Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/n-qW-Sb3neFCFLJg7Gxlen7iFy4.roa
File: n-qW-Sb3neFCFLJg7Gxlen7iFy4.roa (raw, json)
Hash identifier: vq0sUkK7k0jaIX8d70abRPWGS4pd733G/CJn2YHqpcQ=
Subject key identifier: 9F:EA:96:F9:26:F7:9D:E1:42:14:B2:60:EC:6C:65:7A:7E:E2:17:2E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F85
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-qW-Sb3neFCFLJg7Gxlen7iFy4.roa
Signing time: Sat 13 Apr 2024 06:52:49 +0000
ROA not before: Sat 13 Apr 2024 06:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16261 (0x3f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 06:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9FEA96F926F79DE14214B260EC6C657A7EE2172E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:69:1d:f0:97:5c:e2:47:60:2a:ed:36:f5:
2b:e1:f3:58:88:b0:52:29:ab:18:9f:4c:c6:fd:4b:
55:24:b8:5a:5d:18:23:90:a0:01:cc:86:38:9e:55:
82:20:e7:bb:0e:4d:3f:55:be:1f:1f:8a:19:a0:f5:
84:f7:d3:9d:6e:c4:ef:c5:37:79:ee:6c:cf:bd:3b:
a2:2a:a3:09:87:c5:d5:d6:d9:4a:32:84:4d:7d:be:
8c:da:e7:dd:21:17:e6:77:45:76:4c:ce:6d:50:25:
0a:98:7b:aa:61:13:3a:b1:55:5e:9d:45:68:e6:e3:
80:e5:d0:c8:ee:00:8f:1a:6e:21:72:9e:06:3c:92:
c3:33:ed:7c:f8:32:a0:86:37:f2:5c:00:0d:d1:ad:
f2:2a:13:f4:2b:c6:a5:30:29:b7:3f:d6:0f:3c:65:
fe:3e:8e:af:cb:7f:3d:45:da:37:93:b1:bc:2f:19:
85:20:0f:8c:3d:52:a1:ca:ff:c9:c5:d3:e8:8d:93:
b9:56:7d:ea:6e:b5:f4:02:e7:8d:77:80:f8:61:33:
e6:ec:b7:3d:70:c0:e4:e4:ec:ce:f6:1e:22:6b:16:
16:5a:b6:4e:be:e4:ef:81:60:7d:89:94:d0:9c:12:
67:4d:2d:3c:4d:2e:f9:e5:42:7d:49:20:08:b2:01:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:96:F9:26:F7:9D:E1:42:14:B2:60:EC:6C:65:7A:7E:E2:17:2E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-qW-Sb3neFCFLJg7Gxlen7iFy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:67:bc:ed:c9:26:17:2d:6b:e7:57:20:46:05:77:9a:2f:87:
1b:78:e4:8c:eb:2f:9f:c0:3a:54:e0:39:dc:ec:5f:3d:a6:dc:
ec:82:c6:be:1c:54:04:40:58:6e:81:d2:7f:bb:d6:7b:bb:7a:
af:0e:b4:07:2c:83:57:7c:f2:af:56:c2:8b:b0:68:a3:20:32:
b8:50:b1:19:8c:1e:fe:3e:5c:4b:ee:89:06:66:55:0d:6f:9f:
d5:39:4a:75:ef:8f:22:38:fb:58:d4:18:8e:3f:2c:35:d8:d4:
73:20:38:aa:22:8b:c5:6e:be:46:1c:1b:03:9d:eb:88:68:96:
b1:5b:cc:78:80:1d:e8:15:9a:d2:3b:5d:b2:49:42:d9:4d:23:
fe:c5:c7:f3:ef:91:1c:09:eb:9f:2d:c0:66:38:3a:b5:51:c0:
76:7a:7c:76:3f:9e:7c:ea:bf:cb:b0:af:d4:98:ee:50:71:dd:
7f:2d:80:93:bb:94:f7:c8:cc:db:cd:8f:c7:22:44:ff:70:e8:
1b:0a:54:7a:a3:89:00:55:6b:ec:bb:ce:27:63:8a:fb:fa:48:
79:24:04:37:43:8c:d1:57:47:d1:cb:3c:ac:76:d8:93:6b:08:
d0:44:33:7d:ea:c9:5a:2d:10:35:f3:74:2b:ce:72:0c:bf:e9:
95:3a:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org