Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uNVSSfXQUuSADxRJyRp9gsX5FaA.roa
File: uNVSSfXQUuSADxRJyRp9gsX5FaA.roa (raw, json)
Hash identifier: bk8TQ+dWDlJSbEkGdOeqe8wmkHIxe/REZ3ywTMVgZpY=
Subject key identifier: B8:D5:52:49:F5:D0:52:E4:80:0F:14:49:C9:1A:7D:82:C5:F9:15:A0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44A9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uNVSSfXQUuSADxRJyRp9gsX5FaA.roa
Signing time: Sat 20 Apr 2024 03:23:04 +0000
ROA not before: Sat 20 Apr 2024 03:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17577 (0x44a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 03:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B8D55249F5D052E4800F1449C91A7D82C5F915A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:4b:e6:9b:69:95:e9:d4:e4:9f:96:06:dc:
f2:53:d9:1a:9d:c6:7e:78:0c:37:01:7f:41:3e:d3:
97:df:3d:fd:66:61:ec:40:3c:df:af:39:07:d3:c2:
74:a0:cd:f6:ca:ad:2e:2e:58:b1:49:06:8e:3f:d0:
4a:66:ee:c9:1c:79:56:ae:33:df:8a:0f:bd:11:d0:
12:87:7a:70:e3:e4:39:97:b4:ff:fd:bf:78:8c:45:
b3:d2:a2:0d:76:f5:9d:69:07:e7:3d:c3:77:18:78:
51:22:16:b9:e2:5e:e4:97:a2:9c:f5:51:e1:07:fb:
d9:3e:58:a9:8a:5d:cd:9f:18:4a:ef:a9:7e:fc:f9:
70:8c:f3:f6:4d:fe:55:42:e1:60:02:3e:cc:8a:a8:
d6:88:c0:97:81:0c:fc:63:e1:24:16:90:54:ec:37:
07:02:da:64:bd:94:77:04:71:ea:6a:86:b3:79:9d:
9f:98:c9:fd:3d:95:6c:dd:71:ad:00:21:2e:44:0f:
ab:f6:33:e6:70:18:95:a3:dc:28:85:89:25:d0:38:
0a:78:1a:6b:78:2b:3f:25:98:5d:a1:58:b0:91:85:
89:36:25:9d:50:b4:1e:b5:c8:dc:d0:5a:e9:33:7b:
f2:3e:8c:c7:63:79:6e:4c:0e:06:07:5a:fb:c2:07:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:52:49:F5:D0:52:E4:80:0F:14:49:C9:1A:7D:82:C5:F9:15:A0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uNVSSfXQUuSADxRJyRp9gsX5FaA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
11:91:39:9e:06:30:b9:47:ce:47:1f:8f:a4:54:dd:85:94:5f:
39:0a:94:c9:8c:65:5c:a9:77:ea:8c:5e:78:98:8e:e2:a9:ff:
89:86:29:4d:66:37:6b:66:af:e1:21:d4:ac:1a:2b:bd:71:ec:
18:5d:42:fc:86:98:d2:69:0f:c8:4e:99:34:dd:b6:0b:42:6c:
d0:f0:5f:ff:5a:64:37:9f:b8:a8:7a:91:da:e0:28:0f:f9:8a:
c9:66:2f:fd:92:c0:fe:45:f9:bc:4f:18:55:3b:7a:59:60:4b:
a5:6d:95:8e:9b:a5:fe:6c:b2:ba:dc:52:8b:2a:c9:e0:d7:6a:
8e:4b:37:38:f2:f1:74:fb:23:b4:d3:7f:87:00:b7:f4:52:6e:
a5:67:5a:52:52:a3:51:1d:af:3a:7a:c8:0e:3c:b0:34:e2:ac:
76:31:8e:c3:45:af:b8:78:f5:cd:57:e7:f4:8d:07:ad:6e:75:
e0:59:8f:85:47:82:09:d7:94:4b:1f:86:1f:f5:27:2a:27:e6:
31:17:e0:bd:ef:13:36:33:b4:f7:fd:b4:a9:17:46:87:f6:98:
62:0f:55:29:70:91:5d:b9:49:f1:86:3a:9c:dc:fc:b9:40:a4:
c0:6b:e8:6f:d9:ac:93:9d:e5:ce:03:26:16:9b:dc:c4:99:6f:
41:da:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org