Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gByLWa9pKjQPGGgqBO_cTYeWaBs.roa
File: gByLWa9pKjQPGGgqBO_cTYeWaBs.roa (raw, json)
Hash identifier: tkFPHDRwxZJuvDrM4bxKJgXG9UQruHYRYvaCBAPzhWc=
Subject key identifier: 80:1C:8B:59:AF:69:2A:34:0F:18:68:2A:04:EF:DC:4D:87:96:68:1B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3999
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gByLWa9pKjQPGGgqBO_cTYeWaBs.roa
Signing time: Fri 05 Apr 2024 09:22:30 +0000
ROA not before: Fri 05 Apr 2024 09:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14745 (0x3999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 09:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=801C8B59AF692A340F18682A04EFDC4D8796681B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:06:65:1a:f2:4f:ec:e2:6a:a5:8b:01:be:
39:5c:93:8d:89:28:c2:43:72:46:1c:7a:b9:99:f8:
e7:c9:15:40:51:db:44:97:17:f7:66:3e:71:5f:f6:
45:87:ae:95:f4:c3:e3:ea:27:be:9f:19:e0:2e:79:
a4:73:a7:33:b2:ff:b1:dd:9e:20:61:a1:2f:5d:77:
b1:1f:9e:23:a9:be:aa:fc:54:31:91:09:ae:64:aa:
1a:4b:9b:50:60:06:a4:df:fe:07:ae:8d:26:9f:fd:
54:2a:39:dc:49:86:bc:72:24:40:e1:15:25:24:97:
6a:78:cd:02:09:12:b0:af:d9:fb:be:f3:8f:13:92:
4e:80:5e:b9:a9:f0:1b:61:1e:57:7a:62:93:3e:09:
ae:7f:74:2c:48:47:ac:a3:78:5f:65:5c:ab:53:b3:
e8:50:c6:ba:47:7d:ea:1b:65:de:cf:0d:87:0e:35:
45:6a:15:08:84:c4:af:dc:27:a4:2c:96:e4:f3:3f:
08:8f:ac:2c:af:7d:79:05:dc:de:21:df:79:89:a5:
fa:9f:23:57:43:68:af:eb:46:59:90:a6:d2:68:8e:
bd:2d:1c:c8:0b:af:c8:b0:d2:19:20:56:06:9f:16:
1d:a3:89:ef:6c:29:42:e9:7d:a5:83:0e:4d:5f:a6:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1C:8B:59:AF:69:2A:34:0F:18:68:2A:04:EF:DC:4D:87:96:68:1B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gByLWa9pKjQPGGgqBO_cTYeWaBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:3e:12:bc:2a:ea:75:68:3b:9e:d7:47:66:18:ca:32:e4:13:
73:15:59:72:32:89:ef:05:52:a4:9a:1a:2f:54:80:ed:ca:92:
09:21:bf:ec:11:10:e9:2d:10:ba:19:93:88:bc:f5:11:66:38:
67:eb:1e:29:2e:9e:5b:93:09:bb:c2:6f:1b:68:fc:53:f0:43:
0b:0d:8b:a9:4b:4e:a3:ed:27:13:4f:18:40:14:da:0d:ba:29:
bd:a2:cd:7b:91:4c:8d:93:68:92:9b:b9:56:71:b6:e6:a1:86:
5d:bc:3c:5f:b6:4e:b3:41:87:f0:56:e0:90:d2:b5:ba:fb:76:
54:60:51:38:31:f1:be:b8:cb:fe:c4:7e:27:60:0e:47:03:0b:
37:ca:a6:fa:26:56:d2:cb:a9:49:da:4c:71:28:72:33:ce:37:
4f:0c:89:38:4d:9c:4b:c5:bb:5a:a7:4b:0c:26:11:e2:69:f1:
3c:e2:d3:2b:b0:83:b5:fd:87:e1:5b:27:a1:c1:7d:a1:20:3b:
61:cb:dd:ad:51:df:be:88:0c:80:93:22:3f:5e:d5:3d:21:4b:
cc:ac:bd:03:0f:15:1f:54:bf:ac:48:7f:f8:60:66:66:b7:f9:
d4:82:b6:22:2a:f8:b3:bd:32:48:d9:9b:9b:bf:04:58:1d:10:
5a:21:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:53:53 2024 by rpki-client on console.sobornost.net