Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ovhS1Iloz7tygY2bO3WO8wdQE-k.roa
File: ovhS1Iloz7tygY2bO3WO8wdQE-k.roa (raw, json)
Hash identifier: 4Z5+SZ7/OJ0C8WgCWUklgkUiK6rtrhSHbkFdE4PY5pc=
Subject key identifier: A2:F8:52:D4:89:68:CF:BB:72:81:8D:9B:3B:75:8E:F3:07:50:13:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5581
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ovhS1Iloz7tygY2bO3WO8wdQE-k.roa
Signing time: Sun 12 May 2024 14:24:04 +0000
ROA not before: Sun 12 May 2024 14:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21889 (0x5581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 14:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A2F852D48968CFBB72818D9B3B758EF3075013E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:a4:21:0f:67:c3:ed:d4:2b:67:26:e5:d2:
3c:20:ae:0f:7b:6c:91:84:93:b0:be:4b:41:f2:f0:
bb:01:89:fa:f8:f2:8b:6a:8f:64:5a:40:a9:f4:fe:
c2:2f:ae:41:5e:72:68:8e:60:d1:b2:89:e6:bb:8f:
89:b6:b8:df:9e:61:2d:49:9e:43:2c:d7:f8:8b:fe:
83:47:a6:8a:c7:f9:0e:a0:71:20:c4:c7:5d:87:e0:
93:67:4f:7b:26:f2:60:df:25:30:04:3c:6e:c8:4a:
80:e5:c2:45:83:dc:88:04:b2:2b:37:b5:73:39:ea:
af:85:14:05:d1:91:c8:26:f9:5e:ed:92:29:f7:55:
9c:97:d4:b5:eb:eb:b8:0e:8d:bf:f4:eb:3b:3c:6e:
ca:c0:b7:16:e3:3e:23:db:d7:ca:f6:8b:a7:e5:6d:
ce:4d:32:11:21:97:b0:4c:c4:e0:16:1c:95:19:4a:
ae:d3:1f:d7:62:80:ab:fa:37:1c:d6:79:c7:b7:c1:
9e:79:5a:93:8c:23:cb:7c:f7:34:79:c0:9d:da:fb:
99:87:37:a2:ec:eb:52:99:a0:54:7a:75:51:66:8b:
e7:82:03:69:8f:c0:d5:9a:d6:2f:bb:1c:31:e5:4f:
ee:14:dd:41:4a:8c:5f:7f:1b:3b:d1:87:41:0d:a8:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:52:D4:89:68:CF:BB:72:81:8D:9B:3B:75:8E:F3:07:50:13:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ovhS1Iloz7tygY2bO3WO8wdQE-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
78:5a:8a:3b:7a:81:35:74:dd:0e:11:4f:c2:71:c4:4e:fb:c6:
bf:0a:27:e5:0f:03:fd:1b:77:b7:6a:95:05:7c:8f:71:d6:ac:
38:be:fe:19:3d:11:8a:17:69:fa:b8:e9:30:71:9c:51:4a:cd:
c6:8b:6f:20:ef:20:eb:7c:3d:c7:50:48:82:3b:2d:a6:a2:a3:
7b:2f:60:60:29:ea:bf:6d:81:b1:aa:8d:dd:70:38:fc:d7:c2:
a3:30:8b:1b:2e:28:e4:49:62:f9:14:65:b8:9e:5c:ec:7c:e2:
34:17:c1:eb:0a:c8:8e:88:b6:2d:4d:ab:a1:ee:c3:43:93:2d:
f3:2f:76:3d:7e:ee:ba:0a:18:6e:90:de:c9:91:f2:87:cc:9b:
b4:7c:28:34:15:3f:bc:16:00:a8:5b:00:a9:c2:ca:66:f6:91:
22:92:f0:7a:b7:db:d1:de:04:c2:50:de:1e:b2:1c:b6:09:56:
3e:8c:8d:e9:09:91:c6:8e:4b:c0:11:11:0e:c6:e4:1e:58:39:
d8:f9:8f:d7:ba:f9:cd:a7:96:34:be:66:70:ce:f7:10:28:9e:
3f:93:79:dc:a1:3c:b5:f2:f6:f4:ed:7f:d1:58:7c:e5:04:11:
e4:2a:db:ff:d5:27:ff:61:81:c2:a6:47:4a:b6:ce:a0:d5:de:
94:e3:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org