Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xVk0rHk3oM0-WoP2yWVaG2RW7Tg.roa
File: xVk0rHk3oM0-WoP2yWVaG2RW7Tg.roa (raw, json)
Hash identifier: ZqfFa9bUcTCwhG8JYbYBoi25SsKMSQuHmYIxGsAO6WI=
Subject key identifier: C5:59:34:AC:79:37:A0:CD:3E:5A:83:F6:C9:65:5A:1B:64:56:ED:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BD9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xVk0rHk3oM0-WoP2yWVaG2RW7Tg.roa
Signing time: Mon 29 Apr 2024 17:23:30 +0000
ROA not before: Mon 29 Apr 2024 17:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19417 (0x4bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 17:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C55934AC7937A0CD3E5A83F6C9655A1B6456ED38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:0c:a3:3b:72:25:cd:1e:23:40:e4:bf:1b:
49:c5:95:ea:bc:a4:e0:d8:72:98:83:e1:e8:12:38:
33:2b:95:92:4e:3f:4e:c2:47:df:5c:2f:93:c2:90:
46:1c:07:9c:1e:c6:75:c6:77:49:7a:0a:29:61:66:
1d:86:40:1b:1c:3a:b7:7d:fa:a8:33:9d:f1:1d:34:
93:36:0b:a1:9d:19:4e:c6:69:4c:b6:7c:ea:9b:2f:
12:8e:af:9a:45:7a:76:9c:6c:07:c3:65:f3:93:b2:
92:75:f1:b2:8f:ce:47:a5:9c:ca:7d:16:7d:9d:27:
73:12:f4:d6:9f:a3:88:7c:0a:6a:83:80:de:a0:a7:
02:d8:da:49:ad:d1:ba:d7:51:24:36:b5:05:ef:c2:
27:4a:e4:6f:ff:23:d4:6e:59:39:f0:f5:1a:b2:10:
87:0f:7c:68:71:4d:55:c2:5e:71:39:d0:4d:37:58:
7c:81:39:7e:c5:1e:9c:c8:fb:98:cf:e3:63:5c:4a:
b7:7d:7f:40:20:5c:5e:ff:19:ab:00:8d:a4:7b:ae:
7c:83:84:c8:27:fc:1d:03:85:30:ed:86:d4:a9:19:
85:c5:8e:b2:ac:b2:6d:5a:ff:f9:8a:12:73:3f:e4:
81:28:7b:69:7c:54:ce:d5:07:9c:de:f2:a6:0d:f8:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:34:AC:79:37:A0:CD:3E:5A:83:F6:C9:65:5A:1B:64:56:ED:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xVk0rHk3oM0-WoP2yWVaG2RW7Tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
99:02:1f:ce:0e:e0:35:77:50:c0:40:e2:62:cd:b5:e8:3b:8e:
81:74:3d:17:65:f6:43:a1:db:1c:ad:55:d0:67:1c:65:b3:b6:
50:50:0a:6d:23:ec:81:75:ce:60:22:95:66:b3:fe:b6:ce:8b:
03:65:4e:9a:7b:86:c3:43:43:8d:b1:66:78:59:fc:b7:b4:d2:
fe:a2:e6:3a:a4:26:be:25:5b:e0:ed:87:32:d6:aa:c2:5b:47:
24:e4:ee:4f:12:87:f3:da:8e:7e:85:fa:ef:fe:62:68:ab:1d:
aa:74:e6:5f:a4:19:d0:53:62:4b:50:0b:fe:b9:1a:b8:10:35:
14:14:f2:87:87:c4:15:5b:bc:67:01:00:68:b5:1c:3a:3d:73:
79:21:99:25:2b:c8:2e:e0:32:c7:5a:ee:c9:03:47:be:71:e1:
37:97:7b:e5:8b:22:bf:67:c4:58:56:0a:81:82:9c:62:c7:06:
4a:5f:8a:42:80:c5:06:ef:69:c3:e4:34:68:60:05:c1:d5:88:
20:c5:0c:b3:ed:9d:22:c2:38:ed:e5:7b:55:47:ef:f8:c4:0e:
36:e1:a2:08:95:50:cc:c4:98:28:40:9a:07:ec:8e:90:cb:9e:
75:12:93:2b:11:2b:54:75:b1:5d:b4:86:21:66:4b:74:2e:dc:
90:9c:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org