Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8wsgVf0E-xTy3_EaJU_fF0Pys_c.roa
File: 8wsgVf0E-xTy3_EaJU_fF0Pys_c.roa (raw, json)
Hash identifier: 2E0KZLtdzCwndqzde24xrY3QtgF1x/hwK2KsO+Uy1uk=
Subject key identifier: F3:0B:20:55:FD:04:FB:14:F2:DF:F1:1A:25:4F:DF:17:43:F2:B3:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 257B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8wsgVf0E-xTy3_EaJU_fF0Pys_c.roa
Signing time: Tue 07 Jun 2022 10:06:22 +0000
ROA not before: Tue 07 Jun 2022 10:06:22 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9595 (0x257b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 10:06:22 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=F30B2055FD04FB14F2DFF11A254FDF1743F2B3F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:67:4f:17:0b:a7:c9:e7:fd:50:3a:65:ef:
14:01:50:ef:1b:b2:60:09:a7:d8:08:0c:ae:4e:d9:
18:5d:3f:bc:37:6e:78:41:71:bd:73:64:d2:3e:73:
ab:c1:f8:34:d5:e9:91:cf:0c:0e:28:9c:84:8a:71:
d4:e2:70:22:39:6f:66:da:82:09:2e:26:e7:a5:6b:
e1:65:90:ec:93:2e:d3:72:17:75:22:d9:8c:14:c9:
5a:9d:09:e6:b7:44:f8:e7:96:ce:36:4a:dd:bb:f9:
dc:43:95:a3:0e:a4:09:94:61:82:3c:c8:8d:e6:4d:
4b:67:d7:ea:22:d7:58:64:e8:d4:a7:58:29:16:57:
58:2b:00:88:68:46:ad:ed:a4:b6:66:d8:e5:a6:37:
e5:e9:33:79:bc:aa:9b:34:c2:ce:ec:95:e5:68:ca:
15:dc:c2:22:db:d8:66:9a:46:b5:ac:90:b9:62:68:
a6:3b:f9:c0:a7:36:40:2d:ef:2b:5a:1e:f5:3f:87:
11:c1:b7:e4:d0:91:78:0a:ec:86:51:26:35:b5:b3:
14:9d:9d:69:f8:43:42:15:48:10:b6:50:49:ec:9d:
b8:60:fa:4c:fe:4f:31:c3:49:bc:93:ab:44:05:2d:
6d:7f:7e:d2:38:44:9c:8e:38:e5:6c:bd:d5:fe:b5:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:20:55:FD:04:FB:14:F2:DF:F1:1A:25:4F:DF:17:43:F2:B3:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8wsgVf0E-xTy3_EaJU_fF0Pys_c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:be:f6:11:a2:db:bf:c8:18:5d:8a:c8:1e:59:f0:f5:30:54:
78:fe:07:a2:55:b4:9b:cd:3a:5e:1a:5a:81:19:11:01:b9:ec:
6c:c8:3a:88:e1:0a:9e:69:1b:bb:ba:71:77:10:17:0d:41:01:
41:20:67:21:f1:22:4d:1c:a1:79:e4:b4:09:e2:c0:e6:77:8f:
53:1b:13:cd:39:73:a7:82:39:95:a7:43:6c:33:f1:f1:28:e5:
c3:72:ea:87:d6:88:4d:d1:f3:77:9e:2f:9b:65:46:cc:d4:06:
41:d7:b6:6f:fa:78:08:e4:43:4e:65:ff:9c:57:d0:cf:12:07:
4e:f8:ad:79:37:d9:04:94:df:b7:5d:d5:63:32:de:2c:21:ce:
86:35:b5:f3:45:6b:40:40:43:7c:e5:64:58:03:3a:aa:3c:e8:
d2:3d:09:bf:a9:da:da:65:e6:31:63:9c:68:18:1c:47:17:52:
2d:22:72:72:51:0b:c7:30:9f:2f:bb:27:60:99:7a:9d:20:4e:
87:f7:cf:d3:ec:c0:fb:f4:ea:b1:83:e3:a5:d5:54:7c:95:7f:
0e:f0:cf:84:ad:73:5e:a1:97:33:91:f4:4b:5e:8b:bf:39:3c:
75:75:fc:c5:b9:da:c9:3a:9c:3d:8b:a5:8a:6e:42:49:29:28:
67:56:4a:7c
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICJXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yMjA2MDcx
MDA2MjJaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKEYzMEIyMDU1RkQwNEZC
MTRGMkRGRjExQTI1NEZERjE3NDNGMkIzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWTGdPFwunyef9UDpl7xQBUO8bsmAJp9gIDK5O2RhdP7w3bnhB
cb1zZNI+c6vB+DTV6ZHPDA4onISKcdTicCI5b2baggkuJuela+FlkOyTLtNyF3Ui
2YwUyVqdCea3RPjnls42St27+dxDlaMOpAmUYYI8yI3mTUtn1+oi11hk6NSnWCkW
V1grAIhoRq3tpLZm2OWmN+XpM3m8qps0ws7sleVoyhXcwiLb2GaaRrWskLliaKY7
+cCnNkAt7ytaHvU/hxHBt+TQkXgK7IZRJjW1sxSdnWn4Q0IVSBC2UEnsnbhg+kz+
TzHDSbyTq0QFLW1/ftI4RJyOOOVsvdX+tZMnAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU8wsgVf0E+xTy3/EaJU/fF0Pys/cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Lzh3c2dWZjBFLXhUeTNf
RWFKVV9mRjBQeXNfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEy+9hGi27/IGF2K
yB5Z8PUwVHj+B6JVtJvNOl4aWoEZEQG57GzIOojhCp5pG7u6cXcQFw1BAUEgZyHx
Ik0coXnktAniwOZ3j1MbE805c6eCOZWnQ2wz8fEo5cNy6ofWiE3R83eeL5tlRszU
BkHXtm/6eAjkQ05l/5xX0M8SB074rXk32QSU37dd1WMy3iwhzoY1tfNFa0BAQ3zl
ZFgDOqo86NI9Cb+p2tpl5jFjnGgYHEcXUi0icnJRC8cwny+7J2CZep0gTof3z9Ps
wPv06rGD46XVVHyVfw7wz4Stc16hlzOR9Etei785PHV1/MW52sk6nD2LpYpuQkkp
KGdWSnw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org