Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w0bDDR003G9KpESko_ZGXhnN_jg.roa
File: w0bDDR003G9KpESko_ZGXhnN_jg.roa (raw, json)
Hash identifier: 3J1ySGmsOHE9MEQHzbIkP/kUVL4BAYo0AtzHPlm1T64=
Subject key identifier: C3:46:C3:0D:1D:34:DC:6F:4A:A4:44:A4:A3:F6:46:5E:19:CD:FE:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40D5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w0bDDR003G9KpESko_ZGXhnN_jg.roa
Signing time: Mon 15 Apr 2024 00:53:00 +0000
ROA not before: Mon 15 Apr 2024 00:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16597 (0x40d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 00:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C346C30D1D34DC6F4AA444A4A3F6465E19CDFE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:7b:2c:16:76:1e:f9:67:5c:0b:13:e2:97:
0a:99:09:6b:91:6e:9b:7b:36:1d:8b:ae:05:e1:56:
b0:ae:75:d9:2c:48:87:2a:18:e6:2f:90:ae:08:a5:
63:78:62:b3:3f:f0:2f:b8:30:d5:1c:4a:6f:32:5a:
6f:c8:11:81:24:c4:26:e1:7f:6c:2a:4d:8c:28:12:
c6:bf:f3:74:91:f1:f5:fe:60:c3:13:de:aa:3a:f2:
9d:f2:8d:20:8f:fe:ff:54:7e:be:c9:cb:a6:b4:77:
67:9a:e7:ab:b5:25:bd:4e:73:ef:7f:55:ee:34:46:
ae:7f:1b:ae:e2:71:d2:d6:ee:c4:01:b7:27:eb:bd:
ed:c0:61:66:a9:53:cf:58:fa:f8:6b:5f:1c:ce:10:
00:ff:57:e4:47:96:de:de:6f:9a:94:6a:f2:7d:b6:
17:d2:5b:cc:e2:b8:b9:76:ab:be:ae:e2:1b:64:ba:
8f:77:65:2e:7d:3a:35:8a:fe:8e:f1:fc:b8:24:a1:
a6:36:d6:ce:4d:98:c4:ac:89:f6:7e:44:57:3d:e8:
f2:26:37:08:52:63:73:37:76:fa:39:84:6f:35:b9:
ef:36:ae:fd:ef:b4:f9:52:d0:c2:f0:97:18:44:75:
20:11:36:59:73:8c:5d:60:48:3e:a2:8b:b2:41:91:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:C3:0D:1D:34:DC:6F:4A:A4:44:A4:A3:F6:46:5E:19:CD:FE:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w0bDDR003G9KpESko_ZGXhnN_jg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
90:bd:b6:95:d2:44:51:05:14:e6:d1:fd:bb:15:1c:d8:e3:4a:
ab:83:b9:95:09:0c:19:33:46:4a:1d:e0:03:99:1b:4b:fa:65:
2b:33:2f:e4:0c:61:c5:c2:ba:63:15:96:55:a9:92:ae:1e:dd:
82:62:7d:cd:12:20:e1:fd:03:40:62:32:5a:4a:bc:0a:6d:43:
2d:b9:f9:f8:d3:e9:ce:39:42:16:c3:cb:df:b5:37:c4:7a:8d:
f0:99:2d:58:30:02:62:a4:8b:1e:ef:92:2e:9f:0e:0e:49:7c:
76:42:a4:ab:52:90:52:05:58:61:66:12:55:25:b7:f4:c5:dd:
f4:2a:5f:bf:85:90:a0:3a:cb:8f:87:be:2f:00:90:d1:8d:fa:
56:94:40:d7:ff:f1:e3:f6:28:cc:14:46:3c:60:a4:fd:bd:b2:
7e:15:e8:e6:78:a5:7d:2c:4f:b8:c5:9a:be:56:a6:15:ae:3a:
bb:c5:de:94:06:59:bb:02:d3:29:41:e2:4e:eb:91:67:7b:ac:
be:f0:74:4b:04:91:a1:3c:2a:bf:cb:61:5c:66:85:1a:af:e3:
4a:84:50:7a:68:a4:29:d4:db:91:eb:77:44:16:0d:6a:09:7c:
3a:d0:59:50:42:a9:0f:61:8b:17:60:89:dd:b8:d5:8e:6f:b7:
39:50:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:18 2024 by rpki-client on console-ams.rpki-client.org