Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8Fzb8p8ltWmL2odNC0K2gxBUavg.roa
File: 8Fzb8p8ltWmL2odNC0K2gxBUavg.roa (raw, json)
Hash identifier: a7eqe0NCAPicp4qpPr/5GsxH+ijuOzrRj7DF80XzBsg=
Subject key identifier: F0:5C:DB:F2:9F:25:B5:69:8B:DA:87:4D:0B:42:B6:83:10:54:6A:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 2C58
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Fzb8p8ltWmL2odNC0K2gxBUavg.roa
Signing time: Wed 24 May 2023 03:54:11 +0000
ROA not before: Wed 24 May 2023 03:54:11 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11352 (0x2c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 03:54:11 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=F05CDBF29F25B5698BDA874D0B42B68310546AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:a1:81:5d:38:4d:70:e5:18:fc:a7:a5:7e:
57:d4:b1:26:b2:55:f7:bf:06:c9:9d:c6:8e:e7:ef:
1e:8f:3e:d0:66:5b:38:92:80:5e:6b:6b:a4:a3:de:
de:b6:82:00:c3:9e:65:4b:6f:a3:29:69:a9:13:ef:
0f:e6:69:88:2e:06:06:33:9e:60:8d:d5:98:a9:18:
26:8d:d9:bb:f1:a4:b0:02:3d:77:6f:e6:94:60:b4:
f7:5c:64:73:41:2f:eb:24:a5:cd:42:94:d9:65:0b:
d4:e7:ae:27:a9:d0:a6:23:fc:36:33:f9:4f:d5:98:
ca:0b:04:58:5d:7a:68:b8:7f:28:da:0a:93:1e:eb:
98:f6:0e:bf:c7:f6:66:a8:03:9d:99:48:b9:18:97:
d0:a0:bd:96:6a:b7:27:de:ae:f0:59:39:02:c4:8a:
e1:64:04:9e:a1:55:d5:57:fa:b1:17:2f:7d:28:41:
41:0b:13:83:98:e5:55:90:96:ae:14:91:2f:da:1d:
2d:70:d6:18:12:d8:f6:b6:48:a3:b1:8a:9f:02:40:
5d:9e:ac:02:66:d6:7e:ef:4e:c1:96:5b:2d:31:39:
24:01:10:da:9f:f8:94:90:cd:3c:e8:94:a7:c6:73:
36:53:3d:f3:ac:6c:92:1a:76:5b:3d:db:9b:ac:5f:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:DB:F2:9F:25:B5:69:8B:DA:87:4D:0B:42:B6:83:10:54:6A:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Fzb8p8ltWmL2odNC0K2gxBUavg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
11:7e:86:0d:57:ad:90:d0:a6:75:48:5e:01:9e:e0:dd:5c:19:
c4:99:c8:ed:64:f1:03:06:00:11:43:80:1c:eb:61:be:92:5c:
f4:91:e0:6a:0d:d7:f4:04:ff:19:05:0b:f6:58:62:02:1d:8f:
da:b1:3d:77:a7:64:ea:5f:74:7f:ec:3f:4a:f6:54:48:cc:83:
c0:fa:46:f0:e3:46:56:c8:e3:5a:f0:4f:72:eb:e8:26:77:0c:
4e:02:98:fd:a9:13:23:dd:f4:e6:ef:0d:6e:2e:94:49:56:d6:
20:ae:1e:ee:2a:6d:8d:2c:34:73:00:c9:c9:05:67:72:df:89:
3c:dc:23:27:6d:d9:64:98:ad:f4:b1:34:c5:53:2f:4e:d8:e7:
38:2c:2e:9b:29:34:90:d2:81:1b:aa:b4:26:f8:3d:d0:93:8e:
d9:b4:d4:6c:20:e9:f6:67:cb:c2:ee:ee:f4:ef:f3:df:a9:b9:
37:5e:2d:96:c1:b6:e1:2b:4e:86:ac:71:fe:01:d1:5b:38:83:
91:bc:0b:a9:31:a2:19:3b:c3:e3:0a:71:2f:8e:f3:de:4a:95:
1b:e1:7b:30:be:d3:fb:e1:8e:d0:8a:82:c9:c7:39:5a:3e:d8:
3e:da:6e:de:28:d1:e9:51:1e:c5:2f:ea:6d:87:5d:96:30:92:
60:d6:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org