Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zqirB9FHA4Sw-RZVjjp0wkpOLU4.roa
File: zqirB9FHA4Sw-RZVjjp0wkpOLU4.roa (raw, json)
Hash identifier: 6K8iQO1AoofHufqyWKzEmG3HJGdgb5owEbsm0SRFMgU=
Subject key identifier: CE:A8:AB:07:D1:47:03:84:B0:F9:16:55:8E:3A:74:C2:4A:4E:2D:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3659
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zqirB9FHA4Sw-RZVjjp0wkpOLU4.roa
Signing time: Mon 01 Apr 2024 01:22:15 +0000
ROA not before: Mon 01 Apr 2024 01:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13913 (0x3659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 01:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CEA8AB07D1470384B0F916558E3A74C24A4E2D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:3c:ed:a4:54:1f:d2:ae:9d:d5:ab:79:d8:
83:2a:44:f7:f4:4c:73:39:f1:a3:51:54:1f:5d:33:
19:2e:8b:4a:4d:9c:49:ab:5d:62:64:93:b3:08:d5:
f0:b9:26:89:29:03:e7:a8:75:22:49:75:b5:4d:10:
c1:8e:86:82:44:3b:0f:b9:c0:47:42:79:7d:61:d3:
94:7e:92:d6:23:9d:25:e9:66:b6:e7:2f:00:35:dd:
28:98:75:25:33:55:b8:0d:fe:53:38:4f:1f:46:82:
48:c4:9d:16:0a:18:a0:7e:55:37:82:2b:1c:f5:7c:
78:9c:a0:d6:05:a3:9e:d9:45:93:c0:75:2a:ae:8c:
77:6b:ff:a9:ab:e0:7b:a7:a8:31:3d:f6:b9:b2:67:
29:77:ac:c5:6e:fd:79:00:a4:11:de:86:5a:93:21:
9b:64:61:b0:08:d2:26:eb:45:a5:21:9d:3a:2a:42:
89:49:16:5c:49:0e:8f:81:10:9f:19:83:b8:7d:d3:
b0:e4:87:24:68:e3:ea:6d:cd:e0:ea:43:6c:3d:24:
05:ff:dc:70:e5:8f:fb:24:35:b5:fb:0a:14:d3:f8:
04:91:26:b3:89:fb:20:a1:38:76:be:1f:75:f4:c7:
60:ea:c4:78:51:25:3e:6d:f0:ae:2b:8e:26:df:20:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:AB:07:D1:47:03:84:B0:F9:16:55:8E:3A:74:C2:4A:4E:2D:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zqirB9FHA4Sw-RZVjjp0wkpOLU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
52:2c:0c:56:46:92:b4:64:1c:7c:a6:d3:77:de:26:ce:15:93:
3b:93:b4:bb:c8:e7:16:07:dc:4b:21:d1:36:ba:2e:95:6b:18:
ef:61:b9:11:ea:b8:34:2d:ba:cb:50:ae:71:45:1c:8d:62:1c:
2c:33:4c:58:ed:bc:f7:2d:0f:62:10:b1:fe:5d:46:77:ae:8c:
bc:1a:c5:36:0a:7f:e6:e2:ac:16:ff:19:90:cf:06:eb:29:c7:
87:51:4d:b9:6a:c9:31:85:92:3c:d3:9b:51:03:9e:c6:7e:84:
73:ee:65:ec:58:09:f1:60:96:43:ef:a9:05:3c:2a:f9:0d:20:
09:80:9d:da:00:31:fe:5a:48:62:52:44:33:16:87:d3:75:a2:
fe:7e:c8:46:d9:69:9f:7c:42:a9:b2:e9:74:b9:83:b9:a9:a8:
64:31:c3:49:05:d8:0b:ed:c0:bf:cb:0c:01:3e:ea:49:0a:a1:
5a:a0:2c:a3:2e:c0:ca:d6:35:09:48:59:02:25:9d:97:f5:54:
e6:f8:7e:fd:c6:f6:50:c4:5c:e3:82:87:90:f1:99:4b:af:24:
2c:9b:0c:54:ce:82:aa:90:9e:24:c2:43:39:e7:d7:25:89:5d:
cb:b7:05:99:80:7f:69:b5:8c:9d:7e:f1:c6:99:f7:67:c3:c9:
15:5d:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org