Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v7B8pzZx84u7GBz8w4BOXJuLxqg.roa
File: v7B8pzZx84u7GBz8w4BOXJuLxqg.roa (raw, json)
Hash identifier: cm3o9KSM+0rU/7Wx5brH3Feboc3jh6tL/kK5jj4lm8o=
Subject key identifier: BF:B0:7C:A7:36:71:F3:8B:BB:18:1C:FC:C3:80:4E:5C:9B:8B:C6:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F95
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v7B8pzZx84u7GBz8w4BOXJuLxqg.roa
Signing time: Sat 04 May 2024 16:53:53 +0000
ROA not before: Sat 04 May 2024 16:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20373 (0x4f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 16:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BFB07CA73671F38BBB181CFCC3804E5C9B8BC6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:b6:e2:85:a5:d3:70:1d:8c:46:34:1f:ba:
d8:14:c6:9f:51:ca:ba:79:68:65:9a:e0:36:cd:a5:
39:da:c3:c5:ca:d2:ec:34:75:58:ae:f8:02:2b:6f:
d9:c3:79:0f:9d:c9:87:26:ff:45:b4:66:2e:70:f7:
b3:9d:8e:5c:9f:d5:5e:73:29:61:48:18:2f:3d:84:
dd:5f:cd:a9:4a:97:68:b2:00:9b:ba:b0:ca:0d:b8:
36:e3:ad:32:fa:07:a8:ee:49:e2:a9:9a:f6:4c:8d:
5c:51:3a:a3:6e:39:85:0c:7f:c9:13:9b:ca:a5:1e:
71:e5:69:ff:db:65:c1:8d:01:09:a4:60:96:4f:f1:
f1:58:01:a6:28:a0:6a:d7:17:7a:9d:2f:11:a7:de:
b3:06:9c:dc:20:39:57:f5:7e:42:ff:5d:05:12:8c:
f7:03:8f:c9:b0:09:72:31:79:dc:96:b9:bb:15:a6:
6a:45:2a:c4:fe:40:02:4e:3f:f4:9b:88:f4:97:db:
c0:93:88:f3:9a:c8:7d:5d:3c:c7:34:4a:39:1b:bc:
cd:0e:ae:63:03:6c:1f:b1:34:70:95:4a:8c:7f:e8:
c7:2e:9c:c9:05:08:2c:8f:db:5e:47:67:56:f4:f2:
3f:de:1c:36:1a:68:7a:26:2c:87:72:a6:ab:07:98:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:7C:A7:36:71:F3:8B:BB:18:1C:FC:C3:80:4E:5C:9B:8B:C6:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v7B8pzZx84u7GBz8w4BOXJuLxqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
54:d2:48:b8:00:02:2e:cd:2d:83:52:d6:7b:93:b3:24:de:a2:
e6:1d:53:2c:86:e9:a8:39:26:ce:8f:c7:3a:21:cc:c2:d1:9f:
55:00:b2:5f:74:17:3d:38:ba:98:1a:4f:8b:a8:3d:01:b3:e4:
8f:0a:b3:27:8d:74:b1:9e:10:e5:98:c5:03:b4:87:32:d8:df:
16:34:41:f3:7c:76:24:54:8c:46:d0:65:35:c0:f6:04:39:91:
ff:de:1f:ef:8e:6e:b1:d4:49:3b:13:2f:e2:27:b3:b2:50:c8:
66:f2:49:39:55:eb:0d:60:28:5a:87:d5:b6:09:7c:7d:9e:9e:
32:0d:c6:25:ca:41:15:b0:a6:e7:60:b3:1b:9c:03:74:f4:04:
4e:e5:dd:8b:d5:6e:79:00:4d:7c:91:a7:d7:b2:dd:ef:41:40:
0a:f0:e6:28:9a:de:e5:77:14:e7:1a:01:c3:f7:49:3e:51:1a:
f1:6f:2f:44:36:c4:4b:34:c8:bb:e0:e6:bd:3f:36:61:f4:9c:
f4:8a:5d:4f:c3:99:f8:6d:73:5b:86:3a:bf:a5:bf:d0:fa:ca:
7e:21:10:75:38:f8:27:12:25:46:d6:17:79:e0:dc:4e:bb:d7:
b1:87:5d:0d:4a:0b:a6:78:5b:d3:a3:66:db:91:c8:bf:5c:8a:
7a:2e:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org