Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uSfLxzOqyfBVG94RpME5g7XBtW8.roa
File: uSfLxzOqyfBVG94RpME5g7XBtW8.roa (raw, json)
Hash identifier: MK5NqOM8KdWqfTjmhp4NKFrAcu2OvezG8oInxD9z6wE=
Subject key identifier: B9:27:CB:C7:33:AA:C9:F0:55:1B:DE:11:A4:C1:39:83:B5:C1:B5:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3781
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uSfLxzOqyfBVG94RpME5g7XBtW8.roa
Signing time: Tue 02 Apr 2024 14:22:14 +0000
ROA not before: Tue 02 Apr 2024 14:22:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14209 (0x3781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 14:22:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B927CBC733AAC9F0551BDE11A4C13983B5C1B56F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:af:32:b0:f2:50:09:72:b0:3a:60:2a:22:
41:02:00:f8:84:60:e1:57:56:59:c5:92:76:7c:a3:
c2:dd:1b:a9:fa:42:da:f3:3c:18:ac:d0:61:e9:77:
26:49:dc:93:6e:e0:b9:ee:a4:2b:a3:ee:13:1d:5e:
71:79:39:1e:0f:51:7b:d8:11:cb:d2:22:05:37:b0:
a0:74:c2:48:4e:49:a0:89:99:81:9a:f0:83:50:e4:
4a:8d:09:cc:43:a0:42:36:d9:2a:ef:81:40:70:20:
74:5b:aa:c0:78:24:f5:dd:46:f7:1b:ec:73:61:ce:
65:bc:08:d7:28:a5:79:b6:53:a3:73:37:56:76:5a:
ab:5d:43:26:dd:cb:c6:3b:f8:14:ff:78:ea:1a:1b:
6d:bb:14:86:11:3f:30:27:77:af:fd:93:c4:db:95:
66:03:a4:fb:5d:8e:8d:f8:1c:47:3b:ce:9b:02:bc:
74:45:e9:94:da:ef:51:e9:d2:88:28:5c:f7:7a:2a:
84:97:cb:6b:7a:c5:94:92:5b:de:7f:14:98:c3:63:
1d:28:7e:49:19:a1:eb:bd:1f:b3:e2:7d:38:c8:d1:
bd:15:4a:9e:39:cb:ff:f5:51:10:dd:d4:53:45:18:
6f:34:f6:ea:57:04:83:46:c3:2c:77:2b:58:0e:66:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:27:CB:C7:33:AA:C9:F0:55:1B:DE:11:A4:C1:39:83:B5:C1:B5:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uSfLxzOqyfBVG94RpME5g7XBtW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
82:8d:1a:36:ca:07:2d:40:18:c2:a7:31:58:dd:50:7b:78:c5:
ae:90:07:9b:92:dc:8b:61:5f:da:3c:61:88:6c:42:b7:2c:d1:
c8:27:1c:0c:30:88:bc:12:7a:7c:65:b0:ad:33:b6:d1:b8:9e:
06:e0:d9:02:d6:b4:a6:25:24:75:71:48:46:aa:b3:b4:e1:8b:
7a:64:66:55:d7:81:93:c9:9d:1d:e5:12:8f:d1:8a:57:d0:41:
ee:6f:04:77:1d:89:a4:c7:1c:ed:e5:d4:0f:97:c3:30:03:0a:
83:2f:7c:61:a3:ca:63:af:29:0a:ef:08:e3:1e:eb:56:36:48:
6e:23:cf:cf:6f:de:50:dc:d6:c0:7d:f1:76:a6:b6:10:d8:11:
ba:03:6a:5c:db:ac:ae:de:3d:98:ed:49:e4:62:4a:d1:9d:30:
c8:6a:41:ff:c5:33:dd:e0:95:24:32:d0:7d:40:f6:4a:25:f8:
46:18:8d:fa:c3:d9:d9:32:df:df:7b:5f:7b:e1:ce:66:fe:a5:
7c:1c:a6:1c:37:ac:cc:00:39:af:95:bd:c7:b7:cb:13:da:71:
56:07:ac:69:38:8f:d1:2c:fe:5d:05:f6:68:2f:c5:b8:32:77:
e3:84:62:05:ac:0f:df:07:38:4d:e7:77:9c:de:3b:3a:a2:32:
78:9b:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org