Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/reiCvTOH31SYYBmMc3Gyb80yupA.roa
File: reiCvTOH31SYYBmMc3Gyb80yupA.roa (raw, json)
Hash identifier: EOVglepLfkNZtOqBAjiAlPw76EZYJfz+XLX2X+M1Ud8=
Subject key identifier: AD:E8:82:BD:33:87:DF:54:98:60:19:8C:73:71:B2:6F:CD:32:BA:90
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36D5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/reiCvTOH31SYYBmMc3Gyb80yupA.roa
Signing time: Mon 01 Apr 2024 16:52:11 +0000
ROA not before: Mon 01 Apr 2024 16:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14037 (0x36d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 16:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ADE882BD3387DF549860198C7371B26FCD32BA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:c7:33:9f:47:d2:0e:d7:16:5a:79:a0:1f:
ec:d8:56:8c:e1:46:31:28:3d:c2:2f:69:a2:c5:54:
e2:cc:50:be:45:5e:c0:c1:c2:9c:63:dd:6f:86:66:
46:cc:68:29:83:ed:ff:90:01:a7:0f:97:8f:5b:80:
6b:5c:9f:ce:12:06:55:fb:e4:33:59:8e:49:26:a4:
4c:89:1d:4f:96:19:36:95:c2:f3:26:e7:60:44:8e:
30:67:51:9c:1a:b7:a6:36:cd:a9:dc:1f:5e:67:6b:
2a:3f:bd:28:66:92:72:3f:0d:61:7e:f4:87:82:66:
16:0d:66:44:5c:18:5a:3c:e2:15:40:60:7e:77:9f:
ed:c8:1a:f7:e9:a4:7f:98:67:f2:53:93:3d:6e:d8:
75:b8:73:f6:fc:a8:c3:e0:2a:5e:47:21:0f:e5:2e:
62:da:30:ec:de:4d:2f:34:2c:81:6c:e7:9e:9d:a8:
d2:ba:3b:cc:66:69:8b:99:7c:e6:c8:73:ba:5b:f3:
df:15:8d:41:f6:7d:8b:5a:9b:fc:7c:bd:5d:6b:9f:
4f:9e:15:8b:10:cc:16:23:3e:6a:d6:80:ab:5e:7f:
11:87:cd:84:56:10:e9:5d:e6:50:8c:fa:7a:bc:c2:
1a:f2:eb:65:fe:6c:fe:ed:20:67:0b:77:5a:bf:97:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:82:BD:33:87:DF:54:98:60:19:8C:73:71:B2:6F:CD:32:BA:90
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/reiCvTOH31SYYBmMc3Gyb80yupA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:2c:e9:57:c5:32:93:2e:46:8c:f0:13:d9:eb:4b:68:8f:82:
f4:57:f0:f8:ad:4b:6b:f7:80:20:eb:d0:1a:6f:67:67:d9:34:
7d:27:e3:39:34:bc:71:19:a8:d2:bd:c3:a6:31:cb:03:c5:19:
90:5a:a8:4e:4b:ef:f0:d1:81:1c:b7:70:f0:a0:94:f9:35:35:
09:8b:d1:82:77:94:85:1d:f8:14:88:4f:fa:49:26:da:2f:5a:
fb:ff:ee:28:b7:de:ef:95:52:fc:fc:90:07:c1:97:29:6e:a8:
56:18:36:e8:14:00:94:c4:43:cd:3f:7f:8b:40:2f:1d:84:92:
c9:85:93:f8:87:74:fc:40:93:2b:36:e7:25:b8:88:4c:9f:2a:
5f:d5:c9:47:06:0e:c4:e8:ad:37:5c:76:cb:0b:a0:4c:8e:30:
15:93:0a:71:3b:e5:ae:22:64:6a:b5:54:8c:23:d3:06:6d:e7:
b1:2a:d0:c3:a1:be:a2:e7:4d:4e:43:20:42:db:39:dc:9a:32:
a2:67:0a:e9:97:ac:d5:90:94:2a:04:05:25:0c:50:97:19:26:
42:3e:fc:c9:fd:5d:44:26:4b:98:dd:24:6e:f0:5c:7b:41:e7:
a7:6f:b9:74:10:9f:a4:b2:5c:a3:71:80:d5:a8:ec:9d:4d:21:
da:5b:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:13 2024 by rpki-client on console-ams.rpki-client.org