Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bf6AO4ZTgIY0jsxNg8mcG0L00mI.roa
File: bf6AO4ZTgIY0jsxNg8mcG0L00mI.roa (raw, json)
Hash identifier: XHe65Cg5x7fMMq8jaG1s2QU9R7pCId7KYlHcV7RTURg=
Subject key identifier: 6D:FE:80:3B:86:53:80:86:34:8E:CC:4D:83:C9:9C:1B:42:F4:D2:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B3D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bf6AO4ZTgIY0jsxNg8mcG0L00mI.roa
Signing time: Sun 28 Apr 2024 21:53:38 +0000
ROA not before: Sun 28 Apr 2024 21:53:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19261 (0x4b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 21:53:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6DFE803B86538086348ECC4D83C99C1B42F4D262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:93:f7:f7:65:f2:6c:90:dc:4b:20:a3:1d:
9e:f9:be:37:98:25:7d:f7:a2:b5:3c:7d:9f:62:90:
86:d0:c5:bb:c9:16:a8:d9:e2:89:17:97:8e:2c:10:
e9:6e:c4:0b:d3:23:86:e4:79:a4:33:c3:52:bc:4b:
5d:24:87:76:78:37:60:62:33:d2:15:8e:0d:f2:38:
ef:a4:46:f7:57:3f:f8:18:30:aa:f5:79:a0:ac:cf:
0c:18:fb:0a:cf:7c:66:8f:69:db:ef:1c:e1:a3:73:
5d:8e:7b:62:49:3a:f2:47:8d:1a:ff:c5:d6:2e:f2:
21:94:3b:88:e2:d8:15:d9:6a:60:6b:d8:35:da:6f:
fe:c9:26:a0:4a:84:07:ed:a6:e1:f7:43:ec:12:d5:
a6:1f:fd:ba:9e:be:4c:90:0d:ac:48:95:d6:7c:d1:
0e:08:9d:92:4d:5d:af:d3:1e:1c:58:68:1e:de:49:
d9:d3:1b:56:2a:9d:bb:4c:9a:30:9d:95:ab:c7:f7:
25:3c:7c:6c:93:7f:e3:a7:b7:4e:ae:9b:ba:e3:a2:
ec:ad:ad:a5:40:4f:b3:f7:dd:3f:cb:61:66:e3:74:
f7:d1:ea:8f:9f:52:7e:31:47:6b:7d:85:d4:3a:d1:
01:be:4b:75:b3:2f:31:1b:a1:8f:f5:73:c2:e2:c9:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:80:3B:86:53:80:86:34:8E:CC:4D:83:C9:9C:1B:42:F4:D2:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bf6AO4ZTgIY0jsxNg8mcG0L00mI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
71:1e:16:85:92:68:d0:be:4f:04:d3:ec:1a:5b:be:a3:80:32:
bb:b2:90:ac:ed:25:ee:2e:7f:23:d1:9a:3e:09:1f:73:85:af:
e5:3f:60:9c:9a:42:d1:7d:c0:28:e3:47:92:10:6e:0a:c4:77:
01:c6:e0:04:fa:f9:c5:38:b0:fe:ae:f2:c8:12:2e:42:5e:72:
b7:65:d2:0c:8e:cf:f2:11:94:99:0e:33:ca:04:12:ca:43:22:
e2:bc:c2:52:de:6d:bc:fa:7f:f5:a3:de:2c:d4:05:91:c6:f5:
59:46:3c:7b:ed:80:d6:f7:ac:eb:7e:09:61:d2:bb:31:ec:99:
5e:36:24:bb:14:e3:11:6b:67:1d:f4:79:d5:e0:71:e4:72:fa:
fd:cb:31:31:36:2f:f9:f9:27:c8:1f:2f:16:b7:c9:19:18:a1:
a9:79:a0:21:f7:de:fc:b2:ac:41:fb:be:a2:bd:e2:c8:ca:5f:
06:7d:ce:09:3c:3a:08:a6:9c:ce:a7:86:38:a2:bc:d7:b0:51:
b3:92:74:b5:97:b8:d4:86:47:b3:ff:d7:4b:43:1a:d7:2e:1e:
8c:15:9a:5c:01:8e:f8:4d:bb:49:85:24:c9:b9:bf:66:9f:b5:
ad:87:34:da:97:b7:25:a5:a8:d8:c9:a4:8b:ca:b4:41:ef:43:
4e:95:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 06:28:42 2024 by rpki-client on console.sobornost.net