Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lbtqc60pcC0KD4H8dmDv3nUAIr8.roa
File: lbtqc60pcC0KD4H8dmDv3nUAIr8.roa (raw, json)
Hash identifier: WLFUfhUCwgVMIY4DPFNW9jM222d+Bd3MBUCf6wrdTZY=
Subject key identifier: 95:BB:6A:73:AD:29:70:2D:0A:0F:81:FC:76:60:EF:DE:75:00:22:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5811
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lbtqc60pcC0KD4H8dmDv3nUAIr8.roa
Signing time: Thu 16 May 2024 00:24:14 +0000
ROA not before: Thu 16 May 2024 00:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22545 (0x5811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 00:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=95BB6A73AD29702D0A0F81FC7660EFDE750022BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:66:e1:ee:53:29:3e:28:f7:e8:6b:de:6e:
53:22:55:3d:06:b4:8b:64:57:6e:e3:f3:49:f3:db:
a6:d8:d0:71:a7:0f:22:4e:11:de:ab:bd:7d:47:25:
9e:6f:72:cd:1f:ef:7e:92:a3:7c:01:8e:fb:94:fa:
1c:78:30:49:2a:fc:44:61:e2:80:c1:37:7f:56:47:
1b:6c:dc:46:fc:6f:89:44:fa:1f:04:a1:5c:85:c3:
ed:ff:9b:5d:07:83:3f:53:ae:bc:eb:da:0e:89:e1:
c4:aa:4c:ec:54:b0:94:45:6c:27:62:fb:4e:e1:0a:
a8:57:3a:03:a5:66:69:fa:bd:93:a5:2b:e5:a9:61:
66:56:4b:73:53:ff:35:89:27:01:cf:ae:61:62:71:
09:4f:dc:3e:2f:0b:59:0d:be:42:33:17:e8:e5:74:
ad:4b:69:88:f0:a0:06:5c:34:a4:fa:0d:be:f9:22:
c2:c5:06:1e:56:7d:c5:9f:1e:83:9d:3b:a8:0c:88:
53:85:60:97:4d:bd:0b:e3:6d:44:79:2f:72:e1:96:
83:bd:ce:27:e2:0b:c1:6b:cd:97:3f:96:e3:e0:ef:
65:e6:25:2d:18:21:71:3f:82:23:c1:2f:06:56:4e:
91:a4:b7:a7:34:ae:49:73:5f:61:bd:d1:db:18:d6:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:6A:73:AD:29:70:2D:0A:0F:81:FC:76:60:EF:DE:75:00:22:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lbtqc60pcC0KD4H8dmDv3nUAIr8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:a7:dc:68:2e:3b:04:93:0d:44:ce:46:55:57:22:0a:18:62:
87:09:b5:1c:6d:f8:d8:31:fc:7d:b6:ec:48:a6:35:71:32:c4:
68:20:14:6d:84:59:49:66:69:5f:13:6e:64:86:39:1d:6b:13:
3e:3a:09:52:d7:fd:45:ed:a6:16:43:b8:bf:08:0a:42:04:ee:
52:04:36:87:74:37:a4:33:84:ef:02:e0:bc:91:23:5c:05:b8:
83:d1:11:e7:57:0b:d4:14:c0:2b:0a:e1:fb:8b:35:be:98:e3:
a8:56:a3:37:9f:6b:b9:5a:76:7d:ef:3b:62:f9:b0:75:7b:3c:
4c:ae:e5:b5:c0:5e:a8:52:df:61:d5:4f:02:44:d0:57:72:07:
7e:55:d4:f8:8f:17:2e:a2:1a:73:df:a5:5a:c5:49:c8:c0:26:
20:49:eb:ff:50:cb:4e:fe:e6:91:72:45:80:73:f6:25:26:0c:
b2:df:c8:c1:2f:75:a5:d0:ba:08:1b:69:f0:a9:00:32:9d:5f:
af:34:42:60:5a:f4:c3:bf:0d:ac:c6:cc:38:30:f6:89:31:fb:
94:5e:9a:ab:16:2f:d5:56:20:61:54:55:6c:e9:c9:77:cb:fa:
e6:03:b2:61:fa:87:15:43:f3:19:f4:44:f9:99:c2:78:ed:0d:
ec:f2:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:44 2025 by rpki-client