Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pzctbEngSc8HmSW2sjn4dVD1FEI.roa
File: pzctbEngSc8HmSW2sjn4dVD1FEI.roa (raw, json)
Hash identifier: LtulMCixHIWMj2ekss2C0X4fpR7A/S5lgxJLyPVREhI=
Subject key identifier: A7:37:2D:6C:49:E0:49:CF:07:99:25:B6:B2:39:F8:75:50:F5:14:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34B5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pzctbEngSc8HmSW2sjn4dVD1FEI.roa
Signing time: Fri 29 Mar 2024 20:52:07 +0000
ROA not before: Fri 29 Mar 2024 20:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13493 (0x34b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 20:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A7372D6C49E049CF079925B6B239F87550F51442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:d5:1e:1e:2a:57:52:38:0f:03:73:3a:4e:
38:dc:76:09:08:b3:c8:29:1f:6c:c1:0d:9e:9b:b4:
89:62:95:de:f5:49:b3:d9:84:6e:cc:c0:c6:c3:5c:
db:e6:2c:f4:8c:f9:83:87:f7:9a:7b:cd:cb:13:b3:
54:24:9c:aa:00:29:21:eb:eb:0a:9d:7d:ef:6f:37:
ca:1a:a2:e2:69:9f:39:38:f3:10:ea:3a:52:da:a5:
05:04:90:e2:41:88:63:6a:3c:0d:08:c8:c1:c9:b4:
62:07:85:bf:22:bd:e0:cd:d3:00:ad:7a:6d:fa:1b:
bc:b8:90:f4:24:ab:5d:2f:cb:28:a5:50:42:ff:5b:
b1:15:28:f8:b0:64:48:db:66:7b:c8:3f:ca:e9:70:
59:48:a2:c6:54:d3:49:5a:68:e1:1a:82:d1:92:e9:
81:75:ea:e7:2a:12:43:e0:65:2d:0e:de:e0:8a:50:
1b:03:2f:64:a4:3d:57:58:e4:35:d7:b8:34:96:0f:
1e:c4:b4:51:8c:06:06:8c:78:c4:29:f2:22:01:39:
3e:1c:fc:1e:ca:d7:9f:0a:29:f1:bd:d4:ef:6a:b7:
28:40:36:5e:e2:d2:2d:6b:e5:64:42:05:b2:58:fd:
6b:ea:a6:c3:e7:09:60:90:e8:94:a5:19:e6:30:30:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:2D:6C:49:E0:49:CF:07:99:25:B6:B2:39:F8:75:50:F5:14:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pzctbEngSc8HmSW2sjn4dVD1FEI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
43:d7:2c:e1:f7:27:a4:7c:d8:92:67:12:cd:ff:1d:1f:6c:de:
d4:2d:6d:78:6d:df:63:2c:09:4e:00:a5:db:1e:40:c6:f5:a1:
3a:3e:52:26:f0:36:ba:70:89:5a:09:f6:c8:f7:13:ee:7c:e8:
fb:9f:58:52:5b:ea:ec:19:cf:a2:55:1a:02:a2:37:dd:84:5c:
fb:a6:12:16:40:e5:29:37:2c:5d:47:80:d4:1a:94:ef:2b:b8:
71:0c:c3:3a:8a:e9:a2:59:f7:65:59:d6:9b:c3:cd:4c:25:62:
41:e6:f8:14:80:74:6f:1a:01:c1:8c:dc:37:d3:e0:0c:47:f4:
75:3a:7f:8d:44:91:53:5f:1b:b6:49:03:4a:88:90:3c:d1:f3:
74:1a:61:38:02:ab:a3:3c:55:ac:2b:fa:4e:e4:1c:71:ed:b4:
c2:12:1c:d7:d4:45:bf:0f:54:2e:0e:2f:86:0a:cb:11:df:54:
21:e9:58:2e:e3:30:19:19:e9:00:19:80:c6:9c:27:9d:1b:d3:
35:a8:b5:ef:82:a1:d7:20:7e:3a:8d:0d:51:31:dc:3b:65:3e:
ed:d9:6e:39:60:e3:51:04:9c:7c:39:4f:5d:f1:df:af:37:9f:
77:aa:f2:c7:24:39:08:47:8f:03:2d:ea:a0:53:4c:d9:61:fe:
94:a3:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:50:40 2025 by rpki-client