Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pnZMNb1aumDEUYMQ_fE1rzkZMpM.roa
File: pnZMNb1aumDEUYMQ_fE1rzkZMpM.roa (raw, json)
Hash identifier: TQtEwgOk7IzhwnAq1THcS4fU30qVpwIrn9eVXXcjupk=
Subject key identifier: A6:76:4C:35:BD:5A:BA:60:C4:51:83:10:FD:F1:35:AF:39:19:32:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3821
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pnZMNb1aumDEUYMQ_fE1rzkZMpM.roa
Signing time: Wed 03 Apr 2024 10:22:22 +0000
ROA not before: Wed 03 Apr 2024 10:22:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14369 (0x3821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 10:22:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A6764C35BD5ABA60C4518310FDF135AF39193293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:b8:77:ea:cf:75:ef:9c:16:c7:90:67:f0:
25:91:e2:4e:f6:27:fd:fb:6b:59:f3:f7:67:56:79:
8b:8f:ea:db:4b:c6:cf:cc:ca:43:b3:a0:ff:6e:54:
25:9b:cf:8e:f7:74:7e:f5:ac:1d:fe:92:be:09:a0:
d3:d6:0a:1d:3a:4d:ac:b2:84:1b:a4:48:1f:49:e4:
88:e4:c1:b1:40:9d:c3:45:95:98:09:00:32:ea:79:
b1:6c:2d:60:5a:7a:85:77:09:59:74:0e:22:3e:36:
34:2c:03:2d:c5:35:e2:a3:98:6b:12:9a:ea:93:54:
0d:19:e8:00:5d:ea:58:43:fe:fa:a8:d8:31:73:80:
d1:b6:e4:b3:bc:da:67:12:1f:d2:61:6c:84:4a:40:
3a:c1:57:33:00:7b:b7:fd:f5:f9:10:37:52:2d:88:
3d:26:cc:84:60:51:77:a2:fe:96:3d:4a:cc:a1:5c:
5e:1d:d4:14:d6:3f:ba:31:2c:b1:ea:11:42:a4:8f:
be:5e:df:b0:c2:c8:bc:4d:3a:3a:7d:1a:65:ee:89:
d4:1e:fa:29:cb:e8:75:6d:3b:9f:8b:8d:d7:63:fe:
b0:77:ef:7a:f9:0c:1e:7a:39:66:c8:77:39:e0:3d:
89:f4:d8:8d:a5:65:9f:2d:2d:3f:ac:79:29:60:d6:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:4C:35:BD:5A:BA:60:C4:51:83:10:FD:F1:35:AF:39:19:32:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pnZMNb1aumDEUYMQ_fE1rzkZMpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
89:e9:38:61:5e:bc:12:7b:b9:ab:b2:47:cf:fb:ee:76:4a:ad:
97:e7:63:cd:de:02:1c:0c:c0:4c:84:ed:2a:21:d4:6c:41:22:
80:13:1b:74:76:bd:5d:1c:5c:79:c3:a0:1e:10:c7:46:b2:a2:
29:40:f2:f2:ba:9b:b5:9d:58:0a:fd:03:e9:20:77:69:2a:13:
1e:4e:1c:79:cc:6a:7e:32:9a:d8:6b:81:27:d9:60:24:ff:59:
99:8e:52:1f:dd:a1:7b:2a:db:30:cb:8a:d6:bf:01:66:21:a8:
f6:1b:15:5d:a3:7e:bf:f1:70:25:20:2a:4d:d9:ea:41:d9:56:
6f:ab:b0:91:4c:7e:f3:a5:a0:dc:df:80:7b:c9:fc:73:63:da:
e6:e1:41:f8:ac:e2:35:3b:cf:e1:8f:8d:c4:74:07:7c:eb:ef:
c2:85:be:0a:82:6e:0c:fe:53:52:a9:f9:60:12:a7:1f:42:f6:
88:5c:b8:75:3d:cc:17:38:52:0e:07:36:a9:9c:21:7e:47:32:
9a:f2:7a:85:02:d9:a6:8e:95:c4:2b:b5:bb:08:09:93:87:b8:
e5:56:fe:24:93:02:46:ef:e5:79:d6:81:51:ee:f6:ee:49:d7:
fd:51:79:7f:40:6a:85:14:10:27:bf:a6:7f:a5:07:a4:3f:c9:
15:c8:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 16:33:21 2024 by rpki-client on console.sobornost.net