Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qZ0ThTtblhCRKbPedNjA_15wals.roa
File: qZ0ThTtblhCRKbPedNjA_15wals.roa (raw, json)
Hash identifier: Yggn7qnpglK8cxnpOAtkjtshrj7YMxTNqLRdOGOPHOg=
Subject key identifier: A9:9D:13:85:3B:5B:96:10:91:29:B3:DE:74:D8:C0:FF:5E:70:6A:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52CD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qZ0ThTtblhCRKbPedNjA_15wals.roa
Signing time: Wed 08 May 2024 23:53:56 +0000
ROA not before: Wed 08 May 2024 23:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21197 (0x52cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 23:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A99D13853B5B96109129B3DE74D8C0FF5E706A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:64:45:cf:d6:e6:6b:bc:d4:55:57:20:69:
8a:d4:11:16:2d:4e:5f:61:4a:01:bf:bd:ee:e7:d7:
37:60:c5:99:a1:97:ef:22:6d:f1:d7:1a:cf:4f:50:
03:01:5f:a3:ae:a3:4c:cd:57:a3:17:d3:0a:58:c3:
7e:de:56:60:09:19:5e:89:fe:fc:d0:ec:42:51:ee:
25:37:5f:55:77:e5:71:be:17:9e:4d:4a:3d:11:5f:
ca:d6:16:a6:5e:20:5d:9e:be:0d:f7:f7:c4:9c:f8:
6e:b7:71:c4:7e:18:9b:67:1e:d8:59:ff:9e:8e:5d:
7e:61:89:5f:2b:5c:53:7f:44:d7:f0:f6:98:6c:cb:
fa:b8:93:5a:c5:c3:68:fe:a7:65:6d:0c:81:01:38:
6b:3a:0a:2e:de:80:37:b5:72:33:71:73:35:f9:00:
37:7f:01:eb:e2:fc:fd:b7:36:d9:85:68:06:e9:01:
e3:65:98:ba:12:95:b7:6d:fb:4e:68:3f:c1:5e:37:
93:08:e5:73:c0:42:55:64:f8:d1:a2:72:4f:51:4b:
92:6c:9f:b5:4b:98:ac:15:39:fe:20:8d:ae:ad:b2:
46:3c:20:79:bb:dc:b2:27:ab:95:a6:18:d0:ec:a6:
fb:bf:5d:94:05:7d:f3:a8:c4:3f:f3:85:65:5f:88:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:13:85:3B:5B:96:10:91:29:B3:DE:74:D8:C0:FF:5E:70:6A:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qZ0ThTtblhCRKbPedNjA_15wals.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
23:05:77:4c:81:6f:4f:9e:74:a5:58:83:0e:34:15:b5:19:ef:
c9:43:18:73:e0:1f:14:39:c7:c3:8f:99:1a:cb:15:b6:1a:fa:
99:55:6d:6e:06:1c:d7:f0:4b:89:22:6f:2c:b0:26:4f:2e:9c:
af:24:b1:90:ec:8f:46:34:1f:e7:4a:ee:a8:e4:19:23:6a:5d:
52:61:e4:67:0f:89:b2:6e:6b:02:ae:13:44:79:6d:0b:c6:34:
c9:de:6b:a1:3f:91:9c:9f:80:57:46:ff:80:32:25:dc:c2:73:
4d:2b:7c:39:02:a7:93:16:6d:66:99:6a:c9:b1:77:a3:c0:11:
da:d3:4c:c4:9d:c0:2c:ac:8a:8d:d2:b5:c5:54:de:c0:e8:3f:
54:6e:ae:cb:2c:9d:e5:57:96:38:4d:45:a9:e1:64:f0:58:bd:
54:bf:b0:ee:81:90:c2:62:42:fc:8c:63:7a:60:89:db:8d:58:
3c:38:5e:aa:ad:4a:25:dc:aa:f9:e2:11:63:5a:ec:35:f4:2d:
30:53:de:1f:3a:fc:07:17:cb:a7:9a:7b:8f:54:c1:a7:3a:da:
2c:ab:83:6f:cc:84:66:7d:69:49:5a:08:70:e2:3a:c2:e6:ab:
87:38:cc:09:94:e7:eb:95:1f:5a:4e:ba:84:99:68:4e:b2:77:
d4:a7:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org