Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sIjFtzTx9ywyOflhVd02s_YSwkI.roa
File: sIjFtzTx9ywyOflhVd02s_YSwkI.roa (raw, json)
Hash identifier: RUCs3B0i5EnSntJSQZ46eGocOrD5ScKST/WO2+Wv66c=
Subject key identifier: B0:88:C5:B7:34:F1:F7:2C:32:39:F9:61:55:DD:36:B3:F6:12:C2:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52D9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sIjFtzTx9ywyOflhVd02s_YSwkI.roa
Signing time: Thu 09 May 2024 01:23:56 +0000
ROA not before: Thu 09 May 2024 01:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21209 (0x52d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 01:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B088C5B734F1F72C3239F96155DD36B3F612C242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:fd:7c:40:8b:bc:dd:80:8e:81:78:0c:0c:
56:00:3e:8c:28:37:75:c3:d5:fd:4a:f8:cb:c6:77:
73:89:96:d9:0c:70:1a:f6:ff:82:30:30:32:0f:35:
9f:41:a6:99:3d:3f:39:50:4f:38:76:06:41:c0:91:
a2:1b:ed:65:89:e4:eb:f0:36:54:80:21:32:d6:de:
24:fc:35:13:84:bf:a4:e7:55:fd:4b:69:50:e2:89:
1a:09:ae:4f:5e:2a:29:7d:01:8f:70:00:ba:90:e3:
3d:97:40:3b:13:71:46:30:47:03:ce:d8:4e:f8:64:
6b:aa:ad:ed:c8:19:2c:a4:6f:ba:ac:71:16:c1:22:
69:75:d9:d0:2b:4b:d3:8d:e8:02:e9:8d:67:d2:f3:
1c:6f:91:37:0a:81:5e:2e:fb:86:ce:60:34:47:9f:
b3:a2:99:f5:bf:cb:0c:e7:d1:e4:2e:30:f8:ba:7e:
88:13:da:72:50:f0:69:c8:05:1b:e0:cb:a0:6c:0d:
80:80:0a:cc:25:fe:5a:b8:85:70:fe:99:bb:d9:cb:
9e:92:4e:50:0e:68:3a:79:2c:56:dc:25:29:81:c6:
20:0d:6d:b2:2a:8a:d6:1f:9b:d9:86:f5:1e:f7:3f:
66:4f:dd:48:01:d1:84:10:a2:9c:4a:43:dc:e3:b4:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:C5:B7:34:F1:F7:2C:32:39:F9:61:55:DD:36:B3:F6:12:C2:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sIjFtzTx9ywyOflhVd02s_YSwkI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
91:dc:14:0d:73:10:da:c8:50:29:c6:c0:61:0e:e6:65:41:ab:
9a:4d:38:79:03:52:1f:98:d8:5a:ac:da:5f:e6:4b:91:06:ff:
97:a7:ba:22:f7:07:98:26:f3:98:26:ab:0f:91:11:58:ee:32:
2b:59:fb:b3:99:2e:09:13:55:69:37:d5:f8:d9:f6:ab:68:93:
68:c9:2e:3f:af:2c:19:1b:bf:0c:c1:f9:11:8e:79:6c:0d:55:
9a:41:e7:8f:c7:10:7e:fb:e7:58:78:6f:54:73:4d:54:b4:2a:
81:54:48:46:b9:d1:36:62:eb:0c:97:90:93:b7:77:87:59:f3:
f1:bd:32:6c:56:f0:ed:1e:8e:fe:52:d4:58:60:14:b8:8f:91:
f4:57:4f:7e:24:0c:02:b1:6c:14:7a:c3:61:40:53:01:cb:05:
d8:f0:e7:95:d7:d7:34:5c:b9:ff:20:1b:82:52:b6:4e:ab:80:
01:83:f4:82:60:22:ba:11:67:b9:53:93:94:0c:57:62:d7:3f:
50:16:49:33:e9:d7:0b:24:73:95:70:3c:3b:07:36:f6:ea:dd:
c2:3e:57:97:63:4f:37:a1:1b:6d:68:ff:52:be:70:93:5b:de:
c1:84:5b:d1:39:9f:d1:09:e7:86:92:42:47:b7:69:37:13:c5:
a8:ce:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org