Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ7epU2kR4NaaeJSZ_8y-dDf-cA.roa
File: tJ7epU2kR4NaaeJSZ_8y-dDf-cA.roa (raw, json)
Hash identifier: dkHk46jS3FN0G2yvYwJ31NY/KJMADaIj5QOCE7j2rB0=
Subject key identifier: B4:9E:DE:A5:4D:A4:47:83:5A:69:E2:52:67:FF:32:F9:D0:DF:F9:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F3D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ7epU2kR4NaaeJSZ_8y-dDf-cA.roa
Signing time: Fri 12 Apr 2024 21:52:49 +0000
ROA not before: Fri 12 Apr 2024 21:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16189 (0x3f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 21:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B49EDEA54DA447835A69E25267FF32F9D0DFF9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:1e:e6:ca:3b:a1:10:6a:ed:30:10:a0:0d:
cb:a9:b5:04:6b:d0:a8:23:17:b1:31:ae:27:df:2f:
f9:9f:6d:7c:71:8b:aa:5f:59:e9:1c:26:23:75:32:
0b:21:4f:85:ec:78:43:ce:3e:c4:05:f1:a4:6e:fb:
31:41:d6:4c:6f:dd:46:48:12:51:0f:f6:78:54:b6:
80:36:63:e0:11:9e:c1:c7:cb:ec:0c:89:95:c6:dd:
d9:3b:ad:2c:03:82:c5:14:e0:17:b9:99:3d:b8:6f:
30:11:33:72:0c:c8:ac:50:7e:9a:da:66:62:26:43:
92:18:53:b5:f3:2e:71:8b:68:87:1e:d0:b5:52:51:
dc:05:a2:6a:a5:5a:ae:40:25:0d:63:ab:5e:42:16:
1e:a9:fe:67:a6:19:61:ea:00:b2:9e:28:a5:fd:2a:
8a:9b:4f:4a:3a:82:4a:97:82:d7:49:a3:59:38:1d:
27:37:f6:67:a7:46:e4:72:4a:04:c5:d0:d2:06:ac:
ca:d4:80:6a:cf:5b:01:40:96:ec:24:29:8f:c0:26:
8e:e9:aa:dd:0a:b5:1f:21:41:05:be:b6:22:c4:f0:
15:51:be:56:10:43:26:c8:62:a2:09:1d:4b:b3:90:
d1:06:96:f4:cd:76:de:36:7b:fb:37:22:f9:ea:4a:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:DE:A5:4D:A4:47:83:5A:69:E2:52:67:FF:32:F9:D0:DF:F9:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ7epU2kR4NaaeJSZ_8y-dDf-cA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:e1:19:27:84:c8:09:63:87:a6:a8:c2:ff:40:61:ab:ee:8e:
5c:4d:06:f1:ec:03:94:0c:9a:1c:58:60:0b:72:7c:ee:1c:59:
98:0d:78:ca:a2:8c:c3:af:7f:5b:a1:0c:ff:be:ea:0d:62:f0:
64:e8:b4:ff:75:7b:c3:3b:60:f2:34:52:95:97:e2:c7:52:76:
a9:4c:d2:dd:d8:1f:fc:dd:32:76:2b:e2:7d:f4:3e:00:9a:5b:
39:21:67:ed:c8:f6:21:36:21:62:77:64:76:d7:54:a7:db:78:
04:26:7b:8b:6c:76:7b:ed:ed:34:49:4f:86:eb:04:d5:d4:21:
07:63:54:a4:b5:50:dd:0c:ec:73:d6:82:53:91:12:1d:6b:e4:
f7:d6:4e:07:52:a2:75:b8:ee:01:93:32:b4:f2:8a:20:a7:4d:
95:ce:3a:97:d6:95:aa:e7:91:15:e3:b0:27:a6:c2:77:81:05:
a6:cd:a9:9c:28:af:df:1c:60:e8:e3:15:5a:b7:e1:ec:82:76:
c3:92:d0:83:53:ca:8b:36:56:cd:85:f9:b8:04:7e:1e:50:35:
d3:d8:af:95:ed:41:ce:8b:be:78:1f:61:f6:6b:14:d2:32:17:
55:ba:1b:6f:75:d9:3f:ca:2b:f5:cf:22:4e:04:5b:0f:30:57:
24:28:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:15 2024 by rpki-client on console-ams.rpki-client.org