Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2bhZ42F1nYK-lsicr3WK--KaRpw.roa
File: 2bhZ42F1nYK-lsicr3WK--KaRpw.roa (raw, json)
Hash identifier: MLrcsGOHtKyZ9y1Ut+6nIso5+etjYEJ8Rz2b6D2x0as=
Subject key identifier: D9:B8:59:E3:61:75:9D:82:BE:96:C8:9C:AF:75:8A:FB:E2:9A:46:9C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5679
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2bhZ42F1nYK-lsicr3WK--KaRpw.roa
Signing time: Mon 13 May 2024 21:24:06 +0000
ROA not before: Mon 13 May 2024 21:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22137 (0x5679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 21:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D9B859E361759D82BE96C89CAF758AFBE29A469C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:96:7c:66:8d:ea:9c:7e:e8:21:2e:c8:84:
1c:4b:f0:28:a5:a6:08:1d:5d:13:30:d8:e9:44:6b:
7d:1b:ff:e8:71:00:58:2f:ac:78:04:8f:be:ba:8d:
3c:94:10:1a:ca:4c:f3:92:4e:d9:1a:a0:20:a4:3e:
e1:83:fa:43:31:b1:a2:eb:d2:21:e5:78:af:8c:62:
e2:cb:56:91:23:11:bf:de:ee:4f:9c:03:6b:24:8b:
ed:2c:75:40:86:a2:99:17:c4:7e:9b:23:a2:c5:0b:
1a:f1:ae:b3:0f:85:16:2c:e7:4e:c9:ed:1e:b5:be:
bf:03:69:35:c4:2b:45:c5:f4:43:fb:99:01:f1:a0:
47:aa:44:2e:9d:1f:89:6b:ec:d2:40:5f:82:31:37:
9b:c2:81:93:86:9c:4f:25:90:ce:f8:4b:59:e2:3c:
09:5f:69:45:bf:8a:10:8d:68:df:e4:c5:f9:9f:49:
c3:53:a9:53:f7:8b:cc:fc:b2:c1:16:21:9e:3f:27:
41:72:4b:9d:5c:0e:7c:3a:08:a8:67:4e:9f:33:83:
ab:18:37:57:f6:e9:fd:b2:ca:4b:07:e4:9b:78:dc:
9c:90:32:f4:79:bb:8f:36:26:0c:5e:78:7f:b8:0a:
12:20:cc:7f:81:98:ca:b3:f4:4c:f0:88:f3:65:de:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:59:E3:61:75:9D:82:BE:96:C8:9C:AF:75:8A:FB:E2:9A:46:9C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2bhZ42F1nYK-lsicr3WK--KaRpw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:99:72:c3:d2:92:76:01:71:07:a9:8e:ac:cc:a0:ef:7b:a9:
ba:06:4f:2f:8f:0b:7a:74:6b:9c:ac:61:0b:d5:f4:4d:01:fb:
f8:1f:e3:b2:02:29:0a:cf:71:22:d1:f8:2e:e3:8f:4c:7a:e6:
dd:9f:19:ab:9a:a3:d2:19:ba:3d:31:db:4d:e4:de:46:bb:33:
f2:3b:7a:15:cd:e6:df:52:2b:14:80:d3:8e:d0:e2:05:de:fb:
23:fd:01:1b:87:4a:60:dc:5a:df:bd:c2:c3:e9:32:71:e1:2d:
a9:ce:aa:bc:fe:80:64:43:1e:82:a3:61:3e:d8:13:f8:c4:6c:
75:92:b4:fb:fe:83:27:4a:cb:73:73:bf:8d:c3:a0:31:f5:0c:
aa:98:1c:ed:a7:b3:43:2f:60:fb:f5:4c:ba:89:ff:5f:28:a9:
9f:de:31:49:e1:ae:95:f5:f5:56:e4:7a:31:33:78:85:af:db:
0d:3b:ca:f4:59:21:a2:5b:70:9b:7e:e9:01:cc:5b:04:7a:6d:
e7:30:b9:bc:f9:4b:26:d9:ca:da:7f:cc:0a:eb:3d:7c:fa:a2:
f1:ee:0a:20:76:4e:3b:ab:a0:b8:0e:c6:4c:f1:e9:04:75:bf:
f7:ea:23:59:da:df:38:ae:c7:de:98:ee:54:c9:64:d9:d6:3e:
33:17:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:17 2025 by rpki-client