Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uJ06rcS5Uf1NkfSets7GNOnHORI.roa
File: uJ06rcS5Uf1NkfSets7GNOnHORI.roa (raw, json)
Hash identifier: n8k2pNsiMv9xRXOqfASquuYD/oCvvpNoj9JAalSTlYY=
Subject key identifier: B8:9D:3A:AD:C4:B9:51:FD:4D:91:F4:9E:B6:CE:C6:34:E9:C7:39:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A5D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uJ06rcS5Uf1NkfSets7GNOnHORI.roa
Signing time: Sat 06 Apr 2024 09:52:28 +0000
ROA not before: Sat 06 Apr 2024 09:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14941 (0x3a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 09:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B89D3AADC4B951FD4D91F49EB6CEC634E9C73912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:63:8c:f5:c2:64:7f:c8:14:c4:59:75:b1:
4c:dd:19:70:38:11:58:e2:6b:c0:0d:c0:7d:27:16:
08:41:1c:3f:ae:15:9e:c5:4b:0f:83:9f:56:7f:79:
f0:f2:6a:69:ac:8a:e3:ea:65:0f:bf:49:59:7b:7e:
2d:8e:79:4a:a7:54:80:2e:dd:15:e3:0e:ef:c4:1f:
bf:6e:b6:c9:00:4f:55:7d:6b:d7:35:59:00:f0:0e:
d5:7e:ad:81:d7:e0:76:6e:a8:3e:9a:6e:a7:58:49:
29:6b:89:52:ee:7e:ac:b2:fa:29:9e:b6:b4:f4:a8:
d5:02:1e:d3:97:ab:c4:23:eb:b7:c1:08:ac:fc:7d:
83:39:6b:83:51:a9:88:35:41:2b:3a:51:65:6d:ab:
bb:ce:4a:de:14:5b:1e:2b:a0:84:d9:b3:03:81:82:
89:7d:63:dd:b1:df:95:25:1b:2d:08:90:01:d7:62:
c1:42:c8:9e:80:61:90:2a:16:7c:f9:36:eb:45:40:
af:95:70:a1:94:79:40:3e:56:73:ff:54:10:83:ff:
54:1a:8d:95:3f:10:33:a4:40:c6:7e:b1:59:61:0d:
3c:03:23:2a:4b:b7:66:31:f4:af:1f:15:08:47:eb:
85:7b:c0:46:94:a4:82:cf:f7:17:ff:58:4f:5b:b0:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9D:3A:AD:C4:B9:51:FD:4D:91:F4:9E:B6:CE:C6:34:E9:C7:39:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uJ06rcS5Uf1NkfSets7GNOnHORI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:c9:49:72:1f:c8:b0:ac:58:b4:32:d7:31:f4:40:43:32:bb:
ea:52:f3:2f:58:49:f9:ee:08:11:7a:47:d8:d0:a8:0a:5e:24:
a0:60:4c:0d:90:c0:c3:21:4d:bf:0e:ee:3f:20:f7:44:c7:9b:
70:96:59:8a:2f:3b:50:09:59:4b:82:65:e6:90:5b:d6:74:05:
54:de:cd:26:f2:c1:50:cd:8b:f7:95:cc:02:d7:1a:4b:48:b7:
ad:b2:17:2e:db:cc:38:ab:2d:0a:88:ab:6e:75:17:3c:29:a6:
9c:e7:9a:ea:f8:33:c4:da:13:50:43:03:d6:76:26:e1:b9:ee:
3b:7a:51:9c:44:c5:1f:e7:68:62:8c:b1:7e:0d:96:c3:ec:a0:
2e:64:ec:cf:db:ff:f6:f4:fb:d2:69:53:9a:3f:56:be:16:9f:
ae:ca:82:df:78:2f:f0:07:0a:a5:5f:47:31:ce:e9:5f:8b:09:
f7:a4:b5:f3:89:e2:12:21:78:f7:07:96:bf:04:c7:8a:9e:88:
33:75:fb:1e:7e:d1:3f:ab:29:85:df:f9:21:3a:a2:7d:4c:36:
20:d4:e4:f3:b2:4b:ec:7c:b2:34:a3:cf:22:fd:28:06:bf:22:
d6:c2:d8:68:35:fe:99:59:e4:7c:2a:48:90:76:51:27:1b:87:
3d:d4:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org