Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/n-e-FQtjlwENtBS8ZpnopK_OdCY.roa
File: n-e-FQtjlwENtBS8ZpnopK_OdCY.roa (raw, json)
Hash identifier: 2afarBJDljH0O4iBkfM0qkifJ/UKemWOtmB5dawLyOo=
Subject key identifier: 9F:E7:BE:15:0B:63:97:01:0D:B4:14:BC:66:99:E8:A4:AF:CE:74:26
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 487D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-e-FQtjlwENtBS8ZpnopK_OdCY.roa
Signing time: Thu 25 Apr 2024 05:53:17 +0000
ROA not before: Thu 25 Apr 2024 05:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18557 (0x487d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 05:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9FE7BE150B6397010DB414BC6699E8A4AFCE7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:50:0e:d0:45:0c:2c:ba:96:bc:dc:c9:77:
9c:7f:d9:05:5b:12:8b:96:3a:64:4f:86:4f:1b:4e:
9a:ee:44:95:1c:72:0e:79:57:30:76:e0:cd:74:95:
d4:bb:76:77:49:93:71:21:75:d9:33:ac:71:7b:3e:
0f:93:f1:91:9e:8b:28:46:c8:51:c6:f7:f0:fa:56:
10:c3:98:e3:9a:c7:26:ff:82:53:e0:a2:55:6e:6a:
88:48:f6:c2:4c:7e:0b:18:19:f7:25:8d:09:e7:7b:
6f:03:ae:8f:e3:a7:ad:f4:d4:1f:54:81:13:6a:96:
24:a2:92:14:de:9b:a7:05:10:9b:da:16:2e:bc:9f:
7a:ae:28:98:48:42:52:27:64:9a:59:77:78:d1:e5:
13:4c:ab:1b:9f:59:b4:78:d3:f6:06:fd:64:b0:33:
e5:24:3d:4d:74:14:a9:cc:bc:ee:32:e5:03:99:5a:
d9:77:62:c4:96:71:90:5f:64:5a:ad:5a:56:bc:9e:
1f:2a:4c:d9:df:a3:84:4c:23:e0:8a:64:fa:fc:2c:
9f:83:52:eb:62:3c:39:f5:63:8f:49:3c:6a:c8:ae:
89:02:e0:12:fa:f0:8a:55:5f:b3:66:ae:ba:c5:62:
b4:9c:c8:42:ce:4b:e3:dd:03:56:79:6e:54:10:8a:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E7:BE:15:0B:63:97:01:0D:B4:14:BC:66:99:E8:A4:AF:CE:74:26
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-e-FQtjlwENtBS8ZpnopK_OdCY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
55:3b:8b:ee:fc:f5:12:da:a5:d9:ef:63:ed:b2:b2:14:0a:c3:
a3:52:4b:b1:26:c4:7d:70:40:24:70:0b:10:6d:33:fb:c3:66:
8d:36:26:c0:f3:d5:ac:6d:28:ef:16:be:15:c4:a7:86:8a:f1:
d8:08:0f:5b:19:35:b1:04:cc:5a:74:aa:93:1e:51:ba:95:9d:
9b:da:04:9c:0c:73:83:34:ea:2e:58:51:20:91:ee:7f:2e:d1:
1e:6b:8f:f3:e2:5c:5e:2a:40:1e:62:49:3c:5a:95:33:19:1a:
1c:5c:f4:fe:49:2a:95:33:e4:8c:63:1c:4b:b6:5f:3a:1a:0e:
df:69:41:25:75:ec:48:52:ae:31:da:cc:0d:f2:89:26:f3:a1:
26:9b:9b:b8:f4:27:58:66:db:55:7c:f2:2f:69:09:5f:b2:94:
2c:9d:45:2a:92:aa:fa:6c:bd:7a:f7:bc:a9:af:68:8a:f0:8f:
2c:15:b2:87:14:b9:a9:b9:91:4f:5a:85:f9:b1:13:ce:38:e8:
50:48:6c:b7:cc:24:95:07:39:9c:2b:55:25:b3:74:8c:c9:ea:
bb:4f:b5:8f:ed:39:06:6f:45:a5:51:60:40:c4:dd:03:b3:f5:
6e:b0:83:bb:46:fd:95:92:1c:59:fa:7a:0d:1b:dd:cf:7d:d3:
0f:52:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:08 2024 by rpki-client on console-ams.rpki-client.org