Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r0X3BgVwc-ohcuyFf_vAhpJfm90.roa
File: r0X3BgVwc-ohcuyFf_vAhpJfm90.roa (raw, json)
Hash identifier: 7vpfpKfIdNfm+Br0HP+wpr8DGfxYdeub8LAESOp3ABg=
Subject key identifier: AF:45:F7:06:05:70:73:EA:21:72:EC:85:7F:FB:C0:86:92:5F:9B:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EB5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r0X3BgVwc-ohcuyFf_vAhpJfm90.roa
Signing time: Fri 12 Apr 2024 04:52:47 +0000
ROA not before: Fri 12 Apr 2024 04:52:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16053 (0x3eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 04:52:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AF45F706057073EA2172EC857FFBC086925F9BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:7d:84:86:86:96:c7:cb:de:77:bb:2e:6a:
50:d2:fb:2b:c3:81:76:bd:f7:62:95:92:d3:d6:cb:
e8:9a:be:51:42:85:d6:50:89:2b:69:51:f8:92:0c:
a1:ea:f5:87:3c:f5:c6:27:51:d5:63:14:52:7c:2f:
ac:d1:1b:ad:4c:d7:66:6a:29:d0:26:1e:d2:75:70:
b4:54:e4:b0:26:ff:6b:f1:76:f8:d8:7b:4a:93:db:
0d:dd:3d:27:ec:78:09:3c:f4:11:fc:65:16:0e:60:
19:57:d3:08:ce:78:06:39:c7:fa:29:2e:1e:b3:b1:
5e:d9:55:a9:45:00:0e:b9:16:87:57:d1:22:a3:c0:
29:6f:be:ed:19:9f:a2:54:09:41:57:f9:16:6a:18:
d4:8b:5c:51:d9:01:6b:09:3d:e2:95:60:f6:14:2e:
48:09:ff:99:9d:e6:ca:dd:63:2b:af:58:b1:24:ca:
16:6f:cc:3b:48:27:18:77:4f:b9:8d:c3:15:15:37:
c4:d7:19:b1:c3:a1:90:bd:4d:7e:8d:4c:74:fc:2f:
9a:06:4b:5f:2f:15:57:bc:c0:7b:e8:0f:e9:72:95:
ab:ca:23:b3:8d:a3:31:1c:fa:7b:4f:83:ad:7b:10:
fa:62:c7:df:26:45:6b:99:dd:05:c7:77:20:fd:ea:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:F7:06:05:70:73:EA:21:72:EC:85:7F:FB:C0:86:92:5F:9B:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r0X3BgVwc-ohcuyFf_vAhpJfm90.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
47:77:41:08:53:e8:a9:49:7c:7e:e8:fa:55:16:82:a2:d9:fc:
9d:30:96:71:6e:15:57:37:51:0a:4a:d4:12:23:c2:b8:4a:5b:
53:cb:dc:58:22:c6:80:42:57:15:e7:5b:be:8b:1a:81:32:d1:
3a:8e:6c:59:34:c4:bf:99:17:76:7d:5b:40:30:32:10:7f:d2:
7c:8a:1e:83:28:58:1b:87:d5:92:c3:5f:f9:5b:aa:65:d3:c2:
e1:77:8e:c4:d8:85:bf:4d:a1:46:fe:21:49:9a:78:b7:46:ef:
2a:af:88:ea:cd:b8:02:13:04:58:52:d5:a7:75:f6:e1:fc:9c:
4f:94:7c:a5:7c:86:10:13:50:20:23:07:da:2d:0a:e8:81:b8:
70:30:5d:da:94:aa:45:ae:53:e4:63:e7:2d:aa:d1:05:c7:d1:
79:db:4a:36:1e:d2:94:cd:4d:50:1b:f2:f8:49:98:18:35:88:
05:3b:b2:75:ae:da:5e:14:0a:ea:17:e4:e7:aa:99:30:25:79:
6c:eb:0c:f6:6e:30:5d:c8:09:3d:b1:73:0e:50:de:fd:af:b5:
4f:e6:3e:ce:56:b8:d1:5f:3a:e8:7e:f7:61:1e:61:fb:03:03:
2c:b7:ec:6b:32:06:fe:7a:27:a1:f9:12:7e:38:4d:c6:43:4e:
2e:b1:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org