Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lPt5O9Zty8F4y_GtX7zJwQSCpYI.roa
File: lPt5O9Zty8F4y_GtX7zJwQSCpYI.roa (raw, json)
Hash identifier: CBiGlTlAYu+XW2rTV+lr7S/l6Fw6/7SMiFYONhy3dFc=
Subject key identifier: 94:FB:79:3B:D6:6D:CB:C1:78:CB:F1:AD:5F:BC:C9:C1:04:82:A5:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56CD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lPt5O9Zty8F4y_GtX7zJwQSCpYI.roa
Signing time: Tue 14 May 2024 07:54:49 +0000
ROA not before: Tue 14 May 2024 07:54:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22221 (0x56cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 07:54:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=94FB793BD66DCBC178CBF1AD5FBCC9C10482A582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:bc:38:f4:90:02:8e:2a:21:66:ae:cf:b7:
1c:e5:05:27:72:28:23:70:77:29:f7:0b:15:47:96:
eb:0f:62:98:11:1a:e1:90:eb:01:02:df:93:0b:f6:
67:9d:8d:7a:43:08:79:e8:7f:88:dc:e7:fd:b5:00:
56:59:ee:88:cf:ff:4c:d4:c0:b0:27:3c:02:1f:2f:
02:4e:11:b0:7a:4a:27:73:e7:13:0f:00:2b:fc:cf:
89:57:26:94:50:1c:25:9f:50:c7:c9:ab:89:c7:a8:
b2:de:1d:4b:3e:48:92:4e:28:08:24:3d:37:a3:b2:
d3:8f:17:f3:f5:1d:00:b5:91:62:58:de:51:21:6a:
18:b1:f2:5e:b1:72:98:b0:3e:81:55:62:b1:61:2b:
d0:6b:7d:9d:6b:9d:86:03:42:75:8e:c9:a9:6c:f5:
65:54:42:5b:f1:59:e8:d4:97:46:74:b1:e8:8c:78:
61:f9:d7:07:09:12:41:28:db:eb:a6:c2:dc:fc:66:
88:f5:d0:01:93:d4:66:4e:b6:bf:86:9e:b5:70:27:
10:7f:bb:37:4b:43:06:3e:e4:22:8c:27:1f:34:7d:
32:c6:b5:b6:70:9b:58:e0:96:5f:32:b6:c5:06:d5:
e7:b1:dd:c2:93:78:01:a8:7f:f9:86:c6:e6:17:d3:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:79:3B:D6:6D:CB:C1:78:CB:F1:AD:5F:BC:C9:C1:04:82:A5:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lPt5O9Zty8F4y_GtX7zJwQSCpYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:e9:5b:86:6d:2e:2f:2b:4b:01:18:9c:36:bc:06:5d:1c:d4:
2b:84:a5:33:a9:d7:8a:5c:35:94:91:ec:04:fd:d8:41:b6:5c:
33:7b:8d:63:4f:bd:be:ca:a4:c7:0c:4c:a1:24:f9:3e:17:cc:
92:42:d4:2b:bc:51:ab:19:10:50:ef:18:2d:7c:25:aa:9a:1f:
b2:c7:ab:c5:dd:d9:e9:f7:bf:8c:18:40:33:cb:3a:5a:1a:73:
95:4e:62:ec:cd:12:1f:a7:15:06:ea:86:6d:c7:83:01:58:6d:
78:67:04:4f:bc:2e:22:46:8a:07:c7:40:60:cb:da:cc:d9:2e:
c0:77:d2:48:5f:d3:6d:e1:4e:03:e9:31:8c:e7:d2:6a:6c:37:
81:77:a9:03:69:c3:85:d6:2f:a5:12:a4:bc:94:d5:a5:86:84:
10:2b:40:c8:e2:96:db:e8:5f:6b:04:45:cf:21:84:3e:30:28:
9b:9c:7f:fa:a7:51:13:6f:81:40:7b:96:ab:58:8b:00:7f:a0:
b1:f1:2b:0f:b5:4a:81:8f:37:ef:5c:31:0a:14:8d:31:85:22:
52:08:99:42:9a:b8:9e:77:5e:43:82:9c:4e:fa:14:4f:4f:b1:
0e:bb:c6:1b:03:c0:df:7e:be:a4:7f:92:50:c1:86:bf:c5:5f:
96:0a:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org