Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nIO-tTmb-J_mTTztUPlXOxLSmRU.roa
File: nIO-tTmb-J_mTTztUPlXOxLSmRU.roa (raw, json)
Hash identifier: OjtsfWE5eHY6Bwh2Z9/2HUDnuT7laj2k7AmauSbLOGU=
Subject key identifier: 9C:83:BE:B5:39:9B:F8:9F:E6:4D:3C:ED:50:F9:57:3B:12:D2:99:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EA5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nIO-tTmb-J_mTTztUPlXOxLSmRU.roa
Signing time: Fri 12 Apr 2024 02:52:47 +0000
ROA not before: Fri 12 Apr 2024 02:52:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16037 (0x3ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 02:52:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C83BEB5399BF89FE64D3CED50F9573B12D29915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:1f:55:46:43:89:80:69:c9:25:73:dc:8f:
ce:e4:2d:5f:2e:1f:05:9d:27:bb:d4:c4:80:d2:80:
d6:3d:17:cd:1c:4b:2f:f4:eb:56:27:05:82:87:aa:
da:e3:e0:7e:ef:c0:6f:e3:36:50:1e:64:d2:75:1c:
50:2c:94:3e:b1:ed:02:56:2c:6f:31:51:69:d9:3c:
cf:a4:a5:b9:15:12:f1:24:4a:d2:b8:e2:ba:de:e1:
de:5e:b3:66:06:9d:c4:d6:60:d9:16:c8:4d:93:1e:
3c:18:bf:8c:f7:d6:52:21:91:ec:05:53:53:9c:3d:
fc:cc:71:fc:25:e9:78:13:3f:ab:93:7f:a9:d8:3b:
db:29:ce:7c:4c:51:ba:26:a2:5e:c0:5b:b2:3e:3c:
f2:e3:45:4c:09:25:d8:da:54:50:a8:7a:88:01:3c:
e7:77:7c:b7:d2:50:d9:9e:06:71:74:aa:e7:8f:49:
b9:7d:47:36:22:74:c5:66:9c:c8:99:42:59:7f:6d:
3e:f7:cd:e0:6a:d5:dd:9c:94:d8:55:9a:37:c5:ab:
08:35:67:2c:0d:83:54:13:c0:8f:af:7c:02:ca:4b:
fa:69:cd:9e:84:83:c6:0c:21:c4:1a:30:11:d0:9f:
c4:5e:5a:40:cb:22:b4:09:ce:04:aa:37:82:d9:c0:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:BE:B5:39:9B:F8:9F:E6:4D:3C:ED:50:F9:57:3B:12:D2:99:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nIO-tTmb-J_mTTztUPlXOxLSmRU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:2a:ba:e8:23:23:a7:7c:53:c3:65:9f:e9:de:47:32:bc:fe:
3b:2c:a4:84:df:cf:47:23:e9:46:bb:65:7f:5a:fb:27:07:46:
b8:8d:96:16:16:bd:65:51:c0:d0:5b:ef:8a:1c:b5:48:c7:4c:
8d:71:fe:47:da:4a:52:0a:fe:d9:4f:c0:4e:0b:bd:19:bd:62:
91:64:ac:5e:f4:e2:54:ac:87:1e:9a:30:53:e1:8e:9a:7b:f2:
4f:d3:8a:f5:2f:c5:c0:dc:8d:e4:3d:b7:2c:6d:03:43:d9:8f:
24:06:76:bd:f3:e6:d1:d6:d2:0b:2a:9b:9e:32:38:86:6e:d2:
13:c5:65:6d:f9:6a:51:fd:ab:25:35:5a:ce:0e:53:bb:b5:64:
ea:4f:0a:cd:cb:33:c2:da:a5:70:de:74:cc:21:af:f1:22:bf:
d0:99:44:f7:31:9e:01:e9:ee:f5:5c:c9:4a:73:7e:18:83:8e:
a9:ab:d8:95:c9:b1:5d:a6:d0:61:c3:60:95:6f:04:32:b7:86:
b4:dc:0f:da:ff:83:26:76:31:68:d7:4f:15:48:57:92:50:05:
53:f1:d5:ee:9e:a5:f4:74:01:ed:af:ce:31:55:7f:be:a5:4b:
d6:cb:c3:7b:a8:cf:0d:4e:fb:bb:1b:32:56:65:9f:30:0e:19:
a4:84:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org