Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ltCVONUg6hqwJBUHtIqpXCXaSUE.roa
File: ltCVONUg6hqwJBUHtIqpXCXaSUE.roa (raw, json)
Hash identifier: S0twRanQEpSGDBtgTBg8j8nMfJyXYQrH/5nd51n2Rmc=
Subject key identifier: 96:D0:95:38:D5:20:EA:1A:B0:24:15:07:B4:8A:A9:5C:25:DA:49:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E55
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ltCVONUg6hqwJBUHtIqpXCXaSUE.roa
Signing time: Thu 11 Apr 2024 16:52:46 +0000
ROA not before: Thu 11 Apr 2024 16:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15957 (0x3e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 16:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96D09538D520EA1AB0241507B48AA95C25DA4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:8d:42:fe:3f:a1:90:36:2e:dd:57:16:ea:
90:e5:17:ec:2c:8f:11:0d:10:f6:ac:c1:d5:17:a0:
3e:76:20:cd:f5:08:6e:6a:08:b5:3a:df:1e:22:d1:
7c:f3:00:12:98:41:f4:d6:b9:9c:1f:ad:0e:a3:5f:
1f:61:61:02:8e:63:a3:86:00:1c:ba:64:9f:d1:96:
d4:02:92:57:60:f1:7e:24:0c:7e:e5:6e:65:59:a2:
45:ae:0c:34:95:8a:88:d6:bd:4d:7b:43:ce:47:05:
35:01:5b:45:07:5f:8a:42:7f:d9:ab:7f:9d:ad:c9:
e5:b4:a7:d4:18:ff:dd:bb:77:3c:89:19:ba:ea:21:
31:77:44:da:6a:9f:b5:82:43:3b:c0:8c:28:b9:53:
ec:a1:e0:18:97:1b:90:7f:3d:d0:2d:5d:f9:e6:82:
dd:1e:ec:52:91:ff:5a:5a:59:ed:85:01:e4:02:6e:
9a:d6:01:bb:d8:87:05:8a:ce:77:f4:84:e4:f6:42:
8b:d5:69:0c:6c:0b:9d:77:2d:0b:dd:9d:b9:4d:12:
e3:c1:b1:58:21:e9:ac:62:87:08:0f:4c:c8:23:df:
a1:35:63:be:20:c0:81:2c:71:30:a1:ab:29:5a:7a:
19:24:0c:60:f3:84:f5:55:d0:b9:39:1b:92:b2:df:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:95:38:D5:20:EA:1A:B0:24:15:07:B4:8A:A9:5C:25:DA:49:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ltCVONUg6hqwJBUHtIqpXCXaSUE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:c6:1d:5c:fd:4c:df:f5:bf:79:05:f3:c5:de:6c:da:b6:d6:
6b:7b:ab:83:23:ec:92:60:1a:f2:d4:f1:74:a2:10:09:93:ec:
54:0d:65:a1:48:01:29:46:4e:cc:b6:ab:61:04:45:1f:cb:62:
ba:45:fe:5a:29:90:ac:95:d4:1f:db:36:bb:9c:bd:30:8a:84:
6e:2f:b2:83:f3:3b:51:a1:6e:f3:21:65:26:18:03:d2:3b:dd:
c1:97:7c:60:25:fd:32:5c:27:c8:e1:23:9a:59:22:83:4b:ef:
55:ee:18:b6:93:43:d0:b4:cf:c5:d9:90:46:fd:ff:93:07:ba:
57:f4:e5:13:9a:84:a0:9a:3f:bc:ec:09:7b:f4:a7:46:d8:a3:
5d:9d:03:b6:b5:56:ed:5c:d5:13:3f:87:7e:4c:09:ef:85:65:
71:05:04:30:ff:2b:73:b4:fc:f1:b3:92:bd:0e:a2:2d:bc:1f:
47:99:76:22:b3:76:3a:3f:9d:d4:bd:dd:85:d0:62:4f:de:b0:
e3:43:86:03:b3:3c:b8:6f:ce:1e:30:17:a4:7f:61:f3:41:e9:
ae:27:01:20:76:90:e6:bc:b2:fa:3a:73:41:a9:40:a1:00:ce:
48:03:eb:04:ca:63:d7:be:c2:32:a8:aa:6b:dc:a0:db:4f:d9:
34:2e:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org