Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xrxxcMbNYORcUCnqrOPjG1suL50.roa
File: xrxxcMbNYORcUCnqrOPjG1suL50.roa (raw, json)
Hash identifier: V1MTXMQLQG4WT6xf4X2/FzSNeIjld1OdVgBQgy/Lpwg=
Subject key identifier: C6:BC:71:70:C6:CD:60:E4:5C:50:29:EA:AC:E3:E3:1B:5B:2E:2F:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5151
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xrxxcMbNYORcUCnqrOPjG1suL50.roa
Signing time: Tue 07 May 2024 00:24:01 +0000
ROA not before: Tue 07 May 2024 00:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20817 (0x5151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 00:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6BC7170C6CD60E45C5029EAACE3E31B5B2E2F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:c2:84:e4:08:95:b8:c8:54:96:5e:9a:41:
0a:bf:75:82:19:1c:81:ea:68:cd:e3:6e:68:fa:bc:
cc:3f:83:6f:90:81:91:3c:cc:d0:b2:60:46:48:f3:
bb:0d:4a:00:13:60:ff:54:5a:4e:f4:17:fa:4b:85:
dc:05:11:f2:89:d9:4c:26:a5:93:6b:4f:ec:d6:f7:
e8:b7:4b:80:63:29:68:39:23:40:db:4d:f9:bb:a2:
26:50:73:d1:c8:3d:df:10:54:3e:00:01:39:60:d1:
f6:07:da:59:ed:5a:f6:7b:53:ba:ee:9a:fb:e8:0c:
cf:ed:34:4a:d4:7c:84:64:e1:f7:0e:9a:35:98:64:
86:7a:3f:49:d0:ba:26:7e:91:40:9a:62:90:c5:c9:
64:a4:13:e9:2f:d0:2f:b0:25:4b:38:f6:a8:80:eb:
d2:3c:ae:4b:d0:31:99:49:13:de:c9:01:61:c7:a9:
ab:28:9b:76:cc:fd:ac:ef:72:e0:51:f6:d8:98:11:
7f:3b:c7:0f:53:dc:f4:e8:53:80:54:a5:d7:41:0e:
46:6c:97:21:e4:86:c8:e8:b3:0d:6c:31:75:12:4f:
48:d2:ad:c9:1c:a2:9d:14:c6:b1:4b:b9:c4:ed:37:
4a:09:94:17:96:4e:06:7c:ea:39:8c:b1:e0:06:b5:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:71:70:C6:CD:60:E4:5C:50:29:EA:AC:E3:E3:1B:5B:2E:2F:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xrxxcMbNYORcUCnqrOPjG1suL50.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:91:45:94:1e:81:8c:a9:19:5f:85:6b:20:40:20:0b:5f:8c:
d6:7e:86:16:96:2b:8a:3f:a1:ba:df:61:65:ff:41:73:17:f0:
d3:5d:c5:e6:2c:52:39:7b:59:8d:3c:8c:37:ad:69:3d:6a:db:
63:a5:06:61:f1:4d:41:59:93:b3:bc:83:80:5e:a4:ef:ac:90:
28:43:38:c4:fd:f0:6b:30:68:6e:d4:bf:9e:9a:19:a9:75:a5:
f0:dc:16:00:27:ce:0e:fa:aa:c7:f3:fb:41:c8:ac:bf:90:b0:
6e:5f:8a:40:d7:10:9a:f8:85:fa:96:67:da:d5:61:40:f1:9d:
76:97:17:ba:a1:09:07:1e:d0:b6:ad:83:d4:a0:e9:71:fa:04:
78:f4:b7:2e:3d:68:5e:95:52:9b:e9:df:b9:34:73:0d:e1:fd:
4c:9d:f5:93:13:51:e9:93:22:69:48:89:08:04:20:a3:b1:ca:
b0:ee:bf:eb:a9:f7:1c:d2:32:be:21:64:31:c1:20:75:c4:6d:
e8:0d:89:d5:23:87:46:81:38:bc:73:c5:57:39:fd:51:a7:2a:
58:76:94:52:d4:77:1d:bb:d7:74:95:5b:bc:4e:80:ba:ad:c3:
5b:38:70:99:8d:95:f4:2a:3c:cd:31:a0:93:f5:93:8a:42:50:
26:d9:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:23 2025 by rpki-client