Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8TZnJzj4KlROimRL7Syvj54or40.roa
File: 8TZnJzj4KlROimRL7Syvj54or40.roa (raw, json)
Hash identifier: aLi4EujOQy2w6YOJtE3iJLtmc3mPIy4Ci29xnunw4q4=
Subject key identifier: F1:36:67:27:38:F8:2A:54:4E:8A:64:4B:ED:2C:AF:8F:9E:28:AF:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4885
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8TZnJzj4KlROimRL7Syvj54or40.roa
Signing time: Thu 25 Apr 2024 06:53:38 +0000
ROA not before: Thu 25 Apr 2024 06:53:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18565 (0x4885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 06:53:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F136672738F82A544E8A644BED2CAF8F9E28AF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:c3:05:39:10:ef:ef:97:68:77:d0:6f:ef:
48:f0:9e:cb:1d:17:36:91:90:70:a6:b7:88:6c:1f:
4d:e3:4e:c3:d4:3c:5d:6f:cb:e5:4d:cc:0d:9a:2c:
94:08:68:64:90:a0:2a:ce:f1:93:87:de:40:ed:64:
81:b0:71:cb:0f:a7:d1:ee:96:af:ce:8d:eb:82:99:
d9:b6:06:ec:ac:fb:05:71:c5:d6:7c:95:72:34:bc:
c7:07:60:95:da:b1:02:82:a4:4d:51:70:34:45:13:
9c:5e:08:2c:ab:0f:77:5c:95:c2:34:5d:cb:07:eb:
e3:67:df:d8:46:8c:6a:dc:e0:88:cc:76:51:88:ef:
fe:50:32:21:40:bf:aa:85:ff:c8:5d:b0:68:01:c3:
cd:f8:ad:64:30:74:5d:8a:b7:fa:42:a8:c6:5c:15:
76:3b:4e:b3:f5:d5:89:00:db:f9:ee:cd:a7:a8:70:
48:56:c2:5b:fe:48:e9:b7:da:1a:15:b2:f0:f3:b7:
b2:ea:dc:f4:02:9e:6f:83:02:d4:80:a2:32:bd:c6:
e7:39:f9:6b:89:c2:24:2a:93:08:a0:27:5e:c2:26:
5f:57:8a:d0:ab:e4:70:6b:10:15:3a:ee:64:fa:45:
2f:34:74:9c:77:48:61:51:7f:d3:87:59:8b:fd:62:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:67:27:38:F8:2A:54:4E:8A:64:4B:ED:2C:AF:8F:9E:28:AF:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8TZnJzj4KlROimRL7Syvj54or40.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:c9:5b:aa:5d:10:39:19:d2:96:07:d6:31:55:3a:08:ef:cf:
02:3b:b1:7f:e1:9a:ca:96:02:33:7c:bd:be:e0:b9:7a:28:1f:
a7:52:30:97:d8:04:14:ab:b2:3a:1c:8c:53:96:0c:02:42:82:
05:ad:ff:be:99:3c:ad:e1:e5:f4:de:a9:53:65:b2:d1:3f:24:
47:bd:f2:71:60:8f:29:a6:7e:75:82:8c:8a:09:47:10:c8:ef:
5c:84:ca:7c:23:8f:ee:af:f2:aa:b6:6d:0f:a5:cf:b4:af:ec:
7a:37:7e:43:53:11:d1:2e:5a:ec:74:bd:84:10:10:f2:51:d9:
86:d7:72:f8:9d:f1:bb:b8:61:45:ef:ba:bb:83:38:ff:e0:e4:
98:47:f8:33:ec:da:52:c5:11:a9:16:e4:a0:e5:6d:eb:03:eb:
81:0f:68:fa:c1:ca:03:26:89:73:e4:99:b8:01:e6:d3:33:b4:
3b:97:16:08:3e:89:e6:69:c0:4c:76:e8:6d:48:8b:0c:df:b9:
7a:fa:e2:09:18:e9:5d:84:13:47:fa:f7:32:07:cf:20:40:be:
1b:79:15:a6:de:25:ce:d4:f7:64:78:7e:86:cb:85:ce:f2:cd:
13:ba:3a:28:10:c3:c1:a7:78:5f:fd:e8:66:2c:e0:32:61:3e:
2a:4c:ef:e7
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUw
NjUzMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxMzY2NzI3MzhGODJB
NTQ0RThBNjQ0QkVEMkNBRjhGOUUyOEFGOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm/8MFORDv75dod9Bv70jwnssdFzaRkHCmt4hsH03jTsPUPF1v
y+VNzA2aLJQIaGSQoCrO8ZOH3kDtZIGwccsPp9Hulq/OjeuCmdm2Buys+wVxxdZ8
lXI0vMcHYJXasQKCpE1RcDRFE5xeCCyrD3dclcI0XcsH6+Nn39hGjGrc4IjMdlGI
7/5QMiFAv6qF/8hdsGgBw834rWQwdF2Kt/pCqMZcFXY7TrP11YkA2/nuzaeocEhW
wlv+SOm32hoVsvDzt7Lq3PQCnm+DAtSAojK9xuc5+WuJwiQqkwigJ17CJl9XitCr
5HBrEBU67mT6RS80dJx3SGFRf9OHWYv9YpqDAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU8TZnJzj4KlROimRL7Syvj54or40wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhUWm5Kemo0S2xST2lt
Ukw3U3l2ajU0b3I0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAE3JW6pdEDkZ0pYH
1jFVOgjvzwI7sX/hmsqWAjN8vb7guXooH6dSMJfYBBSrsjocjFOWDAJCggWt/76Z
PK3h5fTeqVNlstE/JEe98nFgjymmfnWCjIoJRxDI71yEynwjj+6v8qq2bQ+lz7Sv
7Ho3fkNTEdEuWux0vYQQEPJR2YbXcvid8bu4YUXvuruDOP/g5JhH+DPs2lLFEakW
5KDlbesD64EPaPrBygMmiXPkmbgB5tMztDuXFgg+ieZpwEx26G1IiwzfuXr64gkY
6V2EE0f69zIHzyBAvht5FabeJc7U92R4fobLhc7yzRO6OigQw8GneF/96GYs4DJh
PipM7+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-ams.rpki-client.org