Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wwCYKOsXS1DDz1K7EKx2W7rKGTM.roa
File: wwCYKOsXS1DDz1K7EKx2W7rKGTM.roa (raw, json)
Hash identifier: hnvvFOtyNoLENXq9gKPytLWPTPxtdlCZVGGG6O/LpCA=
Subject key identifier: C3:00:98:28:EB:17:4B:50:C3:CF:52:BB:10:AC:76:5B:BA:CA:19:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wwCYKOsXS1DDz1K7EKx2W7rKGTM.roa
Signing time: Wed 03 Apr 2024 02:22:17 +0000
ROA not before: Wed 03 Apr 2024 02:22:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14305 (0x37e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 02:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C3009828EB174B50C3CF52BB10AC765BBACA1933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:ce:cd:58:b6:b3:2f:68:0e:20:45:cd:77:
22:e5:4a:f1:93:cb:15:ac:36:0f:f8:47:65:54:82:
58:96:cc:60:52:4a:e1:c2:a6:e0:56:2f:14:fa:4a:
3c:0b:52:70:7f:6f:1c:cd:72:04:70:0c:c6:d8:b0:
43:5f:4f:7c:3c:bc:a9:92:0f:25:ae:9f:43:94:94:
30:e1:d0:19:0a:f3:aa:a8:0b:88:ce:95:52:57:e9:
38:f7:9c:42:d8:9c:ec:3f:e3:fd:c9:f6:60:85:aa:
2c:75:24:15:32:08:d7:d5:d3:d1:5d:02:fe:b9:8a:
70:c2:ee:3e:c7:4c:d2:1a:d8:81:4f:c5:d3:a8:3f:
1a:84:e9:9e:98:d4:fb:2e:a9:42:ef:b8:b9:90:d6:
e3:06:cf:12:3c:2e:06:05:82:a1:1b:43:8a:70:03:
b8:3a:78:2a:a0:dc:0e:fa:f3:34:3d:32:92:de:d8:
bd:e5:c8:18:8c:0b:0f:c5:b4:53:49:22:d7:b4:58:
7d:fb:b7:38:55:ca:0e:2b:63:ab:23:e8:89:b6:51:
55:3c:de:a2:bc:32:9f:d8:87:e4:2c:f1:30:09:8a:
2c:bd:1e:32:5f:43:82:e8:16:c2:1d:2a:e6:81:53:
38:2d:0d:2b:bd:04:b2:7f:9b:15:a0:92:88:69:cd:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:98:28:EB:17:4B:50:C3:CF:52:BB:10:AC:76:5B:BA:CA:19:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wwCYKOsXS1DDz1K7EKx2W7rKGTM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:13:10:18:30:8f:ca:2c:9e:d3:72:01:a5:87:fc:a1:76:64:
5b:4b:a1:27:d0:13:57:cc:f1:57:6e:9e:fa:82:c3:22:ed:5d:
3e:3c:39:ac:7b:03:75:be:57:7c:15:d7:48:f4:04:26:47:f2:
3d:7c:b6:ec:60:f6:ab:f4:e3:bc:32:e4:38:e9:58:d9:a7:9c:
2f:83:cb:ec:ab:d6:d9:17:41:d4:18:f6:67:5f:30:fa:96:ea:
ed:19:cc:a3:13:12:66:1e:b2:18:55:ef:40:dc:81:3b:5f:56:
7c:10:f8:2c:6a:da:28:14:20:3d:de:1d:ff:dd:6a:f2:9c:06:
8c:a6:e6:22:f0:4a:83:bd:bb:0e:9f:59:89:c3:5c:89:39:27:
59:b0:af:b9:42:2a:35:73:b7:ba:91:32:f5:18:a9:92:90:99:
8e:db:44:78:78:7d:aa:18:5a:d1:d3:c2:be:90:ca:07:1d:25:
50:cb:f3:2d:29:35:ee:e8:18:db:79:d8:06:52:99:0c:b3:89:
3a:61:bd:29:52:c8:78:ea:4b:e6:f9:66:b5:0f:b3:8e:c9:62:
79:76:04:ca:68:aa:c4:15:6d:4e:fe:d8:04:ed:32:ef:58:b1:
8e:a9:3d:26:55:76:78:d9:fc:70:b5:f3:ef:01:9e:b2:aa:fb:
db:ff:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org