Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rMXC50urU4ly2sY51elZ1Mn83wk.roa
File: rMXC50urU4ly2sY51elZ1Mn83wk.roa (raw, json)
Hash identifier: tyKoiIAaAGsTruUjVrT71njketbVIs1hgpZQyuxxXQE=
Subject key identifier: AC:C5:C2:E7:4B:AB:53:89:72:DA:C6:39:D5:E9:59:D4:C9:FC:DF:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A55
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rMXC50urU4ly2sY51elZ1Mn83wk.roa
Signing time: Sat 06 Apr 2024 08:52:27 +0000
ROA not before: Sat 06 Apr 2024 08:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14933 (0x3a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 08:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ACC5C2E74BAB538972DAC639D5E959D4C9FCDF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:b0:62:6f:7b:19:16:39:c5:13:3c:d8:97:
d5:62:aa:2e:1f:78:7b:06:83:51:95:f0:72:c5:d8:
b1:6e:24:d8:6d:9c:d8:e6:c3:bc:7f:60:d3:9a:db:
a3:d8:ca:db:20:05:57:3a:a6:10:4a:79:c3:c1:22:
3a:a5:b9:b2:44:34:78:d2:83:73:ef:13:94:76:94:
0e:6a:65:cc:7e:b4:19:34:fc:80:19:41:d9:e4:9c:
6e:08:78:77:fd:60:c2:4e:95:8a:a9:f3:f2:13:b2:
64:72:f3:87:a6:88:9b:2f:ae:f7:b2:86:a8:e5:34:
c1:96:12:16:3f:40:69:70:7d:c9:f8:2d:fb:b7:d3:
5f:d4:58:db:22:91:d6:cd:a4:c6:a8:25:37:7b:7e:
fb:bd:09:82:40:1b:47:63:66:3e:27:70:93:d4:bf:
33:80:1d:18:f0:a5:b6:e2:08:f8:46:02:98:95:ce:
a4:c5:7e:3c:20:5e:cc:a7:56:1e:2a:32:3b:5a:ff:
d1:77:52:cc:4c:7c:f0:4a:75:ce:04:5c:08:ce:35:
45:83:04:74:1e:f5:24:59:48:45:38:bb:4f:8e:08:
7d:d7:84:22:67:f3:49:ea:fb:80:1b:a2:6c:6e:75:
46:44:82:ef:c0:92:f8:a0:43:b9:c7:88:ff:d3:6c:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:C2:E7:4B:AB:53:89:72:DA:C6:39:D5:E9:59:D4:C9:FC:DF:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rMXC50urU4ly2sY51elZ1Mn83wk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
49:31:fb:57:e4:2a:81:95:31:44:a2:fc:93:13:eb:c2:62:61:
4b:a5:57:f2:d4:53:bc:05:2e:5c:d5:4c:87:79:2b:46:4c:22:
e9:15:f1:66:b5:46:c4:44:61:8b:5a:90:b1:db:a1:3d:30:8a:
00:cc:23:e7:11:b2:f0:41:56:a7:88:de:47:f5:57:6c:79:ba:
1f:5c:bc:9f:0e:b3:52:9c:1f:65:ee:7c:f7:22:74:a6:5d:36:
ea:32:3e:20:31:7e:bb:b4:7a:5e:ad:0c:65:cf:4c:50:a4:55:
25:37:c0:d8:8c:ab:7f:d2:75:23:c2:70:f2:5b:2e:f6:60:d6:
ca:99:2d:b9:3f:98:0b:ca:79:8e:5c:e1:09:ac:04:2e:8c:c2:
b7:d4:dd:57:30:34:90:67:38:66:8f:b2:0f:8c:61:58:c0:39:
b5:da:21:65:0c:bb:9b:1c:50:d5:84:7c:4b:f6:9e:a1:c2:b1:
21:32:54:64:02:4c:76:6f:e3:a2:3c:22:7b:fb:eb:67:f0:3d:
b7:8a:73:55:80:e4:25:31:3c:ad:dc:cd:ec:a6:4d:53:bf:c1:
93:ca:aa:56:74:00:64:3e:6e:38:32:d9:a4:60:10:bd:64:2a:
28:65:14:dc:25:70:8f:95:07:08:44:99:05:e7:fa:3a:79:83:
e2:32:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org