Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SwxiSsqX7QgYucSoJ_7WUF2ePjE.roa
File: SwxiSsqX7QgYucSoJ_7WUF2ePjE.roa (raw, json)
Hash identifier: 9a8+H54vHVNpD1eJeHpA5RrGjpyW55dDNnnAMtV0Hq4=
Subject key identifier: 4B:0C:62:4A:CA:97:ED:08:18:B9:C4:A8:27:FE:D6:50:5D:9E:3E:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41F5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SwxiSsqX7QgYucSoJ_7WUF2ePjE.roa
Signing time: Tue 16 Apr 2024 12:52:57 +0000
ROA not before: Tue 16 Apr 2024 12:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16885 (0x41f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 12:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4B0C624ACA97ED0818B9C4A827FED6505D9E3E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:54:35:7f:18:f7:57:25:2c:d6:7f:cc:2a:
d7:f5:6d:8e:af:6e:b5:56:83:75:7d:b3:19:4d:a6:
eb:88:10:03:19:a7:d7:18:ae:1f:11:8d:aa:25:c1:
89:cf:0e:d7:17:07:99:7f:4e:19:6e:78:64:2e:f1:
74:f5:86:44:e7:b0:a2:ef:27:90:5d:1d:20:95:7f:
0f:b0:da:d6:06:24:43:fa:9e:b3:76:b3:a9:d7:41:
03:fa:9a:44:72:d2:27:b3:af:70:9e:37:12:c1:9c:
5e:f4:8d:4e:cb:de:87:f0:dc:c2:b5:31:be:54:51:
b1:4f:0f:61:91:a9:ec:7c:be:24:79:3c:4e:de:13:
94:76:46:61:14:75:30:d8:68:26:a4:fa:4b:1f:47:
f2:ef:64:67:1a:2d:b2:42:93:9a:28:82:e1:06:27:
09:13:c9:86:d9:5e:ff:bb:af:5f:da:cf:ae:96:18:
9b:78:c4:68:f8:4e:a2:65:65:5b:20:ee:c7:1f:23:
28:68:da:89:ba:31:78:e9:2a:7a:af:dd:ad:fa:47:
23:bc:98:ef:5e:6d:eb:cd:5b:67:50:7c:0a:ae:3d:
9c:5a:67:0f:b4:8f:fd:06:6d:9c:0a:ee:55:c6:85:
f8:23:e8:28:fb:c1:f2:1e:40:8c:6e:82:cf:2c:67:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0C:62:4A:CA:97:ED:08:18:B9:C4:A8:27:FE:D6:50:5D:9E:3E:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SwxiSsqX7QgYucSoJ_7WUF2ePjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:02:0d:1f:25:da:90:8a:e0:13:8e:44:f2:95:71:8c:5f:f6:
b5:28:4e:17:d0:18:60:28:9a:2b:4e:17:35:67:fa:a4:b8:0b:
8c:43:f6:f1:bb:81:8c:0a:a2:b3:f5:c0:58:fe:53:08:8b:17:
12:06:ab:f6:3f:69:de:ae:61:0c:0a:87:da:28:54:0c:14:c6:
c5:f1:2b:31:cf:05:38:69:da:45:52:8d:a1:f2:4d:bc:3f:73:
f4:b7:a9:29:10:da:b3:e7:3f:4e:10:da:b9:13:5b:37:3a:93:
08:21:5b:b9:66:2f:bb:54:ae:5d:54:79:5f:9f:02:2b:5b:a3:
26:fa:e8:7d:95:1f:db:a6:ca:19:15:7c:00:14:e9:8f:93:66:
44:38:00:81:d8:15:7a:b0:9b:85:2f:c9:9d:16:25:9d:26:64:
97:3f:ed:a8:93:a6:50:98:9e:a4:3f:66:ad:3d:3e:c2:18:07:
63:d2:a3:b4:09:29:50:81:47:18:cb:18:be:ac:56:c7:0f:9f:
83:43:35:da:9f:70:b9:cd:cb:f8:23:f0:a7:67:9a:eb:5f:3f:
de:6c:eb:c9:a5:c7:dd:d8:27:e1:ac:4d:5c:06:4a:30:a0:88:
f7:7d:9d:e6:b5:89:03:e7:ef:f0:99:66:b7:69:6a:a4:e9:bd:
87:b9:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:57:01 2024 by rpki-client on console.sobornost.net