Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ongLVMIy0ejEPubRsN69L2BLVU4.roa
File: ongLVMIy0ejEPubRsN69L2BLVU4.roa (raw, json)
Hash identifier: YGzhXM86mJ6Av3IRlY+HSU2IB2sh46xHIYQbP1AtY9Y=
Subject key identifier: A2:78:0B:54:C2:32:D1:E8:C4:3E:E6:D1:B0:DE:BD:2F:60:4B:55:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5825
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ongLVMIy0ejEPubRsN69L2BLVU4.roa
Signing time: Thu 16 May 2024 02:54:16 +0000
ROA not before: Thu 16 May 2024 02:54:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22565 (0x5825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 02:54:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A2780B54C232D1E8C43EE6D1B0DEBD2F604B554E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:23:c7:62:e6:d3:b7:8c:25:34:9a:18:1d:
6d:21:c1:c0:fb:52:0e:99:9e:12:51:c6:1d:f1:70:
f8:9a:e6:a7:a0:9b:39:fd:ed:fd:86:eb:87:be:61:
31:4f:5a:c8:11:d8:3c:57:2e:ef:a8:44:09:80:ff:
fa:ae:97:c6:27:7b:d1:b6:91:b6:82:d0:ad:b3:a3:
ed:3a:87:0e:f8:11:90:91:5e:5c:3b:e7:86:e0:d7:
61:26:f1:8c:69:2f:1e:f1:52:59:e3:81:61:7a:e0:
c6:5b:83:4d:30:50:9b:19:ec:44:57:ad:e9:03:1d:
b8:9c:34:89:48:33:af:6f:35:8c:91:7f:76:15:13:
ac:27:f4:0f:16:71:e7:af:70:85:68:0e:c6:00:f3:
b7:24:07:9c:7d:bb:e0:0f:37:7d:63:62:da:54:39:
e7:9c:50:2a:cf:89:75:bc:75:9b:cc:46:bc:83:d6:
52:8f:9f:3a:65:0d:22:05:30:e0:4c:df:a6:0c:de:
a1:9a:38:0b:cb:96:e6:99:c6:99:b0:91:ea:c8:6c:
cd:99:58:1d:73:4c:be:b5:3a:17:68:94:0f:6a:a5:
f4:8a:fd:f7:49:0f:96:90:bf:09:64:cc:bf:48:59:
62:1d:24:80:e0:f7:3a:f1:3c:f2:1a:dc:d7:71:6f:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:0B:54:C2:32:D1:E8:C4:3E:E6:D1:B0:DE:BD:2F:60:4B:55:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ongLVMIy0ejEPubRsN69L2BLVU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:9e:0e:0d:b1:bc:1e:b0:8e:b8:b8:3d:7e:1f:cd:a4:d5:fa:
7c:37:00:ec:a0:fe:d7:22:12:c0:18:9e:e1:d1:fe:93:c0:b4:
5c:f0:9e:10:a6:36:db:01:da:2d:e7:ee:03:f0:0a:52:ae:b4:
86:0e:b7:d1:ca:8f:8d:e8:52:2d:49:75:7d:f9:08:02:e5:c0:
55:ed:86:3f:63:32:15:94:7f:45:39:b7:70:b0:e6:12:cd:f9:
9b:ba:a4:e4:23:06:3d:de:47:de:d2:0c:8c:fb:a7:42:19:cb:
6b:f5:ed:42:e2:b5:ac:d2:f5:74:ab:e1:a7:4e:03:c1:25:59:
68:1f:a1:cf:1f:ef:48:b3:39:f4:f1:96:37:00:e4:62:15:54:
70:f9:1e:6c:e9:ac:f3:05:c6:58:14:c2:d0:e3:80:a2:dd:0e:
ff:93:13:85:94:25:47:30:ec:e5:dd:44:60:0b:2e:0f:36:8f:
39:5d:b2:06:d1:a5:52:4d:ff:78:ca:fd:f1:a7:bd:26:ef:f4:
72:98:ba:6f:ce:85:9b:65:1f:7d:e7:72:92:aa:f0:af:d6:2e:
c9:f4:36:5f:d5:a4:9a:e0:91:c6:28:cc:ad:73:99:91:f8:fa:
bf:08:bd:5c:d7:66:93:70:45:ef:b2:11:67:91:0a:64:1f:bc:
2c:0c:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:10 2024 by rpki-client on console-ams.rpki-client.org