Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_QYPBWos9LCpRn_GOKnYbGbXqm4.roa
File: _QYPBWos9LCpRn_GOKnYbGbXqm4.roa (raw, json)
Hash identifier: Odn9OIxEUwf2lU9Bz/iwnmr4F3zXLuGPbqr3oWRlV1c=
Subject key identifier: FD:06:0F:05:6A:2C:F4:B0:A9:46:7F:C6:38:A9:D8:6C:66:D7:AA:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B4D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_QYPBWos9LCpRn_GOKnYbGbXqm4.roa
Signing time: Sun 28 Apr 2024 23:53:30 +0000
ROA not before: Sun 28 Apr 2024 23:53:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19277 (0x4b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 23:53:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD060F056A2CF4B0A9467FC638A9D86C66D7AA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:53:37:6b:38:99:cd:a1:3a:d8:c5:b5:93:
af:13:c4:9a:58:f0:ba:3d:34:60:79:e2:9a:6a:86:
0b:6e:f9:01:16:00:24:9d:e8:68:fe:9e:0c:d6:9a:
5c:57:82:c9:5d:78:98:ef:19:2b:30:29:b9:64:73:
98:30:b6:de:c7:12:8e:1e:ab:95:2e:f8:2e:06:0c:
19:d5:4d:93:52:a3:18:67:94:a0:d0:b3:92:65:cd:
cc:9b:7a:f6:30:b6:01:98:da:b6:8e:ac:01:6c:f9:
18:cd:79:0e:1a:45:22:b0:f6:0b:83:9d:f8:f8:23:
ef:03:ef:17:df:f6:21:dc:8a:3e:8d:29:7e:81:c0:
e3:5f:75:78:9d:df:9e:c1:a3:39:fa:cf:25:73:f4:
e7:52:c3:71:82:6b:61:7e:b1:80:d7:f7:8e:e4:69:
8d:d3:26:bb:b2:7c:36:57:fe:b1:37:17:96:15:81:
f4:39:9c:fa:d1:ab:f4:27:4d:25:c3:2e:59:b7:8d:
d8:12:3f:9a:18:5c:88:d5:da:fe:12:17:5b:f2:67:
9f:95:99:3d:bb:e9:60:97:b3:03:39:01:c8:c7:a2:
63:e1:29:99:47:1c:3e:c7:55:a8:d3:d0:b7:f6:28:
35:bf:e9:0e:42:e8:c0:df:81:d7:6b:7e:6d:56:e0:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:06:0F:05:6A:2C:F4:B0:A9:46:7F:C6:38:A9:D8:6C:66:D7:AA:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_QYPBWos9LCpRn_GOKnYbGbXqm4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
36:46:c2:ef:fc:71:28:68:1b:a8:66:f3:73:69:0d:94:27:db:
d6:c9:15:f0:39:8a:96:b3:77:b3:84:e2:87:88:d9:3b:97:fc:
dc:ac:bf:46:03:70:08:c4:37:42:8d:8e:23:4d:4f:18:50:03:
84:f0:a5:13:11:d1:ac:16:63:59:f3:b1:e6:c8:99:7f:5d:8e:
c1:d5:3a:cf:a9:77:e3:95:bd:68:1c:d5:5b:eb:ff:ea:c8:a6:
3a:99:25:e6:28:39:23:3c:91:0e:87:9c:89:19:3b:18:39:72:
95:43:77:fe:17:19:0c:ab:8d:87:a6:a7:89:1a:43:89:d5:9f:
31:df:f2:f1:62:e4:0b:7a:ba:b2:78:81:5d:d6:a0:9e:2c:a7:
f1:ba:a1:d7:be:fb:2c:b0:96:07:c0:d1:93:0c:22:6a:75:05:
76:df:cc:f4:12:c1:25:fa:1d:12:e2:0d:a3:b2:5b:74:98:cd:
b7:1d:01:6f:25:b4:3a:7a:ee:db:ca:2c:c6:52:43:d1:0f:72:
3a:ab:b5:c7:d9:85:e4:dd:df:98:fa:0c:95:ac:05:13:d0:da:
d6:e1:24:4d:98:1b:de:4a:e9:51:82:d1:63:96:8f:80:74:34:
59:57:a5:be:75:31:92:69:9f:cd:92:85:24:f5:fb:45:a3:18:
73:c6:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:52 2024 by rpki-client on console-ams.rpki-client.org