Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0RjHZVIAtfwAGNC8cnnh6jAF_pY.roa
File: 0RjHZVIAtfwAGNC8cnnh6jAF_pY.roa (raw, json)
Hash identifier: vGKM5QksBGHDP0PM78vWRcHZSBJqREIsJSjlZ81yx0Y=
Subject key identifier: D1:18:C7:65:52:00:B5:FC:00:18:D0:BC:72:79:E1:EA:30:05:FE:96
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B29
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0RjHZVIAtfwAGNC8cnnh6jAF_pY.roa
Signing time: Sun 28 Apr 2024 19:23:29 +0000
ROA not before: Sun 28 Apr 2024 19:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19241 (0x4b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 19:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D118C7655200B5FC0018D0BC7279E1EA3005FE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0e:6a:2a:77:54:71:30:dd:ff:d3:a9:ae:32:
93:a5:58:5a:4b:69:8d:ed:b1:d0:0e:9f:15:e1:54:
05:8e:47:1a:ba:2e:65:b6:59:2f:5c:44:0b:8a:87:
60:51:84:1a:8d:18:63:a2:dd:60:a2:b0:4c:3a:09:
e0:ee:19:62:0b:2b:a3:af:67:6e:45:42:56:30:15:
6c:77:7a:9e:0b:c4:7a:f7:e7:29:aa:9f:cd:42:d6:
e7:05:ce:74:ca:80:f1:33:2f:6e:1c:18:42:39:95:
60:03:0d:81:10:5c:e0:31:68:b1:68:dc:8e:35:54:
ba:3e:af:f2:d8:dc:af:c5:03:18:33:fa:32:cf:1f:
ac:80:e4:e6:fe:1f:35:6b:0d:0f:9a:11:f9:ef:29:
a9:cf:28:d3:0b:17:4c:27:98:4c:ff:7b:55:41:d8:
d9:ff:21:2a:35:88:9b:1e:76:e4:f1:b0:bd:71:13:
10:c5:31:e3:2c:f6:d7:43:18:7d:8c:ca:ea:84:ea:
53:11:cc:d5:7f:de:98:a2:d4:61:88:06:a5:a9:63:
4c:b9:c6:e9:29:4b:8f:94:39:50:87:b1:49:29:4b:
26:1e:dd:f5:04:68:5c:f1:f7:af:3c:7f:a8:00:46:
fb:07:bf:30:56:75:dd:c1:58:d9:88:0d:11:6f:4c:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:C7:65:52:00:B5:FC:00:18:D0:BC:72:79:E1:EA:30:05:FE:96
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0RjHZVIAtfwAGNC8cnnh6jAF_pY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
95:20:a1:83:56:20:a2:6f:99:46:51:fa:0d:3e:8e:03:bc:63:
4e:d4:b6:a2:3e:26:10:c5:54:a4:14:c5:1b:a6:f4:38:26:ed:
52:8a:02:42:bc:fa:10:4c:18:ca:ad:51:68:82:eb:6a:65:01:
9e:a9:6f:1f:29:72:8d:40:69:14:b1:b8:4f:23:43:dc:9b:ac:
f2:c2:a3:64:44:5a:ce:d7:f7:86:a8:47:cc:c3:82:68:a0:7e:
1f:91:bd:e8:6c:76:39:6e:85:e4:9d:a9:fe:e1:8a:88:d6:17:
dd:59:2c:74:ed:43:1e:39:ab:cb:d8:62:70:a5:d8:64:06:13:
87:88:3d:b6:b5:29:57:56:90:42:60:94:ae:5c:c0:cc:c1:b6:
49:68:fa:13:8a:08:e3:ce:93:9a:74:7c:3b:16:c4:ab:db:cd:
54:11:c1:9e:55:b3:12:9a:f5:8f:36:64:75:8b:a8:f6:42:0d:
10:cc:47:1f:68:06:51:47:c2:b0:d0:e5:7b:e7:d4:b5:c5:2a:
d4:de:0a:13:e1:c5:bf:bf:b1:0b:70:22:39:43:5e:6a:00:0c:
e2:31:b2:ce:ab:7f:ee:73:bb:14:5a:7e:6b:3e:57:f8:90:d8:
c2:ed:cb:b1:b6:4f:3a:11:e0:73:80:bc:60:28:9b:ff:8e:f0:
af:4f:a2:7f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjgx
OTIzMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQxMThDNzY1NTIwMEI1
RkMwMDE4RDBCQzcyNzlFMUVBMzAwNUZFOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsDmoqd1RxMN3/06muMpOlWFpLaY3tsdAOnxXhVAWORxq6LmW2
WS9cRAuKh2BRhBqNGGOi3WCisEw6CeDuGWILK6OvZ25FQlYwFWx3ep4LxHr35ymq
n81C1ucFznTKgPEzL24cGEI5lWADDYEQXOAxaLFo3I41VLo+r/LY3K/FAxgz+jLP
H6yA5Ob+HzVrDQ+aEfnvKanPKNMLF0wnmEz/e1VB2Nn/ISo1iJseduTxsL1xExDF
MeMs9tdDGH2MyuqE6lMRzNV/3pii1GGIBqWpY0y5xukpS4+UOVCHsUkpSyYe3fUE
aFzx9688f6gARvsHvzBWdd3BWNmIDRFvTEQ5AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU0RjHZVIAtfwAGNC8cnnh6jAF/pYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBSakhaVklBdGZ3QUdO
Qzhjbm5oNmpBRl9wWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJUgoYNWIKJvmUZR
+g0+jgO8Y07UtqI+JhDFVKQUxRum9Dgm7VKKAkK8+hBMGMqtUWiC62plAZ6pbx8p
co1AaRSxuE8jQ9ybrPLCo2REWs7X94aoR8zDgmigfh+RvehsdjluheSdqf7hiojW
F91ZLHTtQx45q8vYYnCl2GQGE4eIPba1KVdWkEJglK5cwMzBtklo+hOKCOPOk5p0
fDsWxKvbzVQRwZ5VsxKa9Y82ZHWLqPZCDRDMRx9oBlFHwrDQ5Xvn1LXFKtTeChPh
xb+/sQtwIjlDXmoADOIxss6rf+5zuxRafms+V/iQ2MLty7G2TzoR4HOAvGAom/+O
8K9Pon8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org