Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tVK77CJo5dqqnsR4QNfniXGy8rA.roa
File: tVK77CJo5dqqnsR4QNfniXGy8rA.roa (raw, json)
Hash identifier: hiCk8j33neJJfi2PC+QW1L0ipBywn1s4vElA7Q9A1+I=
Subject key identifier: B5:52:BB:EC:22:68:E5:DA:AA:9E:C4:78:40:D7:E7:89:71:B2:F2:B0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tVK77CJo5dqqnsR4QNfniXGy8rA.roa
Signing time: Wed 24 Apr 2024 10:23:13 +0000
ROA not before: Wed 24 Apr 2024 10:23:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18401 (0x47e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 10:23:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B552BBEC2268E5DAAA9EC47840D7E78971B2F2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:77:d3:f7:43:57:8d:a7:40:89:85:9a:98:
a3:b9:a9:b4:bf:be:0f:21:02:b1:04:e8:24:50:2f:
45:2b:17:28:b6:04:da:b6:3c:5b:46:a8:c6:06:23:
9f:ec:a0:1e:a4:58:5e:18:e1:b7:3b:fb:ce:37:38:
ba:7e:10:c0:0e:ae:15:9f:5c:27:87:1a:de:c4:da:
20:27:a4:60:d8:6d:87:96:af:5a:79:6c:83:bd:9d:
27:89:1c:6a:16:e9:3f:66:06:9f:08:4e:c2:40:af:
f5:6a:20:14:b8:78:cb:3a:d7:24:22:05:60:95:0e:
ba:ab:04:75:2c:30:0e:53:1c:41:0d:21:69:a9:e9:
e5:8d:c0:37:f1:47:38:36:c4:ec:ce:0d:15:bd:bc:
c5:11:4f:17:c3:a0:f9:81:71:eb:99:42:a3:5e:d1:
77:2e:04:64:de:0d:8d:53:01:2b:ad:88:b6:11:75:
19:2d:fc:a0:9c:b0:21:65:eb:2d:1d:ca:b2:93:69:
70:47:00:bb:4e:51:8c:06:8a:4a:0e:84:5e:9f:e3:
79:32:18:aa:47:fc:3d:65:eb:eb:98:f4:c3:e4:a3:
f0:e3:23:4b:04:0d:0d:61:c3:9d:a3:dd:14:ba:0a:
0a:6f:44:eb:75:40:97:18:ab:fe:da:8b:13:ad:99:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:BB:EC:22:68:E5:DA:AA:9E:C4:78:40:D7:E7:89:71:B2:F2:B0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tVK77CJo5dqqnsR4QNfniXGy8rA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:c4:be:b5:a5:30:11:6a:be:8b:c8:33:f0:15:b3:c2:5a:76:
2c:a5:4a:c9:d1:39:fa:0d:14:a8:d0:47:77:17:49:67:a3:04:
9c:6b:bc:4b:1a:cd:af:f0:aa:9d:be:bb:97:8f:ab:3e:74:e4:
4d:dd:3f:59:db:9f:0c:7a:89:f6:a4:0d:68:65:eb:45:d8:16:
b9:a8:cc:4a:29:1a:24:a9:63:9d:15:3c:d0:18:3d:07:07:04:
ea:56:3e:17:e1:30:18:5b:3a:75:b2:92:91:ee:0b:ca:46:e4:
0c:2d:67:4f:81:e5:8c:bc:19:7a:49:3a:ab:25:e4:3c:cc:a1:
cc:41:f0:f6:42:81:59:c4:d4:6c:30:0a:76:77:9e:c0:d8:99:
2c:ab:41:04:bc:a3:2d:eb:37:8a:12:f4:f1:6d:af:b7:32:54:
b5:27:c7:a0:39:92:d2:19:11:ec:88:74:38:b8:20:6e:51:de:
61:2f:5e:dc:28:83:d9:0f:0f:01:74:c9:de:60:85:33:84:a4:
83:8a:1f:4c:5c:3c:19:d2:56:5f:54:c5:e9:9e:77:6b:20:22:
74:e9:bf:c9:ff:35:32:f4:ad:8e:3c:07:49:e7:ec:20:02:d3:
9c:09:82:48:3f:44:89:e0:21:a5:a9:5e:41:ac:ba:a8:30:d6:
c8:c3:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:44 2025 by rpki-client