Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hZbeSw1Ydh097rEATIuz_zVUSyQ.roa
File: hZbeSw1Ydh097rEATIuz_zVUSyQ.roa (raw, json)
Hash identifier: bEW+xIJZhSFKYDVHhhSH+RHC/c/BZ3CE+qGp4ZI2dBc=
Subject key identifier: 85:96:DE:4B:0D:58:76:1D:3D:EE:B1:00:4C:8B:B3:FF:35:54:4B:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D45
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hZbeSw1Ydh097rEATIuz_zVUSyQ.roa
Signing time: Wed 01 May 2024 14:53:37 +0000
ROA not before: Wed 01 May 2024 14:53:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19781 (0x4d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 14:53:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8596DE4B0D58761D3DEEB1004C8BB3FF35544B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:1a:c1:a8:f0:68:db:d3:35:45:49:7f:95:
d0:c5:a2:da:f2:f0:b0:de:d3:5c:99:48:a2:ff:c9:
c7:47:2b:fa:47:ac:bc:68:9a:22:0f:54:67:57:17:
f3:57:de:78:c5:52:de:b7:83:4d:71:d7:5d:c2:0f:
93:d2:bf:ea:88:88:73:96:eb:e2:3a:b1:4d:a8:2f:
ae:60:6e:52:98:a1:18:82:a7:4b:d4:0c:6f:0c:7d:
8f:a6:ec:bc:55:ca:19:a1:72:8f:d4:b8:ea:21:f0:
d1:5e:b5:ed:1a:05:d3:bd:f7:17:05:61:6d:34:7e:
96:8a:94:8a:44:df:46:76:3a:ff:89:8d:53:90:8c:
3a:4e:32:c3:c7:42:99:03:32:e5:ab:6f:47:b2:e5:
69:07:82:4c:ce:cb:2a:dc:2e:1c:33:c0:bb:35:10:
d6:a0:ae:d3:b7:18:a2:84:d1:59:a6:2f:2d:c8:3a:
a3:84:d7:7b:0e:49:6b:40:77:f5:72:1b:8d:e5:c6:
68:d0:c8:6a:7d:1c:21:a1:20:50:5c:0d:f7:d1:f6:
31:9a:88:2d:f2:72:19:e3:3c:dd:b2:a1:79:0b:d5:
81:90:5d:31:c4:4e:43:80:89:ea:e5:ad:74:b6:72:
1d:69:0d:f0:43:07:34:cb:d5:27:59:94:27:b2:78:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:DE:4B:0D:58:76:1D:3D:EE:B1:00:4C:8B:B3:FF:35:54:4B:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hZbeSw1Ydh097rEATIuz_zVUSyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:50:a5:0c:22:86:4f:03:c8:eb:79:40:c7:fe:75:6c:0c:b2:
12:a3:7d:74:fd:31:84:fe:5f:47:56:50:f9:29:2e:8d:19:bf:
9b:f9:28:39:e3:12:78:c1:cb:c7:0f:da:7a:fe:e4:03:ff:54:
6e:4c:7e:59:83:6b:c3:22:48:ae:68:5a:9b:65:9f:7a:b0:cf:
b3:3b:0e:84:56:1c:a9:bc:f9:81:7d:0c:90:02:72:bd:6b:c3:
80:91:e2:d5:22:98:82:fc:2a:86:0f:87:36:2d:fc:89:a2:46:
43:0b:ec:e7:fe:dc:e2:58:54:52:12:18:2b:8d:bb:38:7d:db:
a8:09:1c:28:e3:41:90:c7:ac:0d:15:80:f2:5b:32:62:84:86:
49:f6:1a:28:04:7f:32:7a:f4:81:e6:64:a8:1b:a9:5e:22:27:
eb:2a:09:0f:a0:81:fd:27:fc:cd:f7:31:1d:9b:50:60:10:d4:
55:22:75:f7:54:84:f6:8f:25:e0:e8:c4:aa:f5:1d:11:84:98:
fc:5d:dc:23:f0:e4:ab:57:ce:08:30:83:4b:45:f9:20:18:13:
e5:72:5c:de:2a:d6:f7:70:6d:1c:f0:da:19:8a:2b:86:6b:df:
3e:95:e9:1f:68:31:9a:d0:75:f9:54:f1:27:d7:6b:39:c1:4d:
88:6f:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:19:07 2024 by rpki-client on console.sobornost.net