Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CnwY9dy0ItQ8z1RV3e6SLd1988k.roa
File: CnwY9dy0ItQ8z1RV3e6SLd1988k.roa (raw, json)
Hash identifier: O7WeONqnFzoV9ufHoCgkBuhEq9BIL8Y+RxD8aAAJRes=
Subject key identifier: 0A:7C:18:F5:DC:B4:22:D4:3C:CF:54:55:DD:EE:92:2D:DD:7D:F3:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F81
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CnwY9dy0ItQ8z1RV3e6SLd1988k.roa
Signing time: Sat 04 May 2024 14:23:47 +0000
ROA not before: Sat 04 May 2024 14:23:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20353 (0x4f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 14:23:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A7C18F5DCB422D43CCF5455DDEE922DDD7DF3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:b2:fe:a3:d6:04:25:15:1c:8d:7a:8c:9f:
26:0c:b8:74:48:b8:e6:bc:9a:f3:3a:b9:67:59:db:
81:a1:b0:99:bc:9e:0e:27:fc:0f:9d:e4:f6:bb:4b:
72:f5:7b:2f:33:50:1c:38:f5:e2:9f:88:f3:e4:4f:
d1:da:e8:70:93:08:a0:fe:7c:4f:e1:37:5e:79:36:
ea:1e:8c:41:0d:43:6e:ae:4f:45:a4:9f:64:be:c2:
f4:0e:c7:1c:97:20:5c:5d:30:66:1b:1f:1a:62:63:
90:95:ee:7c:53:7c:5a:30:17:d8:f5:b3:fa:3d:4a:
03:b1:f5:e0:48:f2:87:5a:54:2c:c9:62:5a:1e:95:
2c:1e:cb:5a:df:de:8a:ce:88:ab:7f:aa:c7:fa:5c:
76:2d:ac:80:6e:07:cd:25:be:3d:57:f6:39:5a:18:
3f:9c:a7:cb:25:91:fd:9d:bb:5c:c2:a6:6f:51:72:
89:73:58:c5:e9:7c:67:9e:78:32:78:74:01:98:6c:
0d:90:5c:57:c0:b3:b0:de:f8:40:9f:f4:b6:b7:39:
b1:53:92:12:e8:dd:de:4b:a8:a8:6f:b4:37:9b:98:
e6:d2:e4:e3:f4:e7:a9:c4:69:91:d9:39:98:c3:3b:
89:4c:fe:43:45:46:6d:2c:14:3d:fa:58:9d:4c:f4:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:18:F5:DC:B4:22:D4:3C:CF:54:55:DD:EE:92:2D:DD:7D:F3:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CnwY9dy0ItQ8z1RV3e6SLd1988k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:60:bb:99:24:fe:3f:ce:9a:8d:fa:29:f4:86:a5:1d:c3:e1:
85:ab:2a:13:68:12:40:9a:42:27:7b:df:4f:35:cc:78:f0:a0:
2e:f1:e8:19:c0:a3:e9:10:cf:6d:51:a4:5e:8d:22:94:ff:c5:
7a:ca:ac:fe:c3:7c:e4:74:1c:86:d5:ec:7a:dc:37:3a:50:b4:
b4:a5:ce:b8:8b:5c:f1:70:cc:97:59:c3:e1:e9:43:2d:a0:ad:
4d:31:d6:2d:e4:df:b5:bc:ba:61:62:2e:5c:da:12:34:b5:97:
5f:41:ec:dc:2c:41:8f:d5:ae:6f:45:aa:31:d8:11:99:93:41:
d9:13:5c:27:aa:53:23:20:ec:95:a5:a2:da:11:85:94:61:5c:
9c:52:df:8c:80:a3:a3:44:d5:7b:cf:c9:f5:c8:0f:6f:4c:36:
b1:cc:c4:52:e8:37:ff:89:69:16:c0:dd:1e:dc:de:ac:ae:6b:
7a:7d:5b:c8:67:94:b7:23:1c:5e:f6:5e:77:de:d2:a8:3d:8a:
8b:cb:18:ad:d3:3e:25:4a:cc:d4:b4:80:6d:14:48:24:49:43:
44:6a:2d:1f:14:7d:9d:c5:da:37:93:ed:e4:b5:45:f6:c2:f3:
2b:a6:90:8b:1d:ed:15:dd:70:ea:48:c8:23:7a:31:f1:f3:7a:
d8:18:24:b0
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICT4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQx
NDIzNDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBBN0MxOEY1RENCNDIy
RDQzQ0NGNTQ1NURERUU5MjJEREQ3REYzQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe1rL+o9YEJRUcjXqMnyYMuHRIuOa8mvM6uWdZ24GhsJm8ng4n
/A+d5Pa7S3L1ey8zUBw49eKfiPPkT9Ha6HCTCKD+fE/hN155NuoejEENQ26uT0Wk
n2S+wvQOxxyXIFxdMGYbHxpiY5CV7nxTfFowF9j1s/o9SgOx9eBI8odaVCzJYloe
lSwey1rf3orOiKt/qsf6XHYtrIBuB80lvj1X9jlaGD+cp8slkf2du1zCpm9Rcolz
WMXpfGeeeDJ4dAGYbA2QXFfAs7De+ECf9La3ObFTkhLo3d5LqKhvtDebmObS5OP0
56nEaZHZOZjDO4lM/kNFRm0sFD36WJ1M9JCLAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUCnwY9dy0ItQ8z1RV3e6SLd1988kwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0Nud1k5ZHkwSXRROHox
UlYzZTZTTGQxOTg4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAApgu5kk/j/Omo36
KfSGpR3D4YWrKhNoEkCaQid73081zHjwoC7x6BnAo+kQz21RpF6NIpT/xXrKrP7D
fOR0HIbV7HrcNzpQtLSlzriLXPFwzJdZw+HpQy2grU0x1i3k37W8umFiLlzaEjS1
l19B7NwsQY/Vrm9FqjHYEZmTQdkTXCeqUyMg7JWlotoRhZRhXJxS34yAo6NE1XvP
yfXID29MNrHMxFLoN/+JaRbA3R7c3qyua3p9W8hnlLcjHF72Xnfe0qg9iovLGK3T
PiVKzNS0gG0USCRJQ0RqLR8UfZ3F2jeT7eS1RfbC8yumkIsd7RXdcOpIyCN6MfHz
etgYJLA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:24 2024 by rpki-client on console-ams.rpki-client.org