Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u390iTandUqP9C068IenZtS5a_A.roa
File: u390iTandUqP9C068IenZtS5a_A.roa (raw, json)
Hash identifier: ag44hwwnWl3TTUtwUpb9iepJpN/CRQNoB/Phn81bpVc=
Subject key identifier: BB:7F:74:89:36:A7:75:4A:8F:F4:2D:3A:F0:87:A7:66:D4:B9:6B:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4009
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u390iTandUqP9C068IenZtS5a_A.roa
Signing time: Sat 13 Apr 2024 23:22:53 +0000
ROA not before: Sat 13 Apr 2024 23:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16393 (0x4009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 23:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB7F748936A7754A8FF42D3AF087A766D4B96BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:54:0a:3d:86:c1:23:0a:66:73:01:ac:56:
a1:d7:c7:6d:31:7b:81:b6:ef:d0:7a:67:96:ea:d5:
74:0e:7e:2a:91:1f:58:3b:67:ae:83:e8:bf:af:1d:
e3:ba:18:e3:59:92:a3:e9:32:27:69:68:d5:60:cc:
fe:e2:bd:f8:77:81:a7:fd:fd:ee:b7:f5:fa:d0:6a:
e9:8b:67:e1:8b:3d:41:75:c5:77:82:75:61:d9:42:
5b:e7:38:23:5e:fe:62:84:b4:b9:3e:4b:7c:ad:59:
73:04:58:bb:4e:8d:da:eb:ea:74:3b:af:39:5d:4b:
27:37:f1:c7:f1:11:44:6b:a4:e9:59:aa:0b:c1:38:
10:dc:9f:08:f9:84:3e:4f:ab:52:2c:09:5d:74:e3:
17:e5:4d:6f:74:dd:65:2f:a2:84:d9:c0:5c:4e:98:
1f:cd:54:61:37:b6:ac:0d:71:41:d0:b7:2f:5b:e4:
a5:79:9d:b1:4c:89:8f:48:ba:a8:74:59:bd:ed:d0:
e2:8e:b1:a7:f6:82:8b:38:d0:ae:d5:b6:f6:7a:ac:
c1:ec:4c:49:e2:09:23:87:2f:ff:2d:9a:62:b2:fc:
2a:fe:e4:e6:ee:66:aa:34:0d:19:11:7e:1f:b7:d4:
78:e0:46:db:be:ba:85:5e:9f:33:46:9f:9d:39:01:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:74:89:36:A7:75:4A:8F:F4:2D:3A:F0:87:A7:66:D4:B9:6B:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u390iTandUqP9C068IenZtS5a_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
17:21:17:15:0e:53:dc:36:10:eb:70:9f:54:2d:9f:b0:27:21:
b6:67:94:a3:96:4c:c1:92:9c:7b:72:f1:9f:43:92:ce:14:3f:
7e:ee:bc:06:24:d8:2a:04:ba:89:d2:c6:d9:63:9a:f1:19:d1:
b0:17:02:85:3c:c3:b5:7f:f3:48:31:04:c5:83:f9:49:a8:c9:
21:00:ee:b1:27:22:66:b8:7d:78:b8:71:cc:0a:3e:af:6f:79:
84:cd:61:cb:da:29:eb:14:f6:1e:51:49:7e:cf:2f:b6:59:b1:
4b:c6:a2:b8:09:d6:cd:0f:d2:ba:a7:c5:18:bd:da:f5:60:6d:
07:bb:f6:ed:40:20:33:69:39:b4:d4:98:3d:b5:94:aa:05:8e:
e2:54:65:83:af:04:eb:33:3e:66:a2:1e:a2:2e:2d:f2:fd:0f:
e3:12:bf:0c:55:a2:92:4a:03:c0:07:63:84:8e:82:b0:8f:b8:
b3:dd:65:e8:40:08:32:1b:f2:02:28:8b:59:fa:34:5d:c0:2e:
a2:28:5c:65:dd:ae:2d:cb:91:40:0f:a7:3a:dc:8a:b1:7f:96:
62:4b:68:03:b4:7f:59:cf:37:9f:77:63:77:28:af:a2:90:e1:
c1:5c:b0:3a:35:84:9f:7d:f6:52:c1:97:2a:19:d4:ac:9e:76:
9a:2e:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org