Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Q9S8iOSddLA2leQbLjHjT0Gf17k.roa
File: Q9S8iOSddLA2leQbLjHjT0Gf17k.roa (raw, json)
Hash identifier: TZ890mMQHk2Iwk7P6ez6JiVilQyXy8Cqf15O3t5poW4=
Subject key identifier: 43:D4:BC:88:E4:9D:74:B0:36:95:E4:1B:2E:31:E3:4F:41:9F:D7:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43C9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q9S8iOSddLA2leQbLjHjT0Gf17k.roa
Signing time: Thu 18 Apr 2024 23:22:59 +0000
ROA not before: Thu 18 Apr 2024 23:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17353 (0x43c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 23:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=43D4BC88E49D74B03695E41B2E31E34F419FD7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:04:29:4f:4b:78:d5:fe:36:83:a6:78:30:
56:c4:24:df:c4:85:b8:fc:71:ce:21:97:e3:39:9c:
7d:c6:51:f3:be:27:4d:07:f4:e0:16:72:b0:38:4f:
62:49:9d:4e:3e:6c:97:72:0d:39:2e:a3:67:c4:65:
8e:4b:67:1e:1c:56:96:be:d5:e9:2e:0f:1a:e2:4a:
4e:5d:5d:4b:0d:3e:4d:e4:f2:19:f7:c0:0c:e3:42:
40:ad:c6:cc:61:12:5c:39:01:f5:bd:d1:fa:e2:63:
f9:9e:53:64:50:cc:bc:ea:53:4e:24:9b:aa:18:08:
1e:1f:6a:ab:54:ad:f4:a3:52:8a:b8:9a:9c:3c:75:
19:63:c6:70:ee:c3:04:51:65:95:65:97:3e:8c:1f:
96:65:38:1a:7e:20:d5:cb:92:8f:ea:41:b2:94:93:
f7:88:cb:20:67:84:84:cc:a0:c8:37:9b:55:c5:be:
f4:f0:92:88:1c:ed:fd:97:09:3b:27:77:26:25:c5:
f3:43:71:aa:57:33:93:08:0e:d3:fa:b8:86:25:ad:
c8:63:1c:6c:1b:9c:61:db:69:f1:67:bd:74:09:9e:
26:0c:25:86:07:5d:00:c1:c7:61:f8:b5:f8:8a:a1:
8d:61:c0:a3:e9:89:ad:e8:a5:60:b3:5b:8f:43:69:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D4:BC:88:E4:9D:74:B0:36:95:E4:1B:2E:31:E3:4F:41:9F:D7:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q9S8iOSddLA2leQbLjHjT0Gf17k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:b2:96:1e:80:e2:61:e1:d0:8f:25:bd:cf:2f:70:af:1f:21:
6c:05:e0:ca:56:a6:42:4c:e6:e7:1b:33:b6:13:28:60:88:00:
47:55:b7:9f:97:57:34:18:43:da:0a:14:38:ec:c7:30:66:3c:
26:69:0a:58:a1:9c:6c:70:06:9c:45:c6:f7:e5:da:b6:2f:fd:
61:bf:b6:c4:30:1a:91:80:a3:94:aa:42:ae:67:88:35:66:55:
9a:d4:5e:cd:6a:cb:3f:6c:4b:57:1b:41:9e:c0:ba:68:86:a8:
b7:91:0e:a8:db:77:39:e0:7c:ea:8a:46:c4:c4:c8:23:98:a6:
d3:36:79:bb:da:d4:23:ae:39:e2:cd:a6:06:fe:0d:0a:10:be:
4a:c4:06:69:f2:92:b3:de:ef:5f:c9:e1:58:e5:31:ff:f9:9e:
d3:d0:db:54:86:ec:18:28:81:d4:ba:5c:39:27:07:57:7f:37:
d1:a4:d8:98:f8:1b:ad:8d:2d:52:fe:e5:bf:d2:ec:72:5e:10:
6a:b5:ce:45:05:10:4f:2b:cb:33:57:f2:96:b9:94:46:40:7f:
d6:f3:00:5a:c9:5e:5f:80:f1:e9:02:79:c4:bd:7e:c2:d1:a3:
58:6a:53:47:4b:6c:68:c8:fe:9d:86:13:ca:e9:81:03:7c:c1:
0a:a1:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:40 2024 by rpki-client on console-ams.rpki-client.org