Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/szozQQoT_R8jdbsOWg_IUSS7O6o.roa
File: szozQQoT_R8jdbsOWg_IUSS7O6o.roa (raw, json)
Hash identifier: SgLF+AiTb1bszNLOtUcwdtz7vb7Wx1VS8y1L4xZBWI4=
Subject key identifier: B3:3A:33:41:0A:13:FD:1F:23:75:BB:0E:5A:0F:C8:51:24:BB:3B:AA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4329
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/szozQQoT_R8jdbsOWg_IUSS7O6o.roa
Signing time: Thu 18 Apr 2024 03:22:58 +0000
ROA not before: Thu 18 Apr 2024 03:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17193 (0x4329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 03:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B33A33410A13FD1F2375BB0E5A0FC85124BB3BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:9d:f7:97:00:ce:3d:57:6a:5d:8c:f2:d3:
f9:18:82:06:10:14:79:cd:e7:81:a9:33:e0:0d:69:
6b:7e:78:ab:91:fe:4e:f0:b5:83:0d:6b:7d:ee:2e:
ff:81:be:87:35:56:1b:33:de:a3:12:f6:01:1f:53:
ad:92:46:cb:81:44:e1:55:bf:26:60:11:f9:73:fb:
62:a9:66:72:a0:86:e6:2a:31:70:16:db:fd:69:61:
18:b1:8d:a2:3e:78:d7:b9:82:af:77:18:c9:f3:59:
d2:99:80:42:46:4b:9e:8d:87:6a:16:2d:d0:10:89:
7b:7e:d1:b3:b7:60:03:68:5f:5c:82:e1:9a:25:ba:
d7:85:47:98:03:17:90:42:fa:c3:91:e3:8f:b1:fb:
cf:83:61:85:a8:c9:fe:8b:17:9e:6c:87:3d:99:5c:
c3:c9:05:80:66:7e:34:8d:d4:3e:cc:41:29:af:f1:
d7:e4:48:18:95:0b:21:c8:69:d7:5a:5c:6e:c6:8c:
af:de:36:f2:cc:ff:17:eb:2b:42:47:56:a7:d0:6d:
74:b0:ed:2c:d6:5f:86:b8:05:4d:05:fb:a4:19:64:
7c:4b:d8:06:b7:a4:5c:ed:d8:24:97:73:83:7f:7d:
6c:13:00:b5:1c:fc:d2:35:a4:fb:c4:99:e0:6f:6a:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3A:33:41:0A:13:FD:1F:23:75:BB:0E:5A:0F:C8:51:24:BB:3B:AA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/szozQQoT_R8jdbsOWg_IUSS7O6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
87:2a:bc:19:d9:de:0f:78:35:11:39:e0:b9:9d:07:8c:48:f4:
f6:8d:ed:65:1e:a5:f2:48:b7:4a:19:06:65:2b:16:96:f1:93:
a3:11:b4:ae:4e:8c:bd:c6:59:66:7b:14:b2:14:1a:fc:24:09:
8f:bd:24:ab:cf:27:0d:50:8c:c7:27:eb:bc:fa:df:50:34:6e:
f5:5b:0b:c8:db:0d:d7:9e:c9:a9:a3:83:cc:71:96:24:9d:3c:
9a:16:59:f8:9c:89:e5:57:d6:1e:3f:9a:a0:cf:0e:78:ae:eb:
50:6d:6d:37:97:d0:4c:88:2e:8f:24:0d:ed:0f:ec:d2:af:7e:
5f:b9:1e:68:8d:76:3d:ff:4c:d6:0a:7c:6b:40:ed:cc:63:62:
a4:78:3c:fd:83:2b:01:0d:fe:97:00:bd:88:c6:15:1b:68:17:
84:84:ff:dd:af:ee:b6:56:32:49:84:ba:a8:76:ae:9d:90:74:
23:56:a6:79:7e:a4:6a:fe:4a:13:47:39:4f:e4:b1:76:46:a2:
90:a2:03:3f:46:04:50:ca:a7:e9:ab:45:d2:14:70:b2:02:4b:
00:b7:6c:da:bc:60:9b:5c:a0:d7:3d:4d:09:62:16:8d:2f:c1:
19:ae:af:58:de:d3:27:95:ab:98:8e:21:b0:b2:ad:e5:ee:25:
94:25:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org