Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6WYx-zrL01FdS8ug5gPeGV6H1IY.roa
File: 6WYx-zrL01FdS8ug5gPeGV6H1IY.roa (raw, json)
Hash identifier: 214hhN6k8GIqnbShy9kqaGoZDV2qHa0KATDk5MPA6W0=
Subject key identifier: E9:66:31:FB:3A:CB:D3:51:5D:4B:CB:A0:E6:03:DE:19:5E:87:D4:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4341
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6WYx-zrL01FdS8ug5gPeGV6H1IY.roa
Signing time: Thu 18 Apr 2024 06:23:03 +0000
ROA not before: Thu 18 Apr 2024 06:23:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17217 (0x4341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 06:23:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E96631FB3ACBD3515D4BCBA0E603DE195E87D486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:82:de:ec:63:d6:c9:0c:20:07:8b:67:a2:
7f:c4:b8:1a:92:f9:9e:2a:74:d4:d2:eb:ee:c1:49:
a8:1a:b4:3e:d1:48:7e:a8:1e:05:d6:44:9b:8c:d4:
35:9d:a6:0a:77:45:4a:d0:78:e0:dc:14:08:77:cd:
e2:91:fb:83:0f:0e:e3:18:65:80:04:11:58:68:a0:
b4:d3:d9:db:13:88:02:7a:a4:fb:ff:9c:6b:f7:6c:
fc:38:0c:5f:32:27:97:03:c9:ef:17:33:d5:af:32:
3c:74:8e:d4:90:f5:ca:26:0a:52:f0:89:e1:f1:06:
64:30:01:c0:63:e4:84:a4:aa:04:55:aa:15:c8:eb:
9b:48:99:a5:8f:7c:7e:0a:58:23:58:88:51:f6:ff:
b3:6a:63:fa:b1:bf:d0:f4:e8:9c:7f:cb:b9:75:cc:
06:06:bc:f1:9e:3f:80:ee:08:03:04:dc:0f:eb:d4:
0f:d5:a0:a7:f8:f3:b4:1e:6a:6e:6d:0d:0b:9a:0c:
a1:db:ed:1a:70:33:90:7a:7b:f0:20:d8:09:cb:35:
76:1f:b5:55:a2:59:54:a5:d8:10:fc:50:89:51:49:
23:28:09:91:d9:be:14:b7:d1:ad:7d:9d:64:0e:bb:
e3:14:96:c5:9d:e1:b4:18:51:4c:7d:e8:d5:c0:94:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:31:FB:3A:CB:D3:51:5D:4B:CB:A0:E6:03:DE:19:5E:87:D4:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6WYx-zrL01FdS8ug5gPeGV6H1IY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:a0:c9:bb:ed:63:86:21:8b:00:2c:37:bb:aa:18:40:3a:de:
43:e2:f0:a7:4e:a2:ae:51:e6:17:8b:c4:07:4b:37:9a:22:b2:
2d:68:df:e1:66:e8:e0:65:c8:4a:eb:0b:84:72:52:0c:59:e4:
04:61:4a:39:6b:65:75:41:66:d0:36:26:e1:07:4d:19:2f:ab:
4d:44:66:bd:01:08:65:4d:d3:92:1f:9c:64:ff:08:3a:0d:a9:
0e:86:4d:d6:d9:25:71:1c:da:f7:52:98:2a:77:f3:00:09:ac:
99:2c:19:4d:c5:2d:e1:a9:1c:ae:e2:27:30:3a:bb:13:29:0c:
21:30:f8:d6:ab:d1:09:77:23:c9:d4:63:67:99:c4:03:3f:04:
f9:0d:81:94:07:1a:d2:4c:6e:15:1c:d3:1f:4b:0d:24:76:61:
4e:e8:c9:3e:4d:af:ea:53:f2:5e:c7:f3:4e:4e:36:be:a4:a3:
08:43:dd:22:2f:91:93:57:90:1c:bc:3a:a9:83:0a:16:ca:eb:
a6:61:69:94:72:e0:f7:01:99:cb:e0:f6:b3:a3:54:bf:3b:f9:
aa:b1:42:47:eb:3c:9b:0d:4f:e5:b2:a6:92:7e:8b:88:97:5c:
81:5e:65:e2:1c:b7:80:40:f0:b6:28:6b:e0:95:d0:2e:33:11:
54:c3:47:5b
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQ0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw
NjIzMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU5NjYzMUZCM0FDQkQz
NTE1RDRCQ0JBMEU2MDNERTE5NUU4N0Q0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+34Le7GPWyQwgB4tnon/EuBqS+Z4qdNTS6+7BSagatD7RSH6o
HgXWRJuM1DWdpgp3RUrQeODcFAh3zeKR+4MPDuMYZYAEEVhooLTT2dsTiAJ6pPv/
nGv3bPw4DF8yJ5cDye8XM9WvMjx0jtSQ9comClLwieHxBmQwAcBj5ISkqgRVqhXI
65tImaWPfH4KWCNYiFH2/7NqY/qxv9D06Jx/y7l1zAYGvPGeP4DuCAME3A/r1A/V
oKf487Qeam5tDQuaDKHb7RpwM5B6e/Ag2AnLNXYftVWiWVSl2BD8UIlRSSMoCZHZ
vhS30a19nWQOu+MUlsWd4bQYUUx96NXAlPcbAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU6WYx+zrL01FdS8ug5gPeGV6H1IYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZXWXgtenJMMDFGZFM4
dWc1Z1BlR1Y2SDFJWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKqgybvtY4YhiwAs
N7uqGEA63kPi8KdOoq5R5heLxAdLN5oisi1o3+Fm6OBlyErrC4RyUgxZ5ARhSjlr
ZXVBZtA2JuEHTRkvq01EZr0BCGVN05IfnGT/CDoNqQ6GTdbZJXEc2vdSmCp38wAJ
rJksGU3FLeGpHK7iJzA6uxMpDCEw+Nar0Ql3I8nUY2eZxAM/BPkNgZQHGtJMbhUc
0x9LDSR2YU7oyT5Nr+pT8l7H805ONr6kowhD3SIvkZNXkBy8OqmDChbK66ZhaZRy
4PcBmcvg9rOjVL87+aqxQkfrPJsNT+WyppJ+i4iXXIFeZeIct4BA8LYoa+CV0C4z
EVTDR1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org