Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vDROhZaYHsoSUop8liTYRIV6Jjk.roa
File: vDROhZaYHsoSUop8liTYRIV6Jjk.roa (raw, json)
Hash identifier: vTMPn9PDr2MpCweY7AsoRD0DPiPdy9xCvYhNrhBt4VQ=
Subject key identifier: BC:34:4E:85:96:98:1E:CA:12:52:8A:7C:96:24:D8:44:85:7A:26:39
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F31
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vDROhZaYHsoSUop8liTYRIV6Jjk.roa
Signing time: Fri 12 Apr 2024 20:22:51 +0000
ROA not before: Fri 12 Apr 2024 20:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16177 (0x3f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 20:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BC344E8596981ECA12528A7C9624D844857A2639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:f4:b2:7f:5d:cf:4c:ac:a3:c7:05:a5:59:
26:61:33:c3:c0:a6:29:37:07:92:29:70:eb:be:53:
01:16:ce:69:27:94:a2:43:bc:b8:08:99:60:3e:fc:
7b:50:87:3b:94:fc:8e:75:14:9e:30:5c:01:74:11:
0f:44:e1:42:87:06:02:1b:d9:22:91:61:5f:36:29:
2b:15:7a:5d:3a:fb:26:ca:6a:2d:0e:72:9c:20:4d:
46:c3:9a:d7:24:17:df:f6:9e:d0:56:3d:c1:4b:d5:
07:40:24:0a:b0:00:59:5b:d3:fe:95:e0:40:7f:08:
c5:65:44:28:c3:1a:01:6e:b7:49:c1:51:a4:b6:d5:
b4:45:59:be:66:b8:a3:0c:97:6d:b4:7d:95:ce:8a:
13:0c:a1:1f:d0:5a:e2:01:1b:52:62:8d:09:15:80:
4c:25:e6:62:a8:a0:d0:5b:f9:3d:dd:a2:c4:c4:aa:
b6:b5:93:95:91:06:4e:46:50:da:f7:c5:56:6c:2a:
f1:f4:d1:87:3e:b7:11:01:04:8d:1f:c7:30:58:fa:
f1:80:2d:3a:c7:81:2c:42:aa:de:56:66:85:46:ee:
64:1d:97:22:6f:99:95:b6:a9:21:87:12:6c:58:7a:
31:10:e2:4a:af:2e:b1:08:cb:15:33:f7:be:d8:ef:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:4E:85:96:98:1E:CA:12:52:8A:7C:96:24:D8:44:85:7A:26:39
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vDROhZaYHsoSUop8liTYRIV6Jjk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
45:45:82:aa:f3:81:6d:6f:d6:86:f7:fd:70:56:bf:63:d8:19:
d4:83:c2:37:86:10:0b:e2:51:e9:f9:b2:13:27:e5:00:dc:8b:
74:92:7d:38:e4:ec:f6:8f:e2:4b:13:95:75:40:ec:1c:e2:43:
f1:21:b6:da:2f:91:b3:c8:29:1d:4f:ba:f9:39:d6:1c:c5:38:
f0:a9:39:cc:7b:ea:cb:84:78:5b:e1:6a:2b:4d:56:48:de:18:
94:8d:e2:71:87:59:be:5b:b6:10:75:33:ca:0f:b4:87:6b:a0:
92:11:32:78:f0:c9:88:d2:9d:50:d9:01:e4:ee:cf:9a:ba:7a:
99:bc:a0:75:ec:95:c7:d4:ca:34:0e:87:c1:ea:dc:4d:58:32:
b6:6a:27:3e:a9:2b:15:c9:d5:a8:7e:6c:be:d9:ae:bd:5a:d0:
34:eb:81:32:e6:2b:92:29:b5:c3:96:7c:d2:a5:87:e6:0b:29:
13:2e:6f:ff:10:d3:5b:a8:d3:1c:93:37:38:f3:f5:5d:04:ca:
1e:d3:92:31:94:57:55:75:e4:64:3d:4f:61:6a:7c:22:81:9f:
87:ca:54:86:c6:de:5b:fd:bc:76:16:5f:90:18:d7:02:11:ec:
39:8a:75:cc:b7:b3:44:ce:13:fd:85:b6:fd:dd:f8:ae:06:8f:
0b:be:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org