Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wd8mMDjsKwG__snyvc6agwTx4J4.roa
File: wd8mMDjsKwG__snyvc6agwTx4J4.roa (raw, json)
Hash identifier: lfuW6f2aNbsbBPfcoo+0FriV95JI9iqKYk+1VJnwTWQ=
Subject key identifier: C1:DF:26:30:38:EC:2B:01:BF:FE:C9:F2:BD:CE:9A:83:04:F1:E0:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wd8mMDjsKwG__snyvc6agwTx4J4.roa
Signing time: Wed 03 Apr 2024 03:52:17 +0000
ROA not before: Wed 03 Apr 2024 03:52:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14317 (0x37ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 03:52:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1DF263038EC2B01BFFEC9F2BDCE9A8304F1E09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:72:2f:bc:b4:03:2f:25:35:ec:bd:2e:11:
3a:96:4b:dc:c2:8a:4e:c9:1b:16:e5:fe:7c:af:0a:
8c:67:1f:b9:d0:ec:d1:e8:f4:d6:9d:99:74:4c:ba:
7f:be:ef:4b:e0:2e:78:9f:a6:3f:e6:41:61:8a:91:
f8:c9:96:0b:e7:c9:1f:a0:4a:9a:be:aa:d3:07:79:
7a:a3:46:ed:9f:e7:4e:79:df:7a:ec:7a:b8:20:d3:
2f:d1:29:72:a4:b1:33:c6:79:6b:cf:e7:4e:77:25:
07:5c:41:4a:e4:ca:06:e4:9a:28:8f:31:96:74:7b:
b3:b0:9a:64:d4:84:d1:7a:cf:97:d2:c5:28:bc:37:
e7:05:f2:de:b0:dc:72:12:b2:b8:f5:14:32:d8:24:
95:7f:1e:63:69:f4:ef:3c:3c:b1:36:c4:35:35:28:
b6:1c:16:3a:63:3d:28:8a:29:13:c2:0a:85:66:69:
3f:eb:b3:4d:59:2a:77:2b:bc:d3:df:2b:e8:b3:70:
22:74:47:97:88:76:cf:2a:41:90:00:7d:91:69:4b:
12:68:99:06:b5:54:02:48:c2:eb:3e:b9:2b:fe:cb:
1e:2b:11:0e:48:c2:40:9d:74:8f:99:d4:9c:dd:17:
b4:6e:7e:69:fe:87:97:ef:e8:ca:f1:21:09:c2:41:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:26:30:38:EC:2B:01:BF:FE:C9:F2:BD:CE:9A:83:04:F1:E0:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wd8mMDjsKwG__snyvc6agwTx4J4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
78:e9:65:22:72:6e:fc:1a:69:17:94:2e:28:66:d6:3a:4b:09:
40:31:31:07:11:e5:16:cc:d9:f0:53:15:c5:f5:2d:2a:43:a9:
c9:d5:8d:0f:c0:ac:98:f6:e1:e3:98:78:92:f0:07:16:20:8e:
ff:4e:ec:e5:e8:e3:fb:dc:25:26:36:c4:c7:88:ec:a2:ce:f9:
4a:af:fd:b0:d9:a6:49:5a:a2:ea:21:98:0f:4c:25:67:29:90:
b4:d3:d8:b0:db:ed:6c:3e:be:5a:0a:d4:06:3d:c0:f1:42:1e:
2b:7c:28:c1:23:af:ae:05:aa:6b:d3:84:83:ed:13:36:93:30:
c8:71:b7:a1:5d:15:ef:1a:33:2e:ec:9b:4b:92:3c:e7:05:a2:
d8:e8:66:7c:46:6f:d2:cc:52:e7:96:d2:5e:a6:6f:0a:8b:22:
75:74:da:a7:f1:5c:de:e4:ac:14:1c:cc:66:23:13:28:b4:8c:
f8:02:46:9f:9f:f8:12:65:d6:c2:7c:85:28:4a:4f:59:74:b2:
a5:77:f0:e0:ac:fd:59:01:2d:9e:3d:93:dc:70:91:69:ab:3a:
cd:88:fd:e8:81:70:c4:3a:42:73:d5:96:95:f7:de:46:c8:05:
df:73:e9:d5:9f:5c:e3:d5:79:0a:4b:66:16:18:b6:a5:5a:6b:
fd:c3:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org