Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nkA8ory774Od52-7l1HqGDlwNcY.roa
File: nkA8ory774Od52-7l1HqGDlwNcY.roa (raw, json)
Hash identifier: MZUWH5sEodiJIjExco1ANMWnSnhFzOkPcAuR7qo8ZAw=
Subject key identifier: 9E:40:3C:A2:BC:BB:EF:83:9D:E7:6F:BB:97:51:EA:18:39:70:35:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37B1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nkA8ory774Od52-7l1HqGDlwNcY.roa
Signing time: Tue 02 Apr 2024 20:22:15 +0000
ROA not before: Tue 02 Apr 2024 20:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14257 (0x37b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 20:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9E403CA2BCBBEF839DE76FBB9751EA18397035C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:5e:1a:32:6c:e8:a3:e3:5b:12:b1:30:df:
1d:d4:b4:03:75:99:41:31:5d:8d:26:6d:31:bc:97:
f8:80:d2:29:20:c3:5a:d6:e7:df:6c:aa:5b:f8:8a:
ea:68:88:46:cd:d1:a5:c7:01:51:33:12:22:f4:2d:
d3:31:dc:e9:c2:44:e5:db:1e:5a:05:85:48:68:11:
70:26:c5:33:e9:3f:b3:74:29:00:f0:d7:59:4b:f4:
74:a1:bc:16:4b:14:e2:95:21:db:91:45:bc:23:c8:
d4:22:ce:1f:47:00:55:05:2b:dd:10:a7:52:ed:a4:
86:cd:67:dd:0d:3e:a3:56:85:2e:55:1b:ed:6b:3d:
ad:22:be:85:e5:43:21:76:b3:c7:1e:68:57:e8:18:
1b:cd:a3:92:83:27:4d:75:b0:95:2e:ea:5e:c2:a7:
4e:7b:fc:8b:73:91:ee:76:46:fe:b8:2e:3e:6f:d0:
f3:d0:34:23:10:25:f2:4a:65:49:c1:98:5b:14:5d:
35:4c:7d:12:6f:0c:84:19:8a:a6:3e:bd:91:bf:4d:
3a:45:16:a1:f4:6a:ca:2a:11:2b:b2:fb:b4:81:7c:
70:70:51:e8:c9:d9:b8:71:65:c1:ec:c1:31:cf:b2:
0f:2c:fe:d3:f4:9b:0c:ee:e6:69:c3:df:26:47:7f:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:3C:A2:BC:BB:EF:83:9D:E7:6F:BB:97:51:EA:18:39:70:35:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nkA8ory774Od52-7l1HqGDlwNcY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:a6:a4:81:99:38:90:48:8c:6c:85:0e:14:6d:6c:a0:26:1a:
7b:0f:c3:11:91:55:a3:2c:cd:2a:e1:25:10:e7:48:d3:07:67:
a6:45:6e:98:b2:60:5b:ac:71:ad:96:63:70:6e:c6:25:0d:b3:
1f:e6:cb:0d:cb:87:de:1f:d4:fa:6b:6e:0f:d2:ab:c6:35:b5:
35:64:84:e6:bd:ac:88:29:f0:8a:a8:1c:9a:13:09:ff:63:07:
96:8d:be:73:7a:07:35:83:51:27:1a:e7:b2:cb:fa:a9:e6:c2:
47:c1:41:a4:f4:4d:2c:27:1b:95:59:d8:af:25:1e:5b:03:d0:
12:63:b2:e0:fb:24:37:96:fb:dd:6c:80:3f:08:fe:e0:14:c9:
e6:c1:fe:16:9d:9d:a6:75:f0:11:3e:12:97:3e:9e:e3:f3:bf:
9e:13:09:d1:68:3e:9c:d0:c4:ba:9e:63:8c:88:3c:5d:9a:15:
5e:99:b0:1d:e7:a6:3a:20:3a:b2:cf:fe:ad:9b:b4:62:36:fc:
74:d8:dc:ce:36:c8:5d:ba:b2:12:16:55:78:91:fc:c3:74:e6:
5a:2a:d6:61:fe:7c:ff:f7:0b:1e:f5:60:38:f6:e4:56:48:82:
df:8d:77:a2:dd:34:78:c9:6b:f7:f3:99:40:46:71:28:a0:4c:
f5:dc:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:37 2025 by rpki-client