Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zUYPiedwLYhmus_JEjxRdp6hPXQ.roa
File: zUYPiedwLYhmus_JEjxRdp6hPXQ.roa (raw, json)
Hash identifier: 3/YxiQYzLMQxjlUvkGtAah6cvA/ROhs6ACMRXPAkhMM=
Subject key identifier: CD:46:0F:89:E7:70:2D:88:66:BA:CF:C9:12:3C:51:76:9E:A1:3D:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zUYPiedwLYhmus_JEjxRdp6hPXQ.roa
Signing time: Fri 19 Apr 2024 02:22:59 +0000
ROA not before: Fri 19 Apr 2024 02:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17377 (0x43e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 02:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD460F89E7702D8866BACFC9123C51769EA13D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:dd:1c:05:40:ff:45:0f:e5:0d:a9:8b:67:
7e:46:3d:d3:8e:19:d5:d5:16:2f:7e:86:6d:41:38:
e4:bd:a8:d8:e0:9a:21:89:1c:7a:b4:f0:b7:46:73:
9d:58:10:f1:9f:e1:d0:64:08:fc:b3:d0:16:51:e0:
a6:1c:9e:a1:71:d6:b9:09:f9:fd:05:35:04:d2:f6:
c8:76:3b:41:fa:32:6c:20:07:66:06:a5:b9:1f:4a:
5e:ca:60:38:a2:54:49:f3:8b:0b:33:4c:a5:be:fd:
4d:67:18:d3:a8:5c:2e:8e:40:e6:66:84:27:66:50:
ed:cd:41:16:51:bb:f1:47:2a:68:6e:d2:a7:53:1f:
ab:1e:9e:fc:7a:2e:eb:05:5f:ec:37:04:11:67:ae:
6a:b1:cb:9c:3e:f8:5e:5d:06:1c:bd:47:ef:26:12:
cc:4f:b9:74:dd:08:26:d8:ea:c3:0c:fe:f0:2f:55:
70:6e:66:b2:08:29:dd:55:f3:ac:c9:40:2e:2d:d9:
c3:31:fe:75:0d:a8:ea:cd:51:45:d7:53:54:ed:0f:
87:f6:ef:1c:ed:5f:a8:0d:29:6e:fd:85:f4:65:73:
d3:39:ae:67:a7:f0:e6:df:13:0a:03:87:7c:57:a5:
ce:fe:13:0f:f9:2b:61:d6:56:62:cc:ea:88:fb:25:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:0F:89:E7:70:2D:88:66:BA:CF:C9:12:3C:51:76:9E:A1:3D:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zUYPiedwLYhmus_JEjxRdp6hPXQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
35:d5:82:22:bd:42:91:de:5e:aa:6b:83:fa:e2:f9:2e:92:bb:
ea:ac:1b:9f:dd:44:d9:ea:76:7c:48:21:ea:bf:21:5c:51:b6:
9f:3f:39:a3:64:37:c5:3e:8d:7f:7c:f0:98:b6:42:1f:bb:cb:
c0:fb:fc:23:05:9c:9d:2c:72:a9:93:a4:a6:fc:47:25:17:4c:
1f:0f:65:1f:1f:ab:fa:b1:8b:ce:c0:03:cb:e3:88:87:b7:13:
93:f7:ff:f3:f7:2c:11:ec:de:fb:54:04:88:30:17:9a:49:34:
ce:0d:c2:09:50:c3:f4:d6:29:e5:7b:39:af:5f:66:77:f0:c4:
4e:48:b4:48:d5:f4:22:87:27:bf:20:7b:cb:1a:91:45:82:ae:
46:5f:8a:53:44:40:b0:6e:d8:9b:a2:d2:ae:39:8b:7d:62:6c:
39:e8:cb:90:4d:af:64:5b:27:e8:6c:63:1c:8f:8d:22:39:96:
fa:9a:f2:13:4e:5c:6d:a0:80:15:b9:8d:c0:69:df:71:2c:7c:
0e:51:19:0e:ae:04:1c:d9:46:48:e1:f3:59:ce:0b:83:f9:fa:
ce:e5:b6:3c:23:9e:3b:eb:01:e5:38:a6:25:2e:58:0a:63:71:
75:ba:20:45:28:72:03:21:05:86:02:e2:2a:04:21:b7:3f:be:
79:d9:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org