Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GHJtkbnvziWeSVjxKdREL8_7VrI.roa
File: GHJtkbnvziWeSVjxKdREL8_7VrI.roa (raw, json)
Hash identifier: ZOsppv9lenamGykrSfZMp0GQFbl/zt9d6gAKW3KLf0I=
Subject key identifier: 18:72:6D:91:B9:EF:CE:25:9E:49:58:F1:29:D4:44:2F:CF:FB:56:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 401D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GHJtkbnvziWeSVjxKdREL8_7VrI.roa
Signing time: Sun 14 Apr 2024 01:52:51 +0000
ROA not before: Sun 14 Apr 2024 01:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16413 (0x401d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 01:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=18726D91B9EFCE259E4958F129D4442FCFFB56B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:13:6a:59:a4:31:42:f3:25:a4:59:20:2e:
75:24:74:5d:9d:5b:a5:60:5d:5e:45:97:a8:ed:c9:
70:f4:58:45:c7:75:90:b4:f7:bb:d8:dc:96:53:b5:
fa:5b:21:b8:2e:6f:28:cd:16:4b:a7:60:77:85:b5:
2c:62:21:48:18:c2:ae:72:c6:69:1e:1f:22:ee:0a:
be:4d:d6:4e:27:7a:4c:46:b4:f4:d9:62:0a:19:4f:
d9:03:d8:e5:ed:fb:38:63:cf:04:aa:74:5d:7d:84:
a9:fe:f4:66:59:68:31:70:8c:45:79:e7:f9:d4:e1:
60:41:5e:13:6e:50:18:dd:fd:16:78:f0:8b:b5:f1:
aa:42:df:b2:49:24:b8:06:da:c2:9e:69:6d:35:1a:
c3:b7:0e:59:92:fc:5d:74:5f:e6:a1:b1:54:f7:7f:
00:a9:cc:5d:a7:14:9f:86:d2:88:c7:35:ca:c5:0e:
70:a5:5b:52:83:d2:99:d3:c9:1b:1f:75:98:3d:23:
20:0f:6e:cf:be:cb:8c:cb:7c:f9:f6:5f:cd:64:d8:
31:23:3c:ee:d3:2e:9b:c8:46:90:9c:97:00:41:93:
da:85:ab:00:8e:93:37:af:fd:a9:88:16:41:65:14:
21:f7:bf:ce:1f:13:62:9b:6c:7e:65:94:55:db:38:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:6D:91:B9:EF:CE:25:9E:49:58:F1:29:D4:44:2F:CF:FB:56:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GHJtkbnvziWeSVjxKdREL8_7VrI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
85:7c:6c:bc:5e:94:31:96:e1:9c:2f:a9:54:ae:35:da:77:75:
80:f6:49:91:86:87:ff:4b:80:e0:26:ef:9a:d8:00:8e:3d:fc:
f3:5a:68:44:9b:7f:24:be:4a:00:04:43:ce:d9:e4:f8:53:a3:
a6:7c:8b:b5:83:ff:30:60:bd:59:c1:32:22:94:e7:c0:9b:c0:
73:b4:f3:1a:3b:84:26:b8:d9:b9:0f:38:de:3e:d6:eb:43:26:
9e:b3:66:a4:bb:40:0b:bb:a5:d6:f3:e5:f5:9d:26:78:55:d2:
79:a4:b5:b7:c6:fc:ba:fd:33:90:72:6a:14:17:23:70:c2:20:
2d:3f:45:23:fa:ee:51:8d:1c:3b:e3:35:7c:34:ac:e0:94:ea:
c6:aa:46:7e:04:59:85:90:57:ec:a0:2b:86:d8:d0:9d:c7:fc:
69:b5:b7:1f:f4:79:16:c4:c5:26:17:0e:48:26:be:33:41:3e:
78:35:7f:82:53:45:a4:fe:51:0e:a9:99:bc:d8:11:ee:7e:82:
44:73:d4:0c:98:55:4a:73:4d:d0:13:22:74:18:26:26:70:15:
e9:e8:64:b3:ac:af:69:8c:85:e0:b1:89:b8:20:2f:24:a6:53:
a6:f7:0d:67:ae:0b:8d:01:0a:93:80:98:17:10:0a:6c:da:e0:
da:a9:cb:5d
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQw
MTUyNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE4NzI2RDkxQjlFRkNF
MjU5RTQ5NThGMTI5RDQ0NDJGQ0ZGQjU2QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtKhNqWaQxQvMlpFkgLnUkdF2dW6VgXV5Fl6jtyXD0WEXHdZC0
97vY3JZTtfpbIbgubyjNFkunYHeFtSxiIUgYwq5yxmkeHyLuCr5N1k4nekxGtPTZ
YgoZT9kD2OXt+zhjzwSqdF19hKn+9GZZaDFwjEV55/nU4WBBXhNuUBjd/RZ48Iu1
8apC37JJJLgG2sKeaW01GsO3DlmS/F10X+ahsVT3fwCpzF2nFJ+G0ojHNcrFDnCl
W1KD0pnTyRsfdZg9IyAPbs++y4zLfPn2X81k2DEjPO7TLpvIRpCclwBBk9qFqwCO
kzev/amIFkFlFCH3v84fE2KbbH5llFXbOHSFAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUGHJtkbnvziWeSVjxKdREL8/7VrIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dISnRrYm52emlXZVNW
anhLZFJFTDhfN1ZySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAIV8bLxelDGW4Zwv
qVSuNdp3dYD2SZGGh/9LgOAm75rYAI49/PNaaESbfyS+SgAEQ87Z5PhTo6Z8i7WD
/zBgvVnBMiKU58CbwHO08xo7hCa42bkPON4+1utDJp6zZqS7QAu7pdbz5fWdJnhV
0nmktbfG/Lr9M5ByahQXI3DCIC0/RSP67lGNHDvjNXw0rOCU6saqRn4EWYWQV+yg
K4bY0J3H/Gm1tx/0eRbExSYXDkgmvjNBPng1f4JTRaT+UQ6pmbzYEe5+gkRz1AyY
VUpzTdATInQYJiZwFenoZLOsr2mMheCxibggLySmU6b3DWeuC40BCpOAmBcQCmza
4Nqpy10=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org