Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/p4VtBUpkLf6CPcKfg6_j_Ac3feY.roa
File: p4VtBUpkLf6CPcKfg6_j_Ac3feY.roa (raw, json)
Hash identifier: 762TJcrU2k81Z/Lc47IzTYjZhiaAcVhkUOsfB3/sJyY=
Subject key identifier: A7:85:6D:05:4A:64:2D:FE:82:3D:C2:9F:83:AF:E3:FC:07:37:7D:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5805
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p4VtBUpkLf6CPcKfg6_j_Ac3feY.roa
Signing time: Wed 15 May 2024 22:54:35 +0000
ROA not before: Wed 15 May 2024 22:54:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22533 (0x5805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 22:54:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A7856D054A642DFE823DC29F83AFE3FC07377DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:81:f5:33:d6:a9:58:06:f3:d3:d8:e5:39:
c5:7a:1f:d3:be:6b:56:78:26:3d:5a:b7:e6:16:a0:
3f:89:c6:b8:66:35:3b:2a:cb:13:ab:1d:98:78:01:
99:e1:b1:36:24:b8:d3:8b:15:6a:2c:10:5e:22:bf:
84:f4:c7:72:42:99:d6:70:d1:28:f5:25:c5:9d:fc:
4c:63:8a:5b:4e:69:73:4b:e9:0b:5a:69:e0:33:54:
ea:0c:f5:b6:34:67:f1:cb:a0:ff:91:64:98:e6:13:
67:a0:e5:d3:8a:6b:a1:cc:c1:79:59:ef:17:a6:1c:
65:43:95:d3:1e:47:36:12:f8:ff:18:75:0e:a0:17:
2a:30:d4:b4:0c:69:94:ba:dc:0f:60:8c:92:61:6a:
09:42:f9:bd:54:b9:f4:fa:1d:92:4e:51:f8:9d:70:
2b:49:e0:d1:f6:04:84:53:cf:f8:a9:d4:f3:e5:ca:
71:fb:4c:66:24:13:8f:b9:20:28:a1:83:61:ac:c4:
70:59:16:64:6b:c2:7b:b3:b0:68:61:a8:e5:eb:f7:
77:99:1d:65:47:6c:20:2e:99:0d:9f:30:1b:37:47:
af:9e:08:64:8d:a1:91:0a:8d:1f:6e:ec:87:3c:07:
20:c8:d2:ff:c7:76:f1:4f:14:55:4e:46:fa:a0:b9:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:6D:05:4A:64:2D:FE:82:3D:C2:9F:83:AF:E3:FC:07:37:7D:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p4VtBUpkLf6CPcKfg6_j_Ac3feY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
21:f0:6e:f9:ba:9d:e8:1e:07:37:85:14:f6:60:fa:f9:ac:7d:
74:62:3f:54:ba:b3:da:a8:e8:59:af:c0:36:e5:f1:ac:7b:01:
b2:94:ee:38:51:ac:f7:cb:66:c8:c7:24:0f:c5:72:cf:9e:94:
30:54:0d:f3:57:cc:55:dd:99:65:d4:47:47:9a:d5:9a:ec:1a:
19:8d:23:f7:b2:75:b2:fc:73:db:22:fd:a4:c4:f0:cf:bb:c6:
8c:66:e3:3b:22:5a:a7:13:55:85:b4:59:fd:ca:3e:bb:75:69:
01:01:83:19:a6:d2:55:0b:0a:5a:c4:4a:1c:d2:e3:4b:73:e7:
6b:49:29:2a:d9:01:97:d6:d4:ab:d8:92:8b:9a:a8:53:58:42:
44:2b:97:7b:4d:83:95:8c:14:e7:87:4a:6c:2d:c2:76:6e:d7:
e0:7b:e4:f0:39:98:70:a4:82:59:53:5d:63:db:de:fa:c0:25:
90:2f:c6:74:53:8e:87:45:af:66:21:f0:6e:92:82:f3:e2:c1:
24:e6:df:17:e8:80:68:04:35:08:24:f4:c9:ab:c2:1e:4e:b0:
73:99:02:7f:73:a0:7a:63:ea:79:1f:0d:9a:9c:90:b2:96:8a:
c6:32:89:a7:66:e0:3d:f2:e8:97:48:55:4c:42:be:66:35:4a:
1b:71:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:55 2025 by rpki-client