Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wDYaFb9nO1IaSKUybc_tvLCRtqI.roa
File: wDYaFb9nO1IaSKUybc_tvLCRtqI.roa (raw, json)
Hash identifier: whciuMEZLnn4ATxFB3cfUcE3+x+aUGmZByka8uVzNq4=
Subject key identifier: C0:36:1A:15:BF:67:3B:52:1A:48:A5:32:6D:CF:ED:BC:B0:91:B6:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D09
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wDYaFb9nO1IaSKUybc_tvLCRtqI.roa
Signing time: Wed 01 May 2024 07:23:49 +0000
ROA not before: Wed 01 May 2024 07:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19721 (0x4d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 07:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0361A15BF673B521A48A5326DCFEDBCB091B6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:46:12:54:55:d7:2c:85:ef:d5:e5:47:2d:
ee:d0:ec:4f:ad:ef:d5:44:12:34:08:b7:24:f1:2f:
c1:f8:08:c4:e1:63:1d:a6:b6:ea:d1:04:c5:66:a0:
14:e2:25:0b:b9:a2:44:87:09:8b:20:f1:00:a8:2f:
73:ce:c3:ef:b6:44:3a:35:49:b6:c3:57:f6:12:08:
a0:dd:a8:b7:fe:40:90:14:5a:a8:c0:a9:28:5e:51:
c8:12:8c:f0:1f:f2:0d:c4:b1:d6:16:eb:42:e9:2e:
08:ab:18:d8:81:1f:5d:84:2f:20:05:2e:42:3f:59:
de:3d:b0:16:50:96:2d:23:93:c0:f2:18:3c:82:34:
e9:e6:bc:e8:ec:a6:57:7d:a1:73:7d:79:3d:53:75:
62:c6:c4:9b:e2:9f:61:93:a7:f1:43:df:3e:04:ac:
db:b5:7b:77:08:d4:8d:7c:66:79:0c:c9:3f:0d:b5:
45:d4:f0:c5:8c:12:af:c2:ff:46:55:a7:94:01:93:
89:01:39:a5:ed:9b:c5:b1:76:df:47:7d:8f:3f:3e:
ed:66:3b:5e:63:d2:1b:90:0b:ec:77:41:af:d3:14:
f2:83:73:bf:d6:c1:83:5b:5c:4f:21:76:8c:85:c3:
28:51:73:c2:28:ac:0d:af:3c:8f:35:99:24:44:c6:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:36:1A:15:BF:67:3B:52:1A:48:A5:32:6D:CF:ED:BC:B0:91:B6:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wDYaFb9nO1IaSKUybc_tvLCRtqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:f4:eb:31:d2:37:65:8a:a6:82:67:48:9f:cd:fa:ab:6d:4a:
76:4f:9e:40:16:ab:f1:7d:0a:00:0d:af:48:28:be:90:a3:93:
89:9c:b4:f7:21:f3:36:89:f3:8e:3c:bc:55:e3:61:e6:be:11:
d1:c4:64:61:c9:95:63:72:dc:67:b4:85:3e:07:74:93:96:b0:
46:73:2d:e6:7f:bb:15:8c:df:4c:91:6f:be:2f:c6:ce:cb:39:
90:86:44:1f:37:dd:42:d4:17:cd:7d:b5:a3:c7:30:60:e5:04:
cf:03:df:9c:84:10:17:02:1e:2b:b2:cb:39:c1:b1:e6:1f:bd:
66:2c:28:e6:7c:2d:58:79:84:ba:c7:30:b0:95:8b:c8:27:ff:
26:80:96:e5:6e:9b:d3:a7:39:90:73:f1:40:bd:03:3e:37:4c:
da:76:b8:82:3d:c5:3f:7f:0d:40:78:c7:71:23:41:0b:00:79:
4c:ea:39:15:19:2b:1e:37:db:b7:05:87:14:8c:15:fb:31:91:
fb:4c:6d:03:76:5e:36:33:d4:49:eb:1a:a1:6e:5c:78:07:3c:
7c:3f:28:24:6e:bb:81:03:91:81:85:4a:91:0d:a4:50:69:fe:
0d:6a:8c:36:47:20:16:d2:2c:f4:d1:4c:8c:84:6b:67:58:af:
06:3c:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:18 2024 by rpki-client on console-ams.rpki-client.org