Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tp5-2o5E-MLMedWZXQjx_EHnUqc.roa
File: tp5-2o5E-MLMedWZXQjx_EHnUqc.roa (raw, json)
Hash identifier: +K9CCIeLA82bm3OWjRnHImnHFdeOCX7ABkVLMI4zFZM=
Subject key identifier: B6:9E:7E:DA:8E:44:F8:C2:CC:79:D5:99:5D:08:F1:FC:41:E7:52:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CF1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tp5-2o5E-MLMedWZXQjx_EHnUqc.roa
Signing time: Tue 09 Apr 2024 20:22:39 +0000
ROA not before: Tue 09 Apr 2024 20:22:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15601 (0x3cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 20:22:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B69E7EDA8E44F8C2CC79D5995D08F1FC41E752A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:00:f3:4a:a2:6f:b2:8e:e0:ef:fe:bb:94:
1b:12:51:ba:77:91:dc:0c:b0:62:4f:0a:01:f4:75:
7d:ae:3c:56:93:de:9c:17:8b:bd:6c:e1:87:10:63:
57:2b:dd:1d:1b:b9:86:5f:db:2f:69:91:cd:d0:2c:
3f:96:25:02:57:db:c8:cc:d9:90:6a:cd:0c:a5:1e:
1b:ad:0f:31:ab:bb:08:c8:81:d6:94:e6:a9:39:b0:
bd:19:fc:df:8e:55:7b:3a:64:97:48:ac:6d:37:95:
5d:52:84:12:0e:4d:3c:84:d0:38:08:3e:65:af:7f:
90:11:d5:e7:bb:10:67:8e:1c:7a:eb:86:8d:59:f0:
3d:b6:6f:05:50:f1:ce:e5:a4:d1:df:87:b4:a9:37:
f3:54:f6:8a:ba:81:54:65:25:50:1a:b4:f2:6c:9e:
53:c7:34:d7:ea:97:86:9c:78:1d:a8:b5:df:af:03:
a9:ad:f6:e2:23:c4:25:d9:a4:1a:29:3b:ed:9a:45:
62:e2:67:4f:47:fb:c1:6c:f8:09:bc:a4:b5:44:4f:
81:f9:6f:6f:bf:44:18:6a:25:a4:6c:82:e7:fc:7c:
e9:4a:23:b9:bd:7d:35:40:fc:c0:36:a6:3a:e7:0e:
6c:53:60:49:59:0a:8d:d2:b3:2d:e6:f3:84:59:fc:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:7E:DA:8E:44:F8:C2:CC:79:D5:99:5D:08:F1:FC:41:E7:52:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tp5-2o5E-MLMedWZXQjx_EHnUqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
14:f1:91:0c:96:5b:f7:03:b8:12:b5:a4:d4:f1:ab:71:aa:09:
6e:ad:01:6e:c2:1d:c3:ad:83:0e:18:7c:70:6b:f0:5f:64:8d:
cd:0c:0c:d2:dc:c1:44:ae:09:f9:bf:47:bd:70:a2:ea:a7:18:
a5:65:89:03:eb:e0:ea:cc:43:ae:11:1d:a4:13:1b:4a:97:e5:
d1:49:c0:94:bb:98:0e:49:ab:92:8f:4d:1e:35:75:56:42:58:
c1:13:a3:ec:c7:8a:ae:4c:58:6e:bb:22:27:17:de:70:92:50:
a6:92:8b:83:a5:45:11:db:bc:83:41:bd:e5:ea:c3:b6:71:be:
56:3e:90:ce:28:2c:f6:cc:e0:f9:e2:42:b8:4e:bc:7b:c7:72:
4e:a2:4e:06:a6:8a:b1:35:b6:4f:60:7f:b8:c1:f8:e9:c1:37:
9b:d5:b2:c6:c8:64:fb:d0:19:20:75:37:f2:fb:ee:7f:5f:e7:
88:8b:3b:22:8d:f0:04:87:9e:5c:c6:3f:51:e6:6c:30:50:33:
96:f8:53:b3:e0:35:17:d6:0d:09:f8:82:ad:de:79:28:07:d3:
b1:e7:0a:4f:f3:c3:cf:c8:ee:0a:b4:cb:a8:86:96:fd:af:17:
05:cb:42:df:7f:58:dc:26:6f:37:28:0c:3f:f4:2a:72:11:30:
d8:76:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org