Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/y7UDmvv8P7sGphWxWZwrOnDHxco.roa
File: y7UDmvv8P7sGphWxWZwrOnDHxco.roa (raw, json)
Hash identifier: rb7yZf8TSp7jDJByUVZS5jmbRHSNVxK9qvt5IxyGDJE=
Subject key identifier: CB:B5:03:9A:FB:FC:3F:BB:06:A6:15:B1:59:9C:2B:3A:70:C7:C5:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 570D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y7UDmvv8P7sGphWxWZwrOnDHxco.roa
Signing time: Tue 14 May 2024 15:54:10 +0000
ROA not before: Tue 14 May 2024 15:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22285 (0x570d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 15:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CBB5039AFBFC3FBB06A615B1599C2B3A70C7C5CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:bf:5e:eb:06:2c:10:40:a7:80:4f:4a:1a:
a1:a0:d0:c3:c9:2f:a9:e2:79:c4:fa:e1:e3:0f:0b:
2b:c4:e4:81:e8:dd:57:02:51:72:e7:54:dc:a7:71:
95:91:92:58:f4:ae:d8:d6:ac:15:f9:cc:aa:c6:6c:
71:90:1d:35:37:07:23:a1:fc:21:17:63:d3:5a:f7:
bb:7e:8f:d1:23:a4:9d:7e:c2:97:b6:99:ff:d2:d6:
2f:f9:fe:62:44:07:3b:c3:87:68:d9:9f:03:5b:a7:
51:9c:b7:c5:d3:52:2f:2b:64:c6:f5:12:1b:55:eb:
bd:68:44:ec:42:7d:89:0f:c8:b9:c3:51:aa:b2:54:
b4:7e:25:d1:f2:00:07:e1:e4:1c:8a:43:e7:33:01:
90:43:69:50:0c:22:9f:17:22:c3:8b:e2:58:7c:93:
9e:dd:fb:7b:7d:77:e2:ae:e7:6c:df:d9:f9:3b:89:
c8:d1:c0:97:55:29:04:6d:e8:62:7c:16:fa:4d:af:
c1:c6:0c:f0:37:41:ee:c9:3d:4b:48:af:56:32:2d:
c7:53:a2:fd:dc:16:08:21:20:82:8e:a4:81:a1:4d:
cd:9d:e2:24:42:86:cf:47:da:69:dd:79:5c:7e:82:
94:c2:60:50:85:88:c8:27:9d:2a:a8:aa:e1:d8:39:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:03:9A:FB:FC:3F:BB:06:A6:15:B1:59:9C:2B:3A:70:C7:C5:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y7UDmvv8P7sGphWxWZwrOnDHxco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:69:5c:d4:26:94:56:83:75:e1:f5:be:d7:a5:b4:1a:9a:82:
b1:1e:86:65:59:4f:12:55:e1:cf:bf:73:1d:d8:aa:45:36:21:
cb:75:69:7f:14:1f:35:b6:42:73:d4:78:eb:b9:24:65:10:01:
9c:18:02:67:21:2c:32:be:38:9e:c8:4c:71:19:b2:2b:35:6d:
b5:fe:03:b3:94:ef:03:53:fb:c3:59:49:ba:fc:4c:1e:b2:7f:
e9:4d:68:24:3d:22:dc:4c:3b:a3:de:4b:c2:5f:e1:69:5c:a1:
f7:6d:82:44:56:61:5a:5f:8e:4e:a1:c6:39:94:11:3c:da:9b:
01:f0:31:53:f5:48:28:8f:0c:93:cd:b9:3c:53:36:b5:ad:75:
36:a7:1a:c9:a7:20:1a:79:7b:08:25:8f:46:d6:f1:fa:84:24:
e1:d5:10:8d:e1:30:fa:5d:99:4b:4a:fd:ce:f7:bf:c4:3a:8c:
09:da:e6:a7:f2:e1:31:9c:ab:07:4b:d7:e6:81:b1:85:c2:0f:
94:97:dd:b0:74:19:28:8b:dc:b9:e3:b8:39:8c:e1:ae:57:41:
86:86:7b:80:19:3b:80:d1:be:14:a6:22:0e:8b:c3:9f:01:9e:
e0:60:f9:4d:bb:25:6d:33:6a:54:e4:f8:0e:db:5f:f1:ed:92:
c5:14:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 10:51:34 2024 by rpki-client on console.sobornost.net