Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lrqjFOCYt3pyEZfKi-dBAgJxQrQ.roa
File: lrqjFOCYt3pyEZfKi-dBAgJxQrQ.roa (raw, json)
Hash identifier: WHev9zDWWeNRaTRi1jEdXQL5rTfpq+/br/SnFyBL7Mg=
Subject key identifier: 96:BA:A3:14:E0:98:B7:7A:72:11:97:CA:8B:E7:41:02:02:71:42:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44F5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lrqjFOCYt3pyEZfKi-dBAgJxQrQ.roa
Signing time: Sat 20 Apr 2024 12:53:12 +0000
ROA not before: Sat 20 Apr 2024 12:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17653 (0x44f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 12:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96BAA314E098B77A721197CA8BE74102027142B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:70:b1:c8:93:ec:5e:25:fc:b7:5b:0f:71:
b2:a6:90:06:3e:c1:21:d9:3f:b0:67:e7:57:96:55:
79:67:81:78:8b:78:3f:97:bc:2e:58:e0:41:14:8b:
38:a2:aa:c1:48:45:48:31:e4:c2:17:c0:ec:35:ad:
e9:51:cb:c4:63:07:6b:31:b8:50:cf:35:74:1c:3a:
36:3b:57:13:e5:04:4d:05:27:d0:aa:a3:e3:bd:f0:
0d:2a:81:a8:80:4d:82:78:26:48:59:84:b1:2c:c9:
b5:24:b4:3b:0f:7f:f5:f9:9c:67:0b:7e:6d:6b:37:
1c:93:8f:fc:a7:8b:d6:e8:fd:71:b7:46:7c:8e:71:
c7:e5:05:db:b4:fd:b2:26:cb:ec:41:76:5f:14:c3:
72:4b:04:29:6c:3c:05:2e:7a:c4:56:95:0d:4c:ec:
2b:fc:e9:13:ca:df:0d:2e:5c:71:3d:c2:6c:4a:c6:
76:48:5c:85:b2:d1:51:03:74:67:37:09:2b:88:e2:
f9:a1:03:bd:af:9e:d9:fb:0b:e6:99:12:d0:11:c7:
07:7d:94:69:71:42:81:76:03:ee:12:7a:ae:e2:1f:
d9:7a:eb:04:29:4d:48:91:5b:4f:d7:d0:f3:31:73:
aa:df:1f:9a:de:2a:77:2c:93:1f:1c:66:a3:bf:96:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:A3:14:E0:98:B7:7A:72:11:97:CA:8B:E7:41:02:02:71:42:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lrqjFOCYt3pyEZfKi-dBAgJxQrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:e9:bf:f5:7b:2f:ca:7b:1a:93:e0:96:85:65:89:f0:15:f8:
ba:f0:13:de:db:ce:c8:3f:be:b6:cf:38:68:29:95:5d:26:b6:
1a:04:23:4d:cd:ec:e0:2d:ac:7f:ae:d3:6b:fa:9e:b2:92:ae:
04:be:de:8c:a7:fc:4a:ad:7b:16:65:74:53:65:89:c8:5b:95:
07:96:e4:80:28:6d:e5:3e:63:6c:db:f7:89:e5:bf:61:ae:2f:
41:2d:cd:d6:eb:24:7b:b3:cb:0b:0a:41:9b:ba:e8:aa:02:c8:
0f:44:9b:a8:12:53:50:56:59:35:18:23:2f:5a:13:90:84:7f:
fc:b2:53:46:87:79:35:40:90:81:d1:37:4b:69:67:5c:90:91:
78:ab:ca:63:29:29:f3:9c:14:4a:30:a0:42:c7:d7:f7:ba:5e:
16:4b:dd:61:f6:2b:22:28:23:4b:2a:91:a5:d9:93:5c:ff:51:
93:fe:95:39:ae:4f:9a:52:22:d3:5a:f2:32:f5:9e:40:68:03:
ba:c3:d4:28:af:82:a0:36:68:f5:b9:b8:f8:37:65:e0:1d:d9:
87:2d:3a:39:99:36:e1:15:d6:38:97:c1:67:7f:b5:a3:6c:e1:
e9:40:76:fd:18:36:51:f1:40:49:fc:d7:3d:36:7f:ce:1e:9e:
40:e7:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org