:
ac:51:e7:a0:23:fe:97:c2:1a:30:a7:2e:12:ac:4a:a2:6b:37:
db:ac:c9:09:a6:0b:93:36:2b:a7:a8:cd:53:6c:9b:fa:44:39:
5f:4a:02:70:fd:01:aa:4f:bf:46:cd:b5:a5:0c:e4:92:3b:cd:
e4:90:37:81:29:f3:66:06:7c:bf:7d:48:ac:33:9d:d0:a4:66:
52:65:48:ce:9c:26:a2:6e:f1:c2:d2:e3:97:e9:b9:11:f2:38:
36:dd:b1:30:c4:94:56:97:2b:19:5a:70:a7:9b:4e:2f:6b:ab:
7a:c3:18:6e:7f:12:da:01:6c:d7:77:b1:19:3c:90:6c:df:29:
3d:95:97:3e:14:4b:15:0e:f8:9f:53:e3:f6:61:93:26:9f:70:
2f:67:ae:88:85:e7:ec:6f:79:d5:e3:4d:86:b8:2a:07:7a:23:
22:fe:a0:6d:38:3a:c9:b1:6c:d2:fc:4a:20:a1:44:7b:ed:70:
f3:27:24:0a:d0:3a:66:34:b1:74:dd:e3:01:9e:49:d8:d4:9b:
58:b8:f1:99:26:93:bf:bf:55:04:cc:22:86:74:03:ff:d2:7e:
ac:20:32:d8:4a:22:bd:97:73:93:ae:b2:7c:24:6e:2b:5d:70:
40:6e:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:42 2025 by rpki-client