Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/myRe7F3RByKT7L1mAwHSysWFZKM.roa
File: myRe7F3RByKT7L1mAwHSysWFZKM.roa (raw, json)
Hash identifier: mhnXyIrQztKU4phgEp8vkujCWfx8BOnblAIg9xGEwgw=
Subject key identifier: 9B:24:5E:EC:5D:D1:07:22:93:EC:BD:66:03:01:D2:CA:C5:85:64:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/myRe7F3RByKT7L1mAwHSysWFZKM.roa
Signing time: Sun 31 Mar 2024 02:52:09 +0000
ROA not before: Sun 31 Mar 2024 02:52:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13733 (0x35a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 02:52:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B245EEC5DD1072293ECBD660301D2CAC58564A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:28:da:51:af:3d:28:12:11:1a:46:37:78:
f3:7a:92:f6:ed:9c:e0:00:a3:df:ad:83:6c:fe:84:
a3:45:76:35:49:fd:26:dd:10:a6:00:d0:76:70:0a:
ef:4d:32:82:54:1b:11:6a:ee:84:20:57:bf:e3:6c:
c8:3f:9e:57:84:96:1f:0e:e8:3f:92:f8:a7:0d:1a:
3e:8e:d8:21:30:7e:c6:27:6c:ce:df:f0:77:27:a1:
e6:76:e4:ee:72:fb:b2:78:8b:09:ab:3f:72:65:a3:
3d:ac:4b:ca:43:fe:28:ec:9a:27:a8:cf:e3:20:f7:
b7:52:03:e3:89:cf:61:a4:87:34:69:02:22:45:3a:
03:8a:ef:64:df:a4:82:73:01:5a:68:d9:19:ce:c8:
2f:73:90:ce:0f:51:bc:b0:1d:33:de:b1:ec:2f:2e:
00:85:54:b9:fa:2a:ab:ae:1a:d2:13:da:f3:67:d2:
83:10:68:5d:05:80:b0:fb:13:9f:6a:71:08:b1:58:
3e:d6:fc:38:51:02:73:10:bd:d4:0e:75:a6:07:d7:
40:97:e1:82:b0:f5:be:9d:97:80:66:c4:02:ee:6e:
0c:c6:66:66:92:70:4f:ef:62:e5:be:60:4c:76:a0:
05:cd:87:92:2d:50:86:bb:e3:e3:6c:4f:26:4a:89:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:5E:EC:5D:D1:07:22:93:EC:BD:66:03:01:D2:CA:C5:85:64:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/myRe7F3RByKT7L1mAwHSysWFZKM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:97:5f:47:93:e1:97:7a:77:18:2e:9d:5a:3f:4a:4d:9f:14:
86:f6:e1:a5:95:c0:06:b4:f6:2f:10:87:15:bf:5b:ca:7a:24:
9f:3e:25:48:0a:64:53:f8:fe:c0:2a:48:c2:2a:b2:87:37:63:
f0:99:7f:a5:9c:84:d8:f7:12:3a:64:28:1e:b0:ca:66:74:95:
14:67:28:9c:52:c5:20:18:69:1a:f2:d9:15:eb:48:9c:dc:62:
2e:4c:5f:a0:b0:49:e4:c0:1b:74:2d:9f:2f:f6:82:e9:71:5e:
21:eb:b0:53:fe:70:a0:27:b0:7a:28:39:97:32:e8:3d:da:61:
8b:9d:bb:bd:57:a0:10:d9:2b:62:5d:26:d7:00:43:4a:f8:d2:
73:c4:13:80:98:04:87:78:fc:5f:e7:2c:ea:e8:fa:a7:ba:a7:
d9:9f:4d:8c:34:65:f8:e3:1c:ea:fa:f3:d9:1f:12:a3:4c:4a:
99:b0:21:f1:9b:58:1a:09:0d:e4:96:d5:87:04:f4:60:40:e4:
19:fe:63:10:50:71:17:4a:64:b2:7e:ee:5a:97:cb:2c:a1:27:
56:57:e2:9f:85:85:bb:a7:5f:e2:3a:ea:07:41:5b:81:82:79:
f7:7c:34:76:53:7f:38:f7:5c:d1:a3:85:6c:b5:4a:2c:6c:68:
b4:a2:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:39 2025 by rpki-client