Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oHasPHv_sSw3D_7ILD24RkPgdL0.roa
File: oHasPHv_sSw3D_7ILD24RkPgdL0.roa (raw, json)
Hash identifier: ZljF0JJ330+Lp7nIkQiuLNvKA7nBHBi5RHSY3mm8Ywo=
Subject key identifier: A0:76:AC:3C:7B:FF:B1:2C:37:0F:FE:C8:2C:3D:B8:46:43:E0:74:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B55
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oHasPHv_sSw3D_7ILD24RkPgdL0.roa
Signing time: Sun 07 Apr 2024 16:52:30 +0000
ROA not before: Sun 07 Apr 2024 16:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15189 (0x3b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 16:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A076AC3C7BFFB12C370FFEC82C3DB84643E074BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:e3:6c:a7:6d:ab:ea:eb:0d:8b:38:20:3d:
4e:82:92:a7:4b:47:65:87:c1:77:48:a2:ea:f9:06:
d4:6d:d4:70:8f:5f:53:12:2a:70:87:4e:c9:1a:09:
8f:de:18:f2:4c:ae:d5:48:9e:5e:dd:81:ea:73:c3:
e4:f5:e0:54:cd:7d:33:b0:79:a1:f5:85:2b:ac:90:
8e:65:72:c4:ea:e7:46:3d:b1:13:b3:fa:dd:22:a6:
eb:66:56:53:24:63:d6:3a:34:f7:d7:95:17:e5:71:
9a:13:5b:87:fe:34:23:02:88:5e:11:9c:5b:fb:dd:
22:9d:35:10:f0:d6:80:ee:ef:9c:87:fd:a3:d7:49:
84:15:26:86:d4:b6:0d:34:49:82:fd:78:90:c6:06:
99:86:ff:d6:d1:c3:85:bc:56:f7:ef:06:f7:bb:2e:
3b:8e:98:1c:48:85:9e:67:5f:58:c6:f1:d3:06:9e:
78:28:b4:2f:d6:cd:cc:6f:cd:06:f7:94:0f:10:2d:
a4:ff:35:d6:b5:1e:ac:2e:d6:62:eb:6d:03:10:30:
2f:d5:24:9c:15:50:2d:0c:ad:ba:29:3b:f9:b3:34:
8f:63:82:e9:5b:2e:5a:2e:ba:e2:9d:b2:8b:3f:d7:
9f:24:3a:fe:3f:d5:44:0d:b0:31:90:9e:54:d3:19:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:AC:3C:7B:FF:B1:2C:37:0F:FE:C8:2C:3D:B8:46:43:E0:74:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oHasPHv_sSw3D_7ILD24RkPgdL0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
80:9d:80:1d:13:db:f0:df:8d:6b:80:65:07:74:f5:36:47:b2:
5c:f0:cd:71:91:91:aa:43:6b:17:86:d6:b7:f6:71:2b:1f:91:
0e:5e:9f:5d:a2:85:c9:db:cf:2a:a8:d7:80:71:41:3b:fe:22:
c3:10:12:61:37:99:cb:03:a9:72:9b:b8:ef:b5:1f:82:4a:9a:
6a:7c:2f:92:cb:72:9c:73:8f:2b:a3:14:28:d3:74:ab:47:58:
4d:f6:da:c7:66:17:c6:71:d0:00:97:46:39:67:8e:31:ce:5b:
e6:00:59:35:ea:3f:a3:c9:73:3c:cc:14:ad:e4:80:82:4b:e1:
74:1a:a2:44:5d:28:af:86:b3:5b:47:d0:57:2a:29:14:a7:6a:
9f:f5:fa:77:ab:cd:51:27:78:b2:ed:d8:b4:36:af:35:c8:1b:
4a:af:a1:0c:1f:4e:f9:18:ff:5d:8b:6f:73:50:f9:c0:9c:3c:
93:40:5f:88:7b:04:a0:cb:e7:f3:50:65:01:54:f8:06:0a:ac:
74:21:a7:ab:f4:0f:9a:94:5f:27:3d:50:ad:05:02:ed:2d:a0:
ab:92:0e:9c:3b:e1:e2:ec:bc:ad:ea:a3:40:98:9c:f2:6a:8b:
40:97:d2:6d:31:22:8c:82:15:66:77:de:40:7c:59:23:8f:e7:
12:1f:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:10 2024 by rpki-client on console-ams.rpki-client.org