Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o-vsMTneSoK414sU4j2t55vYI48.roa
File: o-vsMTneSoK414sU4j2t55vYI48.roa (raw, json)
Hash identifier: 991NSCRKb2dea5jQM0Grd6iqOWS87R+d8QQkZfrsfdo=
Subject key identifier: A3:EB:EC:31:39:DE:4A:82:B8:D7:8B:14:E2:3D:AD:E7:9B:D8:23:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FD9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o-vsMTneSoK414sU4j2t55vYI48.roa
Signing time: Sat 13 Apr 2024 17:22:50 +0000
ROA not before: Sat 13 Apr 2024 17:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16345 (0x3fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 17:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3EBEC3139DE4A82B8D78B14E23DADE79BD8238F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:7a:80:b0:cd:af:8b:35:11:bc:87:96:83:
a1:68:ba:ce:9d:c6:ec:1f:6c:e9:ae:d9:8b:51:fc:
d2:98:b3:59:8e:ea:ad:f4:1c:3a:d1:46:df:ae:33:
c2:e3:b7:79:35:b7:0f:88:4d:6e:2c:50:48:5e:48:
25:b7:44:84:29:99:d7:d5:a5:ba:27:21:9e:42:e4:
29:9d:1f:33:7f:df:ff:e2:e7:fc:b5:fb:78:35:47:
b8:db:bd:54:83:15:8a:ce:50:bb:63:c8:93:d5:bc:
52:94:c5:6c:fe:d3:06:30:09:22:87:27:8c:41:54:
dc:12:28:eb:dd:ae:b2:71:e0:48:cd:5e:87:aa:bc:
4c:fc:b8:01:f3:1c:a3:13:ec:45:e2:ad:40:b1:13:
66:cf:f1:b5:e3:48:6e:85:0f:81:1b:f9:ec:0a:2b:
97:f6:dd:f7:b9:09:53:3c:34:7f:03:13:7f:9a:6b:
31:62:8f:fc:1f:fa:41:f4:76:64:9a:9b:57:31:74:
64:2d:f4:ab:e8:70:07:16:66:59:08:11:6d:07:90:
90:44:a8:82:ac:63:11:f7:21:7e:db:7f:e9:25:4f:
da:3c:30:68:66:f8:f6:bf:bc:93:b1:af:86:7c:df:
82:bd:28:48:98:63:10:f0:1e:c8:3b:66:35:30:7a:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:EC:31:39:DE:4A:82:B8:D7:8B:14:E2:3D:AD:E7:9B:D8:23:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o-vsMTneSoK414sU4j2t55vYI48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:e4:a5:3a:50:ea:d2:3d:ec:64:4b:8e:f3:6d:47:e7:94:b1:
d6:62:eb:2c:aa:9b:dc:e4:a7:d3:d8:ca:64:b9:2c:42:c7:e1:
e4:0f:4a:49:65:15:22:64:1c:98:f3:d7:9c:b2:b8:dc:2e:6c:
c3:d9:46:c3:4b:7e:2e:51:a9:d4:4c:af:62:51:72:c0:cb:7f:
02:2b:31:2a:70:32:12:66:2a:71:3b:80:57:a5:cf:25:3e:19:
5b:fb:fc:f3:36:1e:e5:0e:16:06:93:02:e0:1b:bb:0f:fa:f7:
f2:a4:48:ca:06:2b:05:22:63:e1:48:01:3b:11:35:30:ec:ca:
7f:c7:1d:58:0c:21:76:25:6a:c2:e7:c3:62:fc:e6:7c:24:47:
9a:32:34:8d:43:8f:3c:65:f1:4a:70:e4:e7:a1:1a:51:de:e7:
21:1f:07:46:4c:ba:2f:36:2b:db:3d:23:80:5e:83:06:46:09:
c2:fa:17:5d:ad:c5:6f:77:6f:d7:89:a1:4b:d1:19:0c:ad:47:
a3:91:e5:0f:fd:b6:91:97:69:4b:f1:be:12:3a:19:b3:4d:63:
cc:df:00:06:93:88:7c:eb:c6:82:9c:e8:a2:9b:59:07:17:46:
02:63:01:eb:fa:4d:5c:22:e5:e7:0c:e6:44:e1:bd:a8:4a:76:
c6:33:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org