Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-IR7MTEoi5RqAR871RRVdLVRNbk.roa
File: -IR7MTEoi5RqAR871RRVdLVRNbk.roa (raw, json)
Hash identifier: mCu08MsN+NvhOfnSNO93G8GBBmaSrpsw0iHA9vqrFMo=
Subject key identifier: F8:84:7B:31:31:28:8B:94:6A:01:1F:3B:D5:14:55:74:B5:51:35:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3351
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-IR7MTEoi5RqAR871RRVdLVRNbk.roa
Signing time: Thu 28 Mar 2024 00:22:02 +0000
ROA not before: Thu 28 Mar 2024 00:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13137 (0x3351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 00:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F8847B3131288B946A011F3BD5145574B55135B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:49:85:5f:d2:ab:64:64:e3:8b:85:94:ce:
5e:05:2a:c7:5d:6a:15:b5:57:73:c0:74:b4:bc:62:
83:6c:5b:39:86:5a:08:e7:38:a0:40:3a:48:51:0b:
71:00:3f:a5:b8:2c:ef:f4:75:1d:39:03:8c:e7:4f:
3e:cf:ca:4e:0d:9d:c1:e4:4c:91:87:4f:53:dc:e0:
8c:c0:d4:25:15:3e:df:9f:6f:13:54:1b:f6:22:e2:
f5:a4:ef:12:81:9a:29:18:44:c7:ee:9f:e6:2e:7b:
0d:9e:a5:f0:f2:2d:30:3d:9d:9b:2c:1b:5a:06:14:
cf:ae:a4:99:95:04:fe:32:48:f7:9e:a0:b1:59:f8:
24:13:2f:dd:ce:13:79:fe:d2:8e:f4:32:31:cf:7a:
22:d0:26:5e:98:00:d3:10:18:f0:62:7e:46:9c:a0:
0a:d8:a0:58:16:61:ef:82:07:4f:5b:bd:3c:fe:1b:
cf:92:35:bb:3c:28:74:51:18:5f:97:20:cd:95:fe:
db:ac:87:77:08:1b:ce:44:47:9d:0f:04:ee:d7:9c:
40:25:d3:6b:f1:78:03:91:1e:a8:83:f1:18:5a:91:
2d:ab:27:5c:2a:c3:f5:23:ab:11:78:59:41:dd:25:
d5:14:f8:7b:81:95:2e:ff:b1:f4:29:b6:4c:a1:51:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:7B:31:31:28:8B:94:6A:01:1F:3B:D5:14:55:74:B5:51:35:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-IR7MTEoi5RqAR871RRVdLVRNbk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
39:f7:bc:43:2f:e1:c8:3a:a5:b2:ad:b0:ba:33:40:1d:60:be:
4e:c3:82:c4:7c:ce:ed:a2:42:22:7b:ea:2e:cb:df:b1:73:4b:
52:59:17:83:1c:2d:67:12:29:f5:2a:45:f3:e1:82:d7:9d:f9:
70:dd:af:7d:d5:21:3a:78:ec:6a:39:14:8f:fc:f3:19:cb:3d:
60:89:af:29:8a:5d:2c:bf:02:a3:08:c1:67:13:45:8c:6f:e8:
38:9e:03:c3:64:22:64:fa:81:e1:af:27:75:03:97:8d:1c:ba:
d7:6b:73:e9:c1:74:02:9a:e7:00:5d:61:40:cb:69:c1:c7:aa:
70:d0:6a:63:a5:8f:c3:83:39:8f:b9:db:28:11:95:e2:d5:50:
90:67:b9:7f:c9:d9:f3:4f:63:94:22:8c:c1:d2:5a:0b:78:6a:
a8:66:d5:4f:7d:0b:fe:b2:05:bd:66:cc:c1:db:2c:79:4c:be:
db:26:7e:91:35:e3:30:25:af:cb:0a:89:e5:20:86:51:7f:b3:
a8:83:2a:75:96:37:e4:11:b1:0e:3e:d3:d8:11:1f:ad:2b:89:
2d:f9:e9:1c:50:4a:0a:0a:91:ad:36:6f:8b:bb:31:aa:13:3b:
71:75:a8:fc:fc:e3:2e:06:b4:5c:36:b4:5e:b5:56:c7:8a:1b:
54:dc:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:03 2025 by rpki-client