Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mnEw-i0aGeXsSBf9tQ9A1VTAomc.roa
File: mnEw-i0aGeXsSBf9tQ9A1VTAomc.roa (raw, json)
Hash identifier: ZSA/yHiAOlLNO2CSMTxrzuZ0CY/g7ZlD95g5Mb5aTgA=
Subject key identifier: 9A:71:30:FA:2D:1A:19:E5:EC:48:17:FD:B5:0F:40:D5:54:C0:A2:67
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E9D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mnEw-i0aGeXsSBf9tQ9A1VTAomc.roa
Signing time: Fri 03 May 2024 09:53:45 +0000
ROA not before: Fri 03 May 2024 09:53:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20125 (0x4e9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 09:53:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9A7130FA2D1A19E5EC4817FDB50F40D554C0A267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:a0:4e:29:48:a1:52:24:f6:55:5e:a7:c1:
18:7b:08:60:67:46:dd:94:b7:a5:db:75:bd:40:fe:
90:01:0c:95:35:29:85:b7:0c:45:8e:7e:48:20:21:
fe:d3:d7:ca:ae:30:3c:58:af:4e:53:51:11:61:8f:
89:a7:41:55:ce:9a:e5:80:2c:77:76:e5:0d:81:01:
f6:91:55:5e:7a:64:bd:38:ba:d4:9f:43:6c:4a:6d:
0e:06:07:23:cc:6c:5b:17:2e:f3:35:6e:26:02:88:
79:49:b7:d7:ee:e1:7c:bf:a3:16:bd:24:1e:b2:69:
fc:72:15:3b:81:47:7f:13:e6:ff:45:b2:e8:a0:7c:
15:20:d8:72:89:20:e1:66:01:de:e4:ba:75:9f:13:
10:71:21:f5:57:1a:78:7c:08:b8:4b:e5:75:76:cd:
00:01:36:ec:33:ef:6a:8c:df:ed:19:81:6a:52:9b:
9d:c3:f1:43:6e:50:4b:4b:05:06:e8:96:7f:f5:86:
de:5e:fe:e4:60:83:78:34:53:f8:ba:60:f8:9b:94:
4a:3f:c0:6d:85:8e:83:dc:fd:12:a6:bf:47:45:43:
f0:5c:db:09:fc:da:72:17:00:4f:19:54:e3:d1:80:
7e:18:b8:83:56:6d:31:e4:bf:a1:ae:10:a9:47:35:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:30:FA:2D:1A:19:E5:EC:48:17:FD:B5:0F:40:D5:54:C0:A2:67
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mnEw-i0aGeXsSBf9tQ9A1VTAomc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
34:13:f0:11:7b:0a:d4:0d:76:63:ba:4c:a2:cb:a2:d3:ca:f4:
d2:a2:a0:2c:e0:52:20:7b:6d:a5:f4:fa:de:60:06:08:49:0b:
1f:a4:22:7c:05:c2:9e:d5:40:fa:87:5f:ec:58:1e:1d:e3:6e:
c5:67:75:63:df:43:98:ec:cf:86:9b:d3:b4:45:76:ce:20:a6:
b4:d7:f5:6e:0d:42:d5:19:69:72:af:29:c0:8a:ff:19:8f:e0:
cc:25:c8:2d:55:15:42:5f:bf:ff:42:48:6f:44:a0:87:31:38:
81:4c:fa:2e:d4:df:b6:cf:25:83:0e:ba:1f:44:8a:69:3d:30:
5a:31:91:10:cb:2b:f3:b4:87:dd:e9:92:0e:85:22:19:2c:58:
2d:56:50:fe:db:ac:dd:bb:37:ac:fc:68:15:50:a1:09:12:fa:
49:87:12:38:9b:3f:02:e3:f4:e8:eb:95:72:e8:67:1b:1f:02:
73:be:3f:74:f3:d0:96:a1:3f:09:8d:e1:15:3f:cd:54:5a:dd:
38:00:f8:e4:88:96:be:a1:fc:f6:73:29:f8:e0:2b:92:5e:1e:
e5:73:ac:84:40:f4:e7:23:d3:da:6a:fe:a3:a7:0c:56:4e:9a:
2f:15:d0:e6:67:5f:64:cd:ce:7c:fb:33:7b:84:4e:cc:5e:27:
ff:41:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:59 2025 by rpki-client