Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pBle_TcJR21biXzJWi8JDldEOMg.roa
File: pBle_TcJR21biXzJWi8JDldEOMg.roa (raw, json)
Hash identifier: pDinRaqj1M/bhi97+w87/yMdmITUq56d05JusseUvUw=
Subject key identifier: A4:19:5E:FD:37:09:47:6D:5B:89:7C:C9:5A:2F:09:0E:57:44:38:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 553D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pBle_TcJR21biXzJWi8JDldEOMg.roa
Signing time: Sun 12 May 2024 05:54:03 +0000
ROA not before: Sun 12 May 2024 05:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21821 (0x553d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 05:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A4195EFD3709476D5B897CC95A2F090E574438C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:14:4c:81:aa:4f:2a:6c:42:a3:6c:bd:7b:
d5:1d:fa:77:34:98:6f:5c:6c:5e:c3:52:be:68:30:
26:5a:5c:43:1a:6f:75:12:39:2f:58:17:06:13:2c:
63:8c:22:46:68:77:b3:51:fb:d5:3a:07:77:f4:4d:
57:0b:bb:4d:5f:2d:fa:a6:df:04:53:4b:8a:e7:53:
c6:ab:01:63:ac:fc:e6:0c:41:c2:a3:ba:98:b1:16:
4b:ee:19:df:66:bf:06:6f:a5:5c:1d:40:76:8a:9f:
e2:d9:83:89:61:df:32:69:00:47:26:be:f3:63:cb:
b6:f9:73:88:e8:cb:4e:7f:6d:d7:60:5d:38:ed:30:
70:2a:cf:21:33:54:44:24:1b:48:e6:f1:4d:95:92:
78:0e:41:b7:ed:e2:05:6a:f0:5d:d0:d2:ff:25:cf:
65:4d:3f:0c:92:13:3a:fe:91:86:81:68:7c:48:41:
9f:f8:11:2f:4b:7c:37:2b:c7:e8:b5:de:54:8c:2d:
29:28:1c:b5:10:c1:0a:e0:03:3e:18:fe:cb:16:d1:
f9:cb:a2:97:dc:7f:84:52:79:07:21:05:b4:86:b3:
03:aa:bc:76:67:20:56:61:1a:94:0a:4c:b4:01:cc:
dd:3d:26:e7:47:af:8c:95:8a:d4:44:22:31:07:b8:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:5E:FD:37:09:47:6D:5B:89:7C:C9:5A:2F:09:0E:57:44:38:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pBle_TcJR21biXzJWi8JDldEOMg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:2b:79:2f:11:2f:bf:b3:12:21:d3:04:76:ac:69:9c:cf:55:
76:14:df:f8:98:81:47:b6:97:ee:e1:cf:d4:d5:2e:7b:5f:3e:
c2:c4:93:52:bb:13:46:cf:ac:80:d2:b6:33:cb:49:ed:56:8b:
a3:3b:21:f7:59:63:9b:5c:a2:de:04:59:2d:79:7a:0e:f0:05:
5d:0d:ea:1a:96:38:d2:e8:3e:15:c7:97:5b:5b:f2:8e:3c:b3:
51:48:8c:c0:e1:b6:d0:21:38:d7:a1:2a:f2:31:7e:55:17:47:
25:81:0c:55:ac:52:02:e3:a5:81:c2:0b:11:bb:29:d5:14:63:
7c:66:96:2f:17:24:6f:a4:72:bf:0c:6f:b9:d0:84:46:05:ac:
a4:78:ee:7c:e7:c0:1a:85:5f:f3:44:b3:be:98:ac:bf:7f:03:
d6:e4:72:f2:11:db:bb:7d:db:24:2b:66:5c:a0:54:73:a2:86:
ae:96:0a:ea:75:fe:24:c3:5e:2a:ec:f6:95:2d:ba:9b:16:4c:
ab:90:db:d7:40:35:05:e1:7a:5a:ba:5f:7a:d5:ea:8e:64:f6:
ab:91:99:a5:ae:92:da:af:e7:3c:c8:16:a0:0a:cf:99:02:ea:
37:96:47:df:8e:08:9c:db:b9:a2:ba:f2:bc:34:8c:f1:77:b7:
44:8f:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:16 2025 by rpki-client