Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QPD8g8skl6eb1jHXv86gfhYsk4w.roa
File: QPD8g8skl6eb1jHXv86gfhYsk4w.roa (raw, json)
Hash identifier: RDHRzrOaPHXkfsz056DIAiAlF7Cis8XxGyrBMNUtZHQ=
Subject key identifier: 40:F0:FC:83:CB:24:97:A7:9B:D6:31:D7:BF:CE:A0:7E:16:2C:93:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EA1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QPD8g8skl6eb1jHXv86gfhYsk4w.roa
Signing time: Fri 12 Apr 2024 02:22:49 +0000
ROA not before: Fri 12 Apr 2024 02:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16033 (0x3ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 02:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=40F0FC83CB2497A79BD631D7BFCEA07E162C938C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:bb:ad:4d:80:0b:4c:10:28:43:7b:ea:9c:
4d:db:bc:a4:e4:d1:55:6a:ed:08:3f:89:c2:18:0b:
9c:a7:e4:e1:89:33:34:85:b7:b2:cc:cd:8d:a2:0f:
c0:bb:5a:4c:08:24:e6:1e:cd:9a:1e:1e:19:d9:93:
a6:90:ce:09:7e:0c:77:48:f7:91:64:6d:b1:e3:d9:
a7:23:e5:21:68:3d:ac:a9:5d:3b:3d:0a:11:07:f6:
1a:e2:6d:3d:52:62:6c:ae:36:34:2d:dd:ef:8e:d6:
ef:4c:b7:9a:a1:c8:64:4c:45:76:de:76:61:c2:4f:
1f:35:22:01:77:75:bc:e0:82:32:d5:51:9d:f2:61:
ce:4a:85:0a:85:a2:0f:0f:15:9b:bb:d2:f2:5c:ee:
68:ee:5b:7b:3a:33:68:44:f6:0d:7a:63:fe:f9:83:
46:da:b2:23:b3:35:95:07:79:d4:55:98:dc:a3:c9:
fe:d8:f3:35:9d:c9:ca:fe:f9:31:e4:74:78:cf:60:
a2:a6:00:05:6e:c3:bd:fd:8e:fc:24:44:c6:0e:b5:
f4:e1:7e:9b:f3:73:66:c4:e1:36:ac:64:82:99:1e:
58:8b:d2:9d:40:ac:a8:09:ba:80:d4:11:eb:35:e6:
8e:04:8e:59:44:fb:a6:70:88:05:91:97:3d:f9:b0:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:FC:83:CB:24:97:A7:9B:D6:31:D7:BF:CE:A0:7E:16:2C:93:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QPD8g8skl6eb1jHXv86gfhYsk4w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:49:11:3c:5d:27:af:5a:91:8e:f9:d8:9d:fa:46:85:f0:e0:
37:51:ba:90:23:fe:a3:0d:1e:07:6b:de:4c:bc:1e:53:f1:29:
7e:5a:de:6f:48:29:d2:8c:fd:88:a5:f4:83:c0:8a:8f:c4:1c:
48:7c:d6:f6:e9:7b:3d:e0:ff:90:a9:cd:d1:f0:e1:52:b2:db:
b6:74:d0:24:3d:0d:87:83:98:d5:45:3e:13:87:d7:42:9f:b2:
f9:49:fe:2a:91:76:c8:be:b0:d7:d1:a9:3c:38:72:de:0c:ad:
b2:ac:9b:b8:7e:55:8f:85:fe:4c:0d:8b:aa:2b:b6:85:67:3c:
3a:bb:6b:54:43:b6:fe:2b:c9:cd:ca:8f:59:7c:cd:b8:81:d0:
0a:93:50:da:1a:f9:81:83:6e:7c:32:bb:60:cb:38:42:e0:df:
1d:97:f1:90:d3:3f:14:c2:2e:17:6a:7c:1b:2a:10:5e:80:fd:
22:6e:2a:f5:5e:9c:13:f2:82:d1:a2:ec:d7:5b:93:93:87:39:
71:07:a3:90:7f:f3:95:d8:85:d3:ab:91:43:c3:ef:0c:7b:9d:
77:f8:c1:59:b6:d1:e9:65:8a:ef:92:d9:88:8b:fb:db:9a:40:
e0:44:a8:9d:43:db:12:7a:f3:b9:a3:09:a3:93:ce:39:77:a2:
d2:8d:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 09:24:14 2024 by rpki-client on console.sobornost.net