Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zpAaS5Hgyex-w0A_xVcUy9kaxgA.roa
File: zpAaS5Hgyex-w0A_xVcUy9kaxgA.roa (raw, json)
Hash identifier: 3hVQPspsmEspS0Ih6SbS74eKwjkjc7eipQgZj6GwcM4=
Subject key identifier: CE:90:1A:4B:91:E0:C9:EC:7E:C3:40:3F:C5:57:14:CB:D9:1A:C6:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4AD9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zpAaS5Hgyex-w0A_xVcUy9kaxgA.roa
Signing time: Sun 28 Apr 2024 09:23:40 +0000
ROA not before: Sun 28 Apr 2024 09:23:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19161 (0x4ad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 09:23:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CE901A4B91E0C9EC7EC3403FC55714CBD91AC600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:45:9a:a4:01:5a:f7:f6:41:03:de:1e:b5:
7f:6d:32:77:94:d7:61:70:70:10:7d:88:26:45:17:
5f:1b:f8:36:c6:ec:73:a7:f7:5d:fb:63:fc:b1:9a:
a3:ae:d7:94:33:23:27:d4:9e:2b:a0:b1:02:af:82:
93:35:6d:d4:f2:1a:27:2e:78:90:0a:b5:d1:cf:cf:
c5:bb:1d:4f:72:77:2e:6a:84:8f:fb:44:04:d3:fa:
40:b0:06:79:81:74:b3:f7:b2:2c:59:d9:ea:37:95:
c0:1a:f4:58:c3:90:e2:94:48:7a:ac:3d:96:f6:63:
40:ea:44:a2:81:89:6d:c0:79:aa:d4:0a:70:61:5e:
4a:b3:fe:61:a0:48:30:92:fc:e1:09:11:bf:80:89:
ab:e9:b1:7c:db:4f:0a:36:39:8f:c0:76:fc:c5:f7:
94:34:1d:3e:31:10:29:13:0f:cb:51:d8:85:bb:92:
6e:5f:cc:c0:f3:38:5a:e5:f4:df:2e:8b:71:6a:5d:
df:82:85:ed:66:96:c4:7f:75:9d:d6:86:a6:b0:42:
f6:3e:69:de:fa:e3:b5:2c:20:25:25:f4:d4:ff:eb:
88:c1:c9:9c:71:5c:f8:52:69:1d:16:34:7d:05:02:
1d:8b:b1:09:e2:47:9b:33:99:48:b0:2d:59:b6:7b:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:1A:4B:91:E0:C9:EC:7E:C3:40:3F:C5:57:14:CB:D9:1A:C6:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zpAaS5Hgyex-w0A_xVcUy9kaxgA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
02:95:6a:b0:66:f2:79:a2:8d:cf:f1:88:fb:5a:0d:27:50:11:
57:05:79:80:33:58:64:6a:1a:d1:ff:1e:41:6f:99:07:ea:12:
72:18:b7:59:a4:e8:35:ab:a7:b6:24:41:60:39:61:e8:28:55:
f8:58:74:a1:9f:dd:78:bb:43:49:b5:45:9f:01:8d:14:6a:4a:
07:c8:bc:10:d2:32:7d:0b:70:3e:8a:e4:47:e7:28:b4:89:f2:
82:4b:11:72:6e:3c:77:44:63:a5:76:97:c6:35:f4:58:bb:4c:
2a:1c:4f:43:b2:28:0c:a9:52:9d:12:ba:fd:c1:4c:e3:a8:40:
98:f0:2b:db:34:59:33:60:68:10:4a:f3:88:90:e1:1f:aa:e2:
fb:0c:ef:12:8b:42:1c:fc:8a:1a:24:de:30:3a:f6:94:6d:20:
87:a0:6e:2b:cd:62:b6:c0:ec:4f:39:5e:88:1b:89:ae:cc:48:
6a:67:1f:a5:90:8d:b6:8a:90:17:0d:61:78:ba:a7:14:42:29:
d7:bf:67:d0:df:9f:9f:c3:36:a3:18:19:b5:85:be:51:dd:a5:
10:e5:e1:24:a4:d6:40:29:0d:cc:5b:90:5c:a8:0a:6d:8c:ae:
c4:ce:c9:54:da:fd:4a:0d:30:95:d9:ec:91:6c:62:52:95:e4:
fc:d7:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:26 2025 by rpki-client