Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WjQ78__PjEpRZJ3QrAiaYnuobjc.roa
File: WjQ78__PjEpRZJ3QrAiaYnuobjc.roa (raw, json)
Hash identifier: vI/DVMCeaXqvki14q6Ei5T+n3NFpWLik0nks2HweeaM=
Subject key identifier: 5A:34:3B:F3:FF:CF:8C:4A:51:64:9D:D0:AC:08:9A:62:7B:A8:6E:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3469
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WjQ78__PjEpRZJ3QrAiaYnuobjc.roa
Signing time: Fri 29 Mar 2024 11:22:32 +0000
ROA not before: Fri 29 Mar 2024 11:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13417 (0x3469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 11:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5A343BF3FFCF8C4A51649DD0AC089A627BA86E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:55:29:a9:3c:48:b6:c2:b3:3f:6e:94:da:
07:07:32:31:72:1e:fd:4d:72:db:65:1b:c1:d3:66:
6f:e1:73:9e:5e:d0:f7:1d:88:9e:09:82:fa:e7:14:
4c:24:76:89:dd:1a:2e:f6:86:fd:f7:5e:80:05:c1:
e3:78:79:96:d3:46:99:14:86:73:5b:04:8f:e9:df:
f4:54:5a:00:8e:73:24:06:e2:99:0f:80:cc:87:1a:
71:5f:0f:6f:9a:06:68:e8:a6:86:45:2e:97:33:da:
fc:8b:9b:74:c6:6e:9b:af:f6:38:e4:a4:b6:df:e5:
3b:1b:2b:6c:89:4e:72:e4:fe:65:a8:90:f6:cb:75:
65:19:9e:a7:92:e7:60:23:70:c0:0b:be:23:69:ac:
a8:3a:f8:d2:dc:ce:0d:d6:da:01:ee:32:d9:48:e3:
92:b5:09:b4:f4:d4:60:75:dc:4d:9c:e1:8e:f5:6e:
2d:99:7f:26:83:88:b3:77:54:d7:ec:8a:d5:ab:bf:
f4:a3:ef:2d:ce:10:ce:51:18:71:e3:4a:9c:a3:dd:
f0:f7:c4:5a:b1:8e:fe:4d:02:71:7b:d6:11:97:d0:
a1:a6:1a:d3:30:f6:b0:82:fc:34:6b:70:be:49:4c:
2b:5f:94:2f:b6:7c:96:d7:c4:dd:2d:73:ea:a9:73:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:3B:F3:FF:CF:8C:4A:51:64:9D:D0:AC:08:9A:62:7B:A8:6E:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WjQ78__PjEpRZJ3QrAiaYnuobjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:bc:e3:15:2a:ee:23:4a:17:d2:39:bd:25:29:14:d3:87:02:
5b:e5:39:d6:b9:d6:c4:e0:b9:1d:14:f9:b4:c1:33:e3:63:97:
5d:c9:7f:25:b1:1d:d9:4f:6a:45:b6:ee:f3:fd:36:0b:15:26:
32:cb:d2:cd:56:0b:67:52:f1:77:14:fc:86:6b:55:64:19:65:
32:da:95:a8:8d:0d:e1:b2:f0:79:7f:7d:8f:65:2f:a1:94:02:
e4:bb:b7:f6:a5:31:9a:78:d1:f9:76:3e:10:a4:75:f8:c0:e6:
fb:5d:2b:07:ce:3e:22:f1:c8:c5:25:8a:7a:e6:30:1e:1e:c4:
b9:60:65:a7:f0:7d:2b:af:7d:f6:ff:ce:64:b9:59:b8:2e:1b:
c6:c3:23:d4:f4:3b:cb:13:6c:d5:6c:81:d2:18:2d:ba:dd:94:
a9:f0:97:fe:e8:b8:71:a1:e0:bb:66:42:4f:03:c6:a4:b2:1c:
97:e0:13:08:1d:09:47:cc:ad:6a:ad:73:3d:1d:9b:32:36:f5:
32:cf:94:09:22:cf:ad:cb:9b:82:ef:94:6c:33:40:68:32:f3:
07:c8:89:a5:2a:ec:45:e6:c9:88:60:78:9d:5c:89:3b:b8:9b:
74:dc:d0:f9:73:a9:49:81:8e:85:dd:ab:4a:98:7a:40:19:bb:
9e:e7:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 17:59:45 2024 by rpki-client on console.sobornost.net