Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xyybpiU8fJk6F7yA4ORQdt2NwEQ.roa
File: xyybpiU8fJk6F7yA4ORQdt2NwEQ.roa (raw, json)
Hash identifier: ypvCqyOPa3lkMMFFj+NptRL0n8njQ4rywTlh75cduOo=
Subject key identifier: C7:2C:9B:A6:25:3C:7C:99:3A:17:BC:80:E0:E4:50:76:DD:8D:C0:44
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5519
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xyybpiU8fJk6F7yA4ORQdt2NwEQ.roa
Signing time: Sun 12 May 2024 01:24:03 +0000
ROA not before: Sun 12 May 2024 01:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21785 (0x5519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 01:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C72C9BA6253C7C993A17BC80E0E45076DD8DC044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:99:7d:7d:54:09:a4:d7:71:2a:83:9d:0d:
7c:7c:0c:1b:4f:08:ef:4d:c8:28:7d:a9:b6:ee:5a:
35:d9:85:07:b2:cc:8d:33:6c:98:db:02:75:26:ea:
c9:30:9f:c2:72:3f:66:20:3b:46:0a:20:e1:76:ee:
9b:56:83:64:06:a6:16:64:d8:6e:e5:c7:54:12:af:
2a:d6:f5:84:e5:b3:59:89:45:0c:d0:11:4d:17:4a:
a2:aa:20:18:07:0e:5a:cb:8c:57:e1:83:6a:46:35:
f6:7c:73:70:1d:f0:e9:8e:9d:48:ca:28:e0:9c:c4:
ad:9b:59:92:e6:b0:da:fb:e9:40:4f:52:09:ad:b4:
51:e3:40:61:b4:89:a5:ce:13:3d:7d:43:65:4f:7b:
ce:e4:d5:72:cd:3b:09:e5:8d:45:94:7c:42:a2:21:
f3:e3:3e:66:6c:7c:9c:87:ea:77:53:9e:ec:65:da:
27:b2:18:cd:ed:14:3d:a8:fe:e7:25:7f:9a:c4:c3:
a7:ee:ca:6c:8a:8b:bc:47:fc:ca:fc:0c:b8:33:fb:
85:25:29:55:c4:37:eb:cd:d9:52:8a:c5:b9:bc:31:
f0:43:1f:b4:9f:96:21:5f:12:f1:d1:2f:7c:74:90:
a9:1f:91:c7:0e:35:20:fc:14:22:6e:96:12:01:01:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:9B:A6:25:3C:7C:99:3A:17:BC:80:E0:E4:50:76:DD:8D:C0:44
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xyybpiU8fJk6F7yA4ORQdt2NwEQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
43:62:92:64:12:4c:88:89:87:b3:f1:1e:84:5f:61:a1:eb:7f:
cf:3a:4f:11:21:98:29:56:10:8f:40:c5:f8:2f:e3:5a:2a:1e:
15:6e:13:81:9f:62:5f:f0:51:b6:38:7e:33:67:fa:a7:fe:ed:
56:7a:2e:bd:e2:4c:13:fa:10:a0:1c:9b:ab:17:40:c2:2a:e4:
19:06:8c:3b:3c:f7:85:c3:0e:cc:4e:cd:f8:bc:5f:f5:bc:69:
7c:c2:54:aa:f1:bd:6b:34:0f:21:a8:45:b7:4e:32:92:3e:dd:
5d:51:c4:a1:bc:bd:69:7f:6b:32:d9:c9:5c:d8:6e:e1:e8:12:
47:fb:56:31:f0:e6:42:04:cb:40:72:76:f3:2b:90:c9:e9:4e:
80:ec:72:cf:7d:df:89:d6:79:69:c9:04:8d:2f:a3:f2:c0:38:
1c:2d:44:a1:12:24:d7:f3:73:dc:4c:52:36:37:e6:14:2c:20:
ae:fa:50:7d:67:70:bc:ca:ce:5f:4d:00:16:db:3d:15:9a:73:
9f:03:16:82:63:a8:4c:04:e0:e1:10:86:d4:52:cf:ad:49:5d:
73:f1:18:15:87:86:ea:5c:30:41:28:9b:50:05:aa:47:94:65:
aa:e2:df:8f:3f:40:0a:48:1b:06:9b:0c:0f:1b:4a:34:82:b4:
7f:1f:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:20 2024 by rpki-client on console-ams.rpki-client.org