Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7nnWLNrR-0uZEuDMYKeUGoVGHHE.roa
File: 7nnWLNrR-0uZEuDMYKeUGoVGHHE.roa (raw, json)
Hash identifier: 7Up9JCn88ezlJ/TAymRxFgNcpP8D7WjLHN15ANiBbSQ=
Subject key identifier: EE:79:D6:2C:DA:D1:FB:4B:99:12:E0:CC:60:A7:94:1A:85:46:1C:71
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FDD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7nnWLNrR-0uZEuDMYKeUGoVGHHE.roa
Signing time: Sun 05 May 2024 01:53:59 +0000
ROA not before: Sun 05 May 2024 01:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20445 (0x4fdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 01:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EE79D62CDAD1FB4B9912E0CC60A7941A85461C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:af:26:83:df:e4:38:3a:2b:73:55:38:4c:
32:de:e3:6e:b6:cd:52:36:18:18:a6:07:46:89:3c:
79:bb:bc:c7:c4:85:26:6a:38:fb:97:27:47:be:e1:
04:4d:c0:a7:bc:4e:9f:eb:ad:e9:70:01:6e:c9:f3:
c1:e6:15:b0:e3:55:f2:ef:ae:c3:82:d2:26:c5:ae:
22:11:aa:4c:38:d6:f7:6f:54:16:40:76:a1:e5:78:
9f:49:c6:77:51:28:ef:8c:28:ea:75:e3:05:af:7f:
73:a8:d5:31:35:7b:c0:f4:98:72:a7:c0:4e:c4:de:
d3:f8:09:e7:32:64:65:ff:ad:f7:50:a1:3c:0b:37:
05:cd:59:b6:7d:89:a3:4a:a1:71:8b:9e:e0:de:d5:
92:92:a0:a8:f8:f5:e1:01:97:a0:a7:ff:69:e9:34:
30:1f:c3:19:e3:db:53:80:78:74:b7:20:03:66:2a:
07:0c:9a:31:0e:83:a5:65:a2:8e:d7:8f:ab:c2:42:
d4:bb:bc:07:51:e1:4f:a6:d5:cc:d6:5d:bf:7e:fc:
f4:72:d5:d4:7e:11:91:25:ac:23:f2:20:f8:82:68:
a5:9e:e4:4e:e9:fd:08:5b:54:af:e5:42:d0:43:a7:
30:f7:cb:b5:af:1e:f9:33:b7:39:ef:ab:a0:74:9a:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:D6:2C:DA:D1:FB:4B:99:12:E0:CC:60:A7:94:1A:85:46:1C:71
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7nnWLNrR-0uZEuDMYKeUGoVGHHE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:d2:48:38:ee:a7:91:c2:6c:e3:da:01:7f:bf:38:b9:f1:22:
c6:55:60:e9:f3:73:02:a7:a7:6d:75:98:47:2d:59:2f:c6:d6:
e6:3a:99:de:c5:d9:4e:c6:8e:49:8b:27:14:72:60:05:79:1b:
62:72:36:9f:7e:0c:47:46:c0:0f:60:82:7b:ca:94:fa:3d:6b:
21:f3:27:c1:ae:08:89:eb:e3:c8:0f:f1:dc:85:39:71:8c:b1:
c7:4a:cf:a5:f1:83:92:7a:9c:a4:46:2b:02:bb:82:4f:66:6a:
78:15:e4:96:d0:49:48:e5:87:ff:24:09:32:a2:56:66:fb:92:
bb:35:25:59:46:87:98:2f:aa:c2:18:3c:7a:0e:78:43:7e:31:
29:a3:29:1f:82:9d:60:24:04:e3:72:1e:5b:c2:7b:b7:3e:b4:
45:a1:f0:b0:ca:ee:28:00:27:5e:88:8a:8d:4b:83:31:72:0a:
5d:58:6b:f0:22:60:76:03:35:68:cd:c0:4c:e2:86:f0:0c:19:
13:ec:0c:4c:9f:84:b4:9c:2f:8f:e8:91:6f:2a:46:e1:8d:09:
ad:56:04:64:56:c5:ea:5e:93:71:95:5c:e5:94:7c:53:ba:8c:
3e:d9:5d:56:6a:ba:97:e3:eb:ac:2d:91:14:eb:5f:8e:65:48:
0a:02:09:19
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICT90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDUw
MTUzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVFNzlENjJDREFEMUZC
NEI5OTEyRTBDQzYwQTc5NDFBODU0NjFDNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa1K8mg9/kODorc1U4TDLe4262zVI2GBimB0aJPHm7vMfEhSZq
OPuXJ0e+4QRNwKe8Tp/rrelwAW7J88HmFbDjVfLvrsOC0ibFriIRqkw41vdvVBZA
dqHleJ9JxndRKO+MKOp14wWvf3Oo1TE1e8D0mHKnwE7E3tP4CecyZGX/rfdQoTwL
NwXNWbZ9iaNKoXGLnuDe1ZKSoKj49eEBl6Cn/2npNDAfwxnj21OAeHS3IANmKgcM
mjEOg6Vloo7Xj6vCQtS7vAdR4U+m1czWXb9+/PRy1dR+EZElrCPyIPiCaKWe5E7p
/QhbVK/lQtBDpzD3y7WvHvkztznvq6B0mmeFAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU7nnWLNrR+0uZEuDMYKeUGoVGHHEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzdubldMTnJSLTB1WkV1
RE1ZS2VVR29WR0hIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKnSSDjup5HCbOPa
AX+/OLnxIsZVYOnzcwKnp211mEctWS/G1uY6md7F2U7GjkmLJxRyYAV5G2JyNp9+
DEdGwA9ggnvKlPo9ayHzJ8GuCInr48gP8dyFOXGMscdKz6Xxg5J6nKRGKwK7gk9m
angV5JbQSUjlh/8kCTKiVmb7krs1JVlGh5gvqsIYPHoOeEN+MSmjKR+CnWAkBONy
HlvCe7c+tEWh8LDK7igAJ16Iio1LgzFyCl1Ya/AiYHYDNWjNwEzihvAMGRPsDEyf
hLScL4/okW8qRuGNCa1WBGRWxepek3GVXOWUfFO6jD7ZXVZqupfj66wtkRTrX45l
SAoCCRk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org