Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/53EWOd2KvpsQpkkuqlo_FOcisYE.roa
File: 53EWOd2KvpsQpkkuqlo_FOcisYE.roa (raw, json)
Hash identifier: bauoQ2Jlk4xy4GFY0bRGS691CVlrrM39gqQPE5/Ar6s=
Subject key identifier: E7:71:16:39:DD:8A:BE:9B:10:A6:49:2E:AA:5A:3F:14:E7:22:B1:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D31
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/53EWOd2KvpsQpkkuqlo_FOcisYE.roa
Signing time: Wed 10 Apr 2024 04:22:38 +0000
ROA not before: Wed 10 Apr 2024 04:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15665 (0x3d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 04:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E7711639DD8ABE9B10A6492EAA5A3F14E722B181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:33:b9:25:59:b9:16:5b:7f:80:ae:80:9a:
af:df:ba:ee:3b:e2:95:71:45:c4:00:8f:9a:88:3c:
76:ed:30:5f:07:28:2a:22:fa:1a:a3:4d:d5:4b:9f:
85:c4:3b:0b:60:ca:e3:c0:bd:a9:d2:fe:2b:b0:63:
9b:0c:97:c0:5f:f0:f2:62:fc:ba:3e:1b:0e:bd:61:
4f:bb:76:b8:81:fa:c6:3b:50:e2:ec:68:7f:04:fa:
ac:e0:ba:23:11:f8:dc:5b:f4:3d:2d:01:81:fc:64:
0d:77:aa:63:1b:d7:ff:1c:80:7a:19:a3:b2:bc:0f:
74:87:ac:ac:9d:21:d0:c1:28:da:70:ca:7f:da:fb:
7d:68:55:69:5f:e3:8a:91:a9:fd:43:3d:1a:a1:89:
bf:2e:ce:33:7d:f7:91:46:08:df:ef:fe:61:4c:66:
91:a8:8f:fb:51:aa:d6:c5:bb:7e:3f:50:00:c5:00:
c6:2e:e7:84:d1:93:5a:92:d4:1f:c7:32:55:21:df:
e1:10:04:f0:34:81:38:d5:dc:d8:63:b3:f2:53:bc:
3c:10:77:98:16:74:1d:16:fa:28:9b:bb:bb:00:88:
86:1e:7b:25:81:32:c4:58:19:c4:13:3b:01:53:c6:
6b:29:b3:1b:a4:c7:82:1c:63:59:8e:f6:cd:20:7a:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:16:39:DD:8A:BE:9B:10:A6:49:2E:AA:5A:3F:14:E7:22:B1:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/53EWOd2KvpsQpkkuqlo_FOcisYE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
73:17:ee:a1:98:fc:6a:c2:4b:a0:eb:ed:18:d3:7d:e2:57:0d:
4b:b7:13:86:21:31:0b:50:cc:56:3e:15:35:93:3d:e2:3a:22:
ef:1c:f5:ca:64:32:18:f2:a5:fd:3b:99:98:5e:f1:be:b0:0f:
4e:68:f1:66:eb:8f:90:9a:82:f7:95:f1:2b:af:89:f0:85:c8:
f6:76:d7:b6:76:7a:64:06:96:df:a7:46:f4:d7:96:45:29:74:
89:9b:20:ce:88:ce:cc:72:29:83:06:30:c2:68:52:18:d5:6e:
66:ab:dd:fb:fc:0a:c8:38:f3:5a:40:e2:3b:c3:08:d1:75:24:
ef:bc:1e:09:a3:7f:a4:21:4d:c0:28:57:18:7d:f8:64:ea:60:
15:8e:16:07:d0:10:c1:f5:26:c7:8c:53:6a:af:7f:b5:44:19:
37:a8:44:38:38:4c:d8:ad:89:dd:ef:bc:27:ee:8c:57:44:41:
49:82:a1:d4:f0:21:5b:f1:8e:78:fc:00:7f:a5:ad:ba:58:67:
94:65:2f:91:aa:65:81:19:38:6d:a8:de:86:e9:e3:e5:e2:69:
41:8d:fb:3e:24:82:f8:cc:ac:64:7c:e4:49:94:ae:87:2d:98:
c8:6d:40:fa:4d:4e:a6:fe:93:27:9c:40:5f:d0:03:cf:0f:3d:
b0:06:31:8f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAw
NDIyMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU3NzExNjM5REQ4QUJF
OUIxMEE2NDkyRUFBNUEzRjE0RTcyMkIxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZdzO5JVm5Flt/gK6Amq/fuu474pVxRcQAj5qIPHbtMF8HKCoi
+hqjTdVLn4XEOwtgyuPAvanS/iuwY5sMl8Bf8PJi/Lo+Gw69YU+7driB+sY7UOLs
aH8E+qzguiMR+Nxb9D0tAYH8ZA13qmMb1/8cgHoZo7K8D3SHrKydIdDBKNpwyn/a
+31oVWlf44qRqf1DPRqhib8uzjN995FGCN/v/mFMZpGoj/tRqtbFu34/UADFAMYu
54TRk1qS1B/HMlUh3+EQBPA0gTjV3Nhjs/JTvDwQd5gWdB0W+iibu7sAiIYeeyWB
MsRYGcQTOwFTxmspsxukx4IcY1mO9s0geg0bAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU53EWOd2KvpsQpkkuqlo/FOcisYEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzUzRVdPZDJLdnBzUXBr
a3VxbG9fRk9jaXNZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHMX7qGY/GrCS6Dr
7RjTfeJXDUu3E4YhMQtQzFY+FTWTPeI6Iu8c9cpkMhjypf07mZhe8b6wD05o8Wbr
j5CagveV8SuvifCFyPZ217Z2emQGlt+nRvTXlkUpdImbIM6IzsxyKYMGMMJoUhjV
bmar3fv8Csg481pA4jvDCNF1JO+8Hgmjf6QhTcAoVxh9+GTqYBWOFgfQEMH1JseM
U2qvf7VEGTeoRDg4TNitid3vvCfujFdEQUmCodTwIVvxjnj8AH+lrbpYZ5RlL5Gq
ZYEZOG2o3obp4+XiaUGN+z4kgvjMrGR85EmUroctmMhtQPpNTqb+kyecQF/QA88P
PbAGMY8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:14 2024 by rpki-client on console-ams.rpki-client.org