Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Z8Cuv6M2kpgF0V4TcyoZng_bg3o.roa
File: Z8Cuv6M2kpgF0V4TcyoZng_bg3o.roa (raw, json)
Hash identifier: r1EOZS/2uxgeMqe3pN4Bs4q1l573/LRfrOGNZLx0HKc=
Subject key identifier: 67:C0:AE:BF:A3:36:92:98:05:D1:5E:13:73:2A:19:9E:0F:DB:83:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5395
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z8Cuv6M2kpgF0V4TcyoZng_bg3o.roa
Signing time: Fri 10 May 2024 00:54:00 +0000
ROA not before: Fri 10 May 2024 00:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21397 (0x5395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 00:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=67C0AEBFA336929805D15E13732A199E0FDB837A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:7d:ea:b8:92:9a:58:8d:5f:f0:dc:35:8b:
35:61:1a:52:b2:33:eb:55:dd:10:67:ff:36:30:cb:
d8:29:1a:66:0f:8a:01:59:d2:86:01:fe:22:3e:32:
28:7f:a8:79:85:d2:2b:00:fd:ee:bc:c8:97:da:d4:
20:2b:47:b6:e8:99:17:71:a4:bb:86:b4:1d:22:0a:
bd:76:97:ca:0e:b9:49:84:82:1c:45:4d:d2:0d:14:
0c:f0:0d:7a:73:3a:d5:5d:9e:20:ae:91:f3:91:d0:
cd:b6:d3:60:be:bd:db:ea:38:6a:9d:14:f2:4f:4d:
5b:65:c7:55:d8:89:75:cd:e9:37:94:f4:8a:b9:6d:
c3:ee:e3:92:9e:20:53:fc:df:95:70:79:22:d6:b3:
2a:d6:75:28:9c:d9:56:7b:a3:53:96:d8:2d:dd:b4:
95:9c:f6:d2:a4:9f:0e:df:36:98:8e:62:cd:dd:92:
87:d3:db:3a:2c:52:cc:b7:88:82:c8:de:7b:2f:8e:
0c:a5:6c:41:1c:48:9e:e2:94:f0:08:6c:be:6b:e7:
69:71:85:83:7b:81:90:08:fe:e6:07:c3:90:3c:83:
b6:4b:b6:7f:6d:88:d0:e8:c9:16:39:04:ed:a1:8f:
22:3a:b8:79:d8:15:89:af:e3:13:be:99:f8:a6:f3:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:AE:BF:A3:36:92:98:05:D1:5E:13:73:2A:19:9E:0F:DB:83:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z8Cuv6M2kpgF0V4TcyoZng_bg3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
59:ec:3e:c8:6b:dd:4f:09:e9:71:94:f7:e3:c9:71:1b:34:4c:
d2:c3:c6:30:19:e4:6d:2a:0c:36:cd:e0:a2:77:54:a8:51:64:
52:d4:ef:77:bf:24:b2:4d:19:c6:22:d9:2b:a8:a0:6e:ed:b9:
e4:eb:34:9e:8a:b2:18:53:ac:8d:48:e4:29:9c:84:63:77:4f:
b7:03:31:04:21:fc:16:27:ba:ec:47:ba:af:51:4f:13:f4:55:
17:76:d1:e4:4b:3e:17:60:7a:ae:59:54:b4:3c:53:31:90:5b:
e7:f6:1a:ec:57:38:d6:b3:4d:3a:29:b5:24:af:1c:d8:90:0f:
43:cf:7c:a7:82:f2:c4:b9:b8:a8:9f:6e:29:06:db:64:b9:78:
5e:0d:a6:e9:e0:40:e2:51:37:22:8f:89:64:24:f0:b4:c5:1e:
c7:ce:51:63:59:b0:25:5b:cf:03:ca:1a:59:a7:b5:61:bc:64:
94:3d:a3:22:8e:d8:1a:a6:a6:b6:4a:22:e7:d5:84:95:3e:07:
af:fe:ab:fa:6c:73:f4:76:4c:8d:ea:5a:78:63:0a:86:43:5e:
d4:45:bf:bf:95:dc:47:a4:93:28:9d:bf:98:ea:ba:80:2c:6a:
96:95:c5:21:c0:e6:c0:55:b6:7f:49:f6:ee:34:80:29:e8:57:
06:d1:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:46:57 2024 by rpki-client on console.sobornost.net