Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o1Xg1aTNIZVGC1DDlS9n2SUUaQ0.roa
File: o1Xg1aTNIZVGC1DDlS9n2SUUaQ0.roa (raw, json)
Hash identifier: yNMMIeNmaG3TDkqe4P21OcVexk/1DA/6nrsfG/XNf9A=
Subject key identifier: A3:55:E0:D5:A4:CD:21:95:46:0B:50:C3:95:2F:67:D9:25:14:69:0D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5815
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o1Xg1aTNIZVGC1DDlS9n2SUUaQ0.roa
Signing time: Thu 16 May 2024 00:54:14 +0000
ROA not before: Thu 16 May 2024 00:54:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22549 (0x5815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 00:54:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A355E0D5A4CD2195460B50C3952F67D92514690D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:08:5b:89:b1:cd:b8:01:6d:54:6d:68:74:
9f:eb:d7:b3:92:c6:31:bb:79:ae:65:07:cb:d3:94:
07:bf:d9:68:31:4a:4a:c0:df:10:a5:f6:d3:ee:34:
be:89:33:1d:dd:b1:36:d7:f6:2d:0f:d8:dc:89:dd:
89:67:56:d9:3a:ba:24:7e:68:b8:81:5d:4a:1a:23:
92:c6:45:3c:d2:15:3a:e4:0d:af:aa:8a:81:c7:ec:
0a:38:93:a2:72:fc:23:ae:7e:41:49:2d:d4:f0:ae:
de:01:48:73:48:10:7b:d0:97:9d:39:73:7d:10:38:
f0:41:d6:07:5c:be:c8:33:19:82:ae:64:a0:c9:f0:
f1:29:f1:05:e8:87:90:1b:06:29:ce:4d:92:c6:2a:
52:52:d7:98:a4:d0:ad:d9:55:5f:b4:1c:a7:7c:02:
21:8e:34:e9:cd:81:33:c9:a6:ed:d6:a2:cc:a2:9f:
fe:86:6a:bc:a4:6c:18:97:aa:28:07:58:fc:8d:a7:
87:93:34:d8:7f:ca:e0:dc:6c:d4:2e:0a:66:2b:c9:
51:fb:0d:08:77:b2:0d:75:ea:65:90:3a:39:2c:08:
59:34:3a:38:91:85:14:b9:db:7c:fc:c3:8a:4e:4f:
f4:a5:48:fd:30:69:2c:e2:e9:f9:d4:c9:86:d5:3d:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:E0:D5:A4:CD:21:95:46:0B:50:C3:95:2F:67:D9:25:14:69:0D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o1Xg1aTNIZVGC1DDlS9n2SUUaQ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:50:07:27:e6:2e:c2:6d:53:1b:eb:d1:f9:c7:db:a7:14:ed:
68:b7:84:f5:8b:9b:0b:8a:67:77:b8:d0:11:d2:f8:0f:b6:04:
a0:c2:a1:1b:85:09:4b:d9:e0:bd:4a:34:c1:4b:27:96:8c:a6:
6a:48:35:5b:91:13:e5:f2:08:f0:72:8f:e2:08:72:04:3d:70:
1c:09:be:97:00:00:17:82:aa:0b:1a:15:6c:63:9d:9f:05:ff:
11:c8:d4:62:58:b9:05:56:af:0c:56:68:b3:9e:2b:52:06:cd:
b4:fe:48:d8:84:b8:e4:c8:07:a0:09:0e:50:80:c4:fd:ab:b8:
c4:9b:cd:d2:3c:e5:1b:c1:cd:15:3d:cb:cf:76:98:d9:f0:01:
ed:87:95:e4:f2:a6:bd:ce:2c:ab:3f:37:0f:f5:92:fc:0b:4e:
8b:cd:71:cb:23:06:0d:b6:72:a4:86:3f:31:bf:e4:02:9f:27:
27:e3:90:d5:f5:d0:6a:b7:43:c1:3b:2b:df:ab:3f:8f:56:c7:
8a:22:c1:d4:fa:ab:99:b3:cf:18:3f:0b:dd:8f:a4:22:df:93:
e7:37:6b:41:ab:26:32:4a:21:24:eb:65:96:43:75:33:9d:15:
25:a1:1d:0a:08:a2:97:e4:3c:a1:ab:2a:66:c5:da:ec:2d:f4:
04:4d:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org