Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uRICu04B93w0PCXlGmBNujc8Oqg.roa
File: uRICu04B93w0PCXlGmBNujc8Oqg.roa (raw, json)
Hash identifier: S1ZFiFqsJLvb0mvt+b4FeyiqsACugdifTolCr/qMC7U=
Subject key identifier: B9:12:02:BB:4E:01:F7:7C:34:3C:25:E5:1A:60:4D:BA:37:3C:3A:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55DD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uRICu04B93w0PCXlGmBNujc8Oqg.roa
Signing time: Mon 13 May 2024 01:54:10 +0000
ROA not before: Mon 13 May 2024 01:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21981 (0x55dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 01:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B91202BB4E01F77C343C25E51A604DBA373C3AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:22:a2:0c:77:00:d4:ff:e0:89:fc:7e:c5:
e9:13:2d:23:56:da:95:8a:43:ca:90:1a:b1:7c:47:
8a:87:7f:b7:cc:2e:6f:51:32:ec:fc:f4:51:49:b4:
66:fd:d4:07:93:e4:49:c9:65:43:2c:c6:c8:0f:e0:
f9:54:15:1d:66:b5:e0:90:38:06:5b:62:19:38:3b:
f9:93:2a:c5:09:d1:13:9a:0d:1e:47:46:c0:16:e4:
a2:43:c9:04:c3:95:d1:e4:99:93:54:3e:72:53:9d:
86:f5:67:f1:8b:5d:17:43:1c:bb:c2:7c:3a:16:8c:
3d:9f:bd:c8:37:df:2e:ce:e6:44:26:53:77:c3:76:
cb:fe:db:12:b9:46:fd:d5:5b:69:8b:2b:46:74:24:
a5:a0:90:f0:4b:2a:70:d3:94:e2:1b:91:4d:5b:7f:
55:de:d0:fb:e3:67:10:f0:e8:0e:b2:c4:75:ec:86:
7a:87:0f:8c:72:9a:bc:22:b0:78:83:ba:b4:4a:7b:
3c:70:b5:76:da:16:e8:b0:87:49:db:8a:0b:f3:cd:
5f:39:b9:23:69:ae:02:a0:95:6d:31:ae:4a:c7:98:
22:04:0d:44:fe:ac:6e:ea:19:ac:c5:61:4d:d9:dd:
1b:94:78:2b:76:dc:93:e9:65:5b:25:e1:e2:44:1d:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:02:BB:4E:01:F7:7C:34:3C:25:E5:1A:60:4D:BA:37:3C:3A:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uRICu04B93w0PCXlGmBNujc8Oqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
93:11:62:44:a7:a0:ea:56:bf:40:6b:3a:5b:e9:a9:85:f6:d2:
6c:54:80:8f:23:a7:96:30:46:ef:ef:9d:ad:2a:f4:b7:72:e3:
cc:74:48:64:a4:2e:a0:cf:de:6d:7e:b2:49:bb:7e:db:45:99:
3a:41:a1:df:1c:57:a3:33:c3:dd:67:9a:09:ef:06:0e:21:5d:
25:9c:f6:df:39:b5:41:6f:5e:29:69:9d:6a:cf:82:30:14:11:
d8:e5:bf:1a:bf:9e:ea:ca:78:ca:06:b2:e2:9a:8d:8c:54:8c:
af:ed:42:5b:a5:29:9c:b9:8e:13:80:cd:c2:d9:e3:ee:45:aa:
83:90:75:41:97:8b:d1:f6:fe:3f:46:d4:cc:a3:f7:4d:99:12:
7d:39:f0:bd:21:55:9a:4b:21:60:39:a3:5e:b4:c2:91:86:d1:
5b:e9:7f:e6:b5:ad:06:cd:17:6b:3f:27:a6:66:45:33:55:60:
e9:5e:b9:76:dd:30:32:9a:b0:bb:dd:33:0c:ff:3f:a5:44:60:
8a:d1:0a:10:fd:4a:de:94:49:db:69:2e:45:98:c4:12:e3:c0:
8e:e3:5b:01:7c:fc:32:3f:06:c8:a7:62:c3:01:8f:04:c9:af:
e3:d7:44:13:5c:9b:87:02:47:04:57:8b:69:51:98:e7:67:0f:
da:4a:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:30 2025 by rpki-client