Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sG1Gg3mRbNPN0i39NeNbf_iX6Cg.roa
File: sG1Gg3mRbNPN0i39NeNbf_iX6Cg.roa (raw, json)
Hash identifier: 3ovozs7ne1R5sfIHS6kL9O9uOS3/UoO/7vngcbmBDOs=
Subject key identifier: B0:6D:46:83:79:91:6C:D3:CD:D2:2D:FD:35:E3:5B:7F:F8:97:E8:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43D5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sG1Gg3mRbNPN0i39NeNbf_iX6Cg.roa
Signing time: Fri 19 Apr 2024 00:53:01 +0000
ROA not before: Fri 19 Apr 2024 00:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17365 (0x43d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 00:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B06D468379916CD3CDD22DFD35E35B7FF897E828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:03:4a:58:66:41:ad:dc:6c:bd:db:f0:01:
b1:61:f7:96:ed:de:b8:8e:62:2a:47:24:a2:04:c5:
cc:f2:da:8f:bc:e8:31:0a:22:c5:9a:74:09:14:d4:
66:eb:4d:6a:3f:9d:db:3f:15:d4:1f:65:c6:26:f4:
4c:a8:e1:84:c9:4d:39:dc:8d:e1:68:5d:cd:d2:6b:
34:d0:3f:0b:f3:e7:90:10:99:35:1a:de:ec:f9:b6:
53:fc:7e:01:c4:0f:5b:56:5b:b0:e8:d6:11:cb:31:
6c:73:dd:40:58:b9:4e:e8:cd:a5:fb:0d:d9:8d:a9:
bd:6e:e3:a4:64:ab:44:6d:7c:13:42:a6:54:c2:9b:
62:9e:b0:47:26:4d:71:56:ac:04:c7:d2:75:a1:5e:
5b:19:63:35:e4:ee:e2:1d:0f:9d:79:e3:6b:dc:1a:
f0:cf:1a:0f:cc:32:d7:af:67:26:de:08:9a:79:3f:
2f:83:3d:23:2d:86:44:03:de:86:a7:c9:ec:6b:1f:
36:f4:0a:d2:3f:6b:76:ca:28:34:c1:c9:e4:95:1c:
79:4a:5b:4d:56:7c:d4:28:3a:1d:b8:38:bb:41:37:
fa:aa:7a:d0:8d:10:26:5e:d6:dd:4b:b2:90:b5:87:
7f:e9:20:6e:f7:59:bb:9c:4e:f0:d4:2d:06:cf:84:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:46:83:79:91:6C:D3:CD:D2:2D:FD:35:E3:5B:7F:F8:97:E8:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sG1Gg3mRbNPN0i39NeNbf_iX6Cg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
69:ae:33:2f:9f:f2:26:ff:b4:96:3e:40:ad:b8:23:78:03:cb:
05:eb:de:b4:01:e8:2a:b7:3e:1d:de:b8:c6:b8:60:ce:2f:3b:
f3:13:5f:54:5b:9a:0b:cc:c1:c6:ad:4b:a0:29:d8:d1:cb:e5:
02:d6:d9:13:d1:5d:37:d1:2b:cd:eb:c4:b4:94:9e:71:77:2b:
a6:dd:d5:4e:37:6c:9f:a8:b0:5c:f7:92:a2:72:cc:5f:b9:a3:
88:40:48:95:af:8c:2a:a2:a6:26:05:45:3d:8b:28:42:48:c8:
ad:7a:d5:0d:6f:10:ff:6f:14:0f:84:3d:2d:2e:70:52:1f:df:
10:80:b5:81:fc:97:8c:b4:5f:36:82:5b:c1:a8:a8:5c:01:a8:
24:11:70:f0:88:a8:dc:ef:20:7a:0d:24:2b:ff:82:d0:6b:55:
9c:5f:e5:db:a6:59:f7:a3:12:5b:f8:7e:61:e7:8b:ad:e9:f7:
0e:98:b7:d1:56:b7:f6:64:f7:55:a9:a5:52:0d:21:b7:4a:aa:
eb:6c:16:45:29:c0:1a:fc:e0:06:d1:f6:d3:55:7c:69:75:e4:
ac:00:f6:44:4b:f2:6a:a4:c9:1f:43:f4:cc:53:7f:0a:93:d7:
f6:5e:6e:e1:40:62:8e:93:68:25:e0:ee:8d:a8:28:f0:d7:08:
c5:9a:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org