Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pfER-jyL91m3DwfPn2IG2X9zoJM.roa
File: pfER-jyL91m3DwfPn2IG2X9zoJM.roa (raw, json)
Hash identifier: cc0DJv5Z7vmLOSLgfZRaJbAEQn3eykzYHu+BdMHGh/Y=
Subject key identifier: A5:F1:11:FA:3C:8B:F7:59:B7:0F:07:CF:9F:62:06:D9:7F:73:A0:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43A9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pfER-jyL91m3DwfPn2IG2X9zoJM.roa
Signing time: Thu 18 Apr 2024 19:23:00 +0000
ROA not before: Thu 18 Apr 2024 19:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17321 (0x43a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 19:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A5F111FA3C8BF759B70F07CF9F6206D97F73A093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:95:4f:d9:9f:d6:5d:57:bb:32:d2:8a:88:
bd:7b:76:e5:86:5f:22:91:6e:ff:14:0e:0b:59:8b:
45:c7:2a:49:73:3d:4a:a0:56:aa:73:72:2e:af:70:
12:70:76:f2:87:e9:3f:72:3e:46:27:1f:97:aa:b5:
5f:f3:d6:c4:da:ff:40:8e:01:80:a9:5c:89:d5:c4:
b6:44:82:f8:b4:6c:9c:71:ac:c2:c5:d1:18:fc:66:
e6:37:78:56:60:58:23:a7:bd:d6:48:64:8c:24:89:
0f:d2:01:a8:88:22:ed:16:f0:72:a0:ea:e6:04:39:
44:44:73:72:b9:b2:5b:7a:12:af:cb:9e:f0:2a:c3:
35:63:c9:16:a8:ef:54:19:3c:c0:05:38:2e:22:03:
ea:f2:5f:4c:96:df:4e:5b:43:e1:09:5d:d2:58:06:
21:11:05:b9:31:1e:b8:0b:a9:61:a2:a8:8e:f2:f4:
ca:36:03:af:d9:16:b2:cc:cf:10:a2:45:3d:a6:96:
be:b7:11:ca:96:09:fc:44:78:a3:42:17:49:68:6a:
31:a2:2e:4c:ee:53:ac:cf:bc:db:03:91:0a:6a:5f:
68:20:93:af:a2:f9:25:90:0d:7d:ff:09:48:61:4d:
fe:b8:fc:a6:9e:9c:28:4d:3f:ab:ae:98:1a:04:24:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:11:FA:3C:8B:F7:59:B7:0F:07:CF:9F:62:06:D9:7F:73:A0:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pfER-jyL91m3DwfPn2IG2X9zoJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
65:35:9f:15:f8:e6:77:ea:4f:e5:d1:e1:4b:72:5b:26:3a:17:
b1:90:6b:12:58:0b:64:ea:9a:e5:94:23:fb:80:e7:9c:c9:5e:
5f:1f:e0:49:20:34:3b:8f:0c:bc:7a:7a:ea:38:9f:b5:b1:19:
4b:f9:68:b2:6e:30:17:c9:a0:93:7b:91:68:3d:31:53:73:89:
32:33:13:b4:50:a2:c1:42:c5:d1:e0:df:33:4f:c9:24:29:da:
ba:44:b6:18:33:30:dd:78:80:29:14:5c:7c:c6:6b:57:33:d6:
b9:dd:6c:ee:16:b7:83:83:75:8a:25:f8:ba:3e:c7:ec:a2:57:
65:0e:48:51:41:f6:55:a2:a0:9d:25:0b:cf:78:19:aa:63:88:
bd:99:38:b2:aa:b1:de:bb:ba:21:02:bb:68:b2:86:37:ce:d4:
bc:27:42:ab:6b:f5:5a:75:bc:85:5d:e2:4a:c8:e2:80:95:ea:
17:e5:0f:db:59:6c:b4:52:30:b3:55:14:13:89:c3:7b:c1:bb:
57:2d:d7:51:21:d0:f3:0e:b0:df:91:fc:25:af:b6:8d:63:61:
bb:82:64:1a:5c:fa:df:b9:a5:2f:f0:44:34:e6:94:29:a0:9a:
40:16:bc:8f:5d:7b:c4:80:e6:42:da:e2:9a:03:74:d0:a5:92:
84:45:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org