Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vk7-Y7s7KsUTSEUUmRoTLe33VA8.roa
File: vk7-Y7s7KsUTSEUUmRoTLe33VA8.roa (raw, json)
Hash identifier: L62xweYNu35h1x0QlsUmNgzDKSwIIj9gMLnzI57jxZA=
Subject key identifier: BE:4E:FE:63:BB:3B:2A:C5:13:48:45:14:99:1A:13:2D:ED:F7:54:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F71
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vk7-Y7s7KsUTSEUUmRoTLe33VA8.roa
Signing time: Sat 04 May 2024 12:23:52 +0000
ROA not before: Sat 04 May 2024 12:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20337 (0x4f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 12:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BE4EFE63BB3B2AC513484514991A132DEDF7540F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:84:1b:95:26:bc:7b:b3:d7:01:84:7e:80:
6c:1a:55:03:ba:e2:d5:6f:81:54:b8:60:00:90:1e:
80:ea:27:80:b7:e0:58:c8:c2:ac:83:17:5d:6f:73:
bd:ed:3d:87:a9:73:46:89:f3:84:be:c9:e7:dd:11:
60:59:c6:f9:a1:80:ea:1d:80:cd:83:21:0a:f2:0c:
e4:df:41:17:5a:e9:fc:46:b8:de:55:49:fc:fd:7e:
5e:19:0d:e1:3f:b5:bc:65:9a:a9:4c:4e:83:7b:84:
a8:65:2f:c2:25:9d:0c:0a:bd:5d:dc:9a:69:72:82:
01:f8:05:7b:b8:bd:ad:55:6f:51:7a:ca:f0:63:22:
3e:78:b9:e3:a4:46:50:f1:8e:8e:c6:9a:f8:5e:1a:
59:dc:81:8a:dc:2a:aa:78:d7:27:dc:5d:e9:43:d1:
74:8c:c3:f2:3e:14:65:e8:17:fe:65:c1:c3:6e:59:
43:11:be:12:48:66:d0:77:4b:0e:cb:01:7c:cf:ce:
87:80:cd:e0:57:01:6e:80:06:55:ac:80:ea:a6:cc:
40:0c:4c:6b:13:d3:fc:34:dc:64:1b:6a:df:f7:b9:
b4:e9:69:79:0c:b2:7d:64:c6:1d:98:36:53:40:8b:
9c:08:6f:a0:27:81:5b:02:b1:39:03:a2:f3:29:a3:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:FE:63:BB:3B:2A:C5:13:48:45:14:99:1A:13:2D:ED:F7:54:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vk7-Y7s7KsUTSEUUmRoTLe33VA8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:90:8f:4f:59:7b:8d:25:24:95:cd:9f:30:0a:08:3b:d9:76:
8f:81:a9:1d:ab:b2:9e:db:ef:eb:08:9d:44:ab:b7:7c:29:1c:
10:61:ac:e5:12:14:52:24:ea:5a:e0:68:18:50:65:57:f6:06:
e9:f8:e4:a4:47:42:09:de:da:7a:a1:03:b3:88:51:81:ad:a8:
4c:bb:bc:07:bf:c3:d4:ca:85:68:2a:09:5c:7e:b0:7d:a2:9a:
ae:d9:7d:5c:f6:fc:06:f0:75:4e:2a:6a:9c:ea:09:59:d9:1b:
12:b5:b3:b8:73:b3:53:8e:00:8b:a2:b3:05:7d:07:ac:14:de:
64:6b:b6:1b:4d:d3:a2:47:ed:62:02:63:8f:c0:c1:fd:00:03:
4f:b6:73:1d:bd:ab:f6:ca:92:2c:33:08:7d:64:71:29:91:d0:
50:0d:7d:9f:9c:55:35:fd:4a:56:d6:c3:24:a2:55:fd:fd:7e:
5a:9f:49:1b:5a:d4:93:37:dc:db:b7:8a:f3:06:4c:14:4d:10:
a0:0a:36:7d:e8:04:2a:19:00:33:0c:70:85:3f:fd:00:a5:83:
9e:7d:e4:25:9c:c7:de:0f:33:d3:e4:9d:31:19:09:89:d7:4e:
6b:98:35:99:d6:3f:db:1c:51:2c:1d:03:ff:95:56:1f:5e:b8:
e5:c7:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org