Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/toCscDhsEdQdZJ11oZsqZBPXnQQ.roa
File: toCscDhsEdQdZJ11oZsqZBPXnQQ.roa (raw, json)
Hash identifier: XbYGWU9e5/hqAZB3yH/4EnPQLNGZICA1SqjRwVreueY=
Subject key identifier: B6:80:AC:70:38:6C:11:D4:1D:64:9D:75:A1:9B:2A:64:13:D7:9D:04
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CCD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/toCscDhsEdQdZJ11oZsqZBPXnQQ.roa
Signing time: Tue 30 Apr 2024 23:53:34 +0000
ROA not before: Tue 30 Apr 2024 23:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19661 (0x4ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 23:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B680AC70386C11D41D649D75A19B2A6413D79D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:d4:57:99:10:10:36:cf:e7:e2:52:5b:3c:
9c:3a:9b:77:44:be:74:ef:bd:be:cc:fb:98:78:4d:
56:1d:3a:9a:32:da:2d:d5:a6:b4:62:1f:d4:95:d6:
25:c0:ae:e5:e9:4a:58:71:22:95:39:3c:64:4c:11:
53:39:5a:c9:50:bd:18:62:cc:0d:b4:9c:ff:e5:f7:
f5:e1:2b:4f:82:c5:01:2b:0f:ec:ff:2d:ec:80:d4:
b9:0e:82:9b:75:ce:e8:db:9b:2f:32:fb:da:94:37:
52:d9:bb:15:fe:78:92:64:dd:10:0a:36:1b:ba:27:
82:c4:8c:4a:9c:c8:31:5a:5b:ee:70:58:b8:c8:cc:
2a:e9:48:5a:62:d0:69:95:ef:0d:72:40:34:f9:fc:
fa:64:e8:49:08:12:9d:7f:89:a1:3d:53:1f:e9:0c:
53:2b:3d:26:af:5c:db:9e:f5:2d:41:1b:1b:82:d3:
95:ba:ad:37:f5:64:d6:c4:08:16:42:1e:a4:b5:e8:
df:c2:cd:be:5c:a3:0a:b9:a3:4c:08:30:ad:0c:94:
b4:18:6d:38:2e:df:e7:19:d6:27:e4:1f:9c:50:c8:
d6:7f:37:9c:12:ce:ec:f3:29:85:e5:82:43:14:2c:
4a:08:82:e0:c7:71:6d:e4:e6:df:df:95:2a:6a:0e:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:AC:70:38:6C:11:D4:1D:64:9D:75:A1:9B:2A:64:13:D7:9D:04
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/toCscDhsEdQdZJ11oZsqZBPXnQQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
16:8e:1f:ad:b4:44:68:c5:02:7f:c7:d1:07:97:62:93:d0:32:
d1:75:90:ea:09:ad:e4:9f:a7:2f:3a:c0:40:8d:7e:04:21:25:
ea:5d:fb:5a:db:73:1b:a2:31:15:ad:66:8e:11:37:20:fa:81:
bd:8b:6b:cf:71:44:a6:cf:62:c3:fb:91:2c:22:16:d8:c4:4d:
c6:00:08:62:b0:7a:d0:98:65:91:1a:8c:66:1d:5a:34:4a:6f:
04:34:e3:e0:17:94:de:b8:b8:2d:ca:d1:b2:e1:90:5f:89:69:
c5:8b:d7:15:cd:17:62:02:00:1c:f1:20:41:10:92:c0:04:c7:
a2:4a:40:c9:60:9c:8f:d5:05:d2:c4:5f:e0:8a:2e:3e:1e:1b:
c5:58:09:0e:f2:94:16:9b:6f:f5:89:e5:a7:d7:24:61:19:54:
74:04:24:d0:43:72:79:ba:a1:90:ef:42:a1:91:1b:29:92:ee:
83:43:54:44:59:18:2b:61:e3:3f:54:44:60:0a:92:fa:0e:cf:
a7:68:c0:cd:8a:70:ba:aa:52:74:10:e8:19:7d:90:8e:31:fe:
27:9c:0c:e9:f0:0f:38:19:64:23:9b:7c:22:17:55:e6:cf:7c:
f6:03:ba:e4:b8:11:2b:3a:e0:9e:34:b0:79:cb:a8:23:41:b3:
5b:47:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org