Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mixw_qTgmKroflojHcUvWLI_F1I.roa
File: mixw_qTgmKroflojHcUvWLI_F1I.roa (raw, json)
Hash identifier: SBFoivtaNrc5XVuapzlmJ6ZvMudiT/FU0kPG3SwWyK8=
Subject key identifier: 9A:2C:70:FE:A4:E0:98:AA:E8:7E:5A:23:1D:C5:2F:58:B2:3F:17:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57D9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mixw_qTgmKroflojHcUvWLI_F1I.roa
Signing time: Wed 15 May 2024 17:24:12 +0000
ROA not before: Wed 15 May 2024 17:24:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22489 (0x57d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 17:24:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9A2C70FEA4E098AAE87E5A231DC52F58B23F1752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:4c:67:94:cf:05:71:03:c2:9b:4a:63:77:
3b:dd:fe:d2:1e:78:54:d1:12:50:42:25:ff:3e:79:
78:64:e9:57:6c:bd:4d:59:a2:6a:79:26:bd:26:b8:
96:38:8e:6e:db:16:1c:7a:8e:90:c5:b8:ad:1e:dc:
19:fd:00:b9:99:af:4e:30:09:23:e9:a2:4a:2d:f1:
5c:82:e3:41:34:3c:50:61:db:b8:d2:37:0f:62:5e:
7c:f7:16:19:10:07:9e:5f:8e:00:fd:49:45:55:ce:
d5:60:54:fe:f1:21:ad:3a:c7:44:83:ba:ea:c7:cd:
a2:98:34:41:5f:b6:30:36:f2:06:76:95:26:96:41:
a4:7a:e7:c9:00:55:58:68:7d:11:0a:47:e3:b3:7f:
09:c8:d9:1c:a3:df:f2:de:da:a2:7f:8b:0a:b5:e4:
91:f3:23:ba:45:40:e2:ed:a0:43:b6:53:45:b4:cd:
4e:6e:3c:1f:97:4a:e0:d7:dd:88:bd:3e:09:11:17:
6d:30:3d:32:7c:70:e6:ea:17:a7:bb:a4:c9:7b:e5:
5d:6e:26:3d:9e:11:db:f8:b0:fa:b6:20:93:de:ef:
7a:b7:84:75:c4:e3:b8:e3:2b:fc:ca:4c:9d:14:e1:
a9:e6:43:62:b6:13:aa:80:73:56:95:00:83:d2:61:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:70:FE:A4:E0:98:AA:E8:7E:5A:23:1D:C5:2F:58:B2:3F:17:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mixw_qTgmKroflojHcUvWLI_F1I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:d2:3f:6e:62:dc:1f:de:f3:fb:41:d1:53:d3:43:40:29:db:
9a:c1:18:62:1a:fc:7d:1c:df:ca:86:57:4f:4d:2e:96:9d:02:
ca:ff:e5:91:32:67:9a:68:d2:e2:49:ec:4d:25:34:fb:c0:f4:
e5:09:87:8e:f5:b7:68:fd:72:45:53:7c:30:ca:27:c3:8e:c8:
87:6d:31:87:f6:40:91:f3:38:ee:f9:f1:20:c6:b0:0a:ae:3d:
60:6b:00:e4:3f:1d:d1:e1:58:7a:9e:b6:8a:3f:69:6b:7e:d4:
15:69:89:e0:3f:13:09:46:73:fe:2a:98:23:1a:90:92:5a:b2:
b8:ec:c7:3d:61:a7:bf:30:51:a5:38:94:f0:2e:13:91:ac:d7:
f5:c1:9a:81:6d:6d:53:dd:34:67:55:d5:4e:f1:68:f7:5f:9a:
17:16:af:e9:d2:f5:e2:26:d3:70:05:e5:da:cf:62:aa:1b:d3:
1f:4c:59:41:74:c5:6f:f7:2a:3e:0d:50:5c:46:46:43:30:6e:
38:9c:b1:30:cb:9e:86:e5:96:09:d8:b7:2e:9a:50:62:9d:c2:
c8:05:6a:4b:24:a3:49:af:79:f4:5e:cd:73:a5:75:39:2d:95:
c9:3d:ac:ac:8d:2b:7c:e3:30:79:d2:5e:c3:79:00:68:aa:97:
fc:39:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org