Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JNJ0tq1lNqZEc_MvdnBkt3KsI5k.roa
File: JNJ0tq1lNqZEc_MvdnBkt3KsI5k.roa (raw, json)
Hash identifier: NDPibIqBFMwoXhnjVUyULNhKebdy6zDhB2qC1xQm1Rk=
Subject key identifier: 24:D2:74:B6:AD:65:36:A6:44:73:F3:2F:76:70:64:B7:72:AC:23:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FC9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNJ0tq1lNqZEc_MvdnBkt3KsI5k.roa
Signing time: Sat 04 May 2024 23:23:49 +0000
ROA not before: Sat 04 May 2024 23:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20425 (0x4fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 23:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24D274B6AD6536A64473F32F767064B772AC2399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:d8:95:3a:1c:a6:c9:a0:9b:8d:8f:c8:c5:
61:b0:b2:13:80:6b:53:08:58:82:89:b0:2f:ce:54:
85:d0:90:ce:e5:eb:66:39:42:52:47:08:01:70:a0:
9e:0b:78:ca:97:c7:8b:d4:f4:3b:6f:9c:19:aa:b8:
52:bc:6e:d1:5a:be:d1:3d:2c:a2:2c:79:8c:8f:56:
4a:e9:6c:7c:1c:08:48:35:1f:8a:b8:0f:bd:25:b2:
8c:78:56:b4:41:e2:5c:f5:4f:50:0d:8c:2a:b5:9b:
40:29:6e:3a:87:06:68:f5:97:53:5d:a8:a9:ec:8e:
e4:f1:dc:4a:dd:4a:7d:32:c4:73:81:0f:a5:42:56:
2c:45:00:2c:97:36:96:a4:91:1b:da:a5:a4:b3:3e:
75:01:46:26:b7:cb:ef:44:00:34:ff:d4:e3:22:62:
45:3b:fa:e1:e0:6e:12:ae:e6:c3:a5:e7:94:de:9a:
65:a2:0a:67:cc:37:bb:55:5e:cc:ea:e7:85:22:e1:
59:e6:8f:c2:b1:06:ff:6e:c8:cb:18:d7:c9:c3:2f:
96:44:1c:25:8d:26:aa:4d:99:0e:f9:9e:3f:a1:66:
10:56:6f:2c:87:58:d3:c4:bd:b4:b0:61:82:18:e9:
6b:b7:45:c3:2a:22:2f:29:33:c6:f7:47:a3:b2:3c:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:74:B6:AD:65:36:A6:44:73:F3:2F:76:70:64:B7:72:AC:23:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNJ0tq1lNqZEc_MvdnBkt3KsI5k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:be:c8:41:cc:31:37:14:ab:27:27:98:14:14:f9:80:db:09:
94:09:7a:33:43:ca:fc:9b:a3:71:c0:63:be:c2:59:02:fa:e0:
e1:cb:dc:2d:a1:8a:55:56:6a:a2:28:8c:d3:44:d6:bd:c5:2d:
9f:70:70:97:96:8d:8d:b8:b9:dd:9f:33:77:71:56:0a:36:48:
6d:33:34:54:65:c8:81:10:de:50:4f:44:32:20:05:ab:0a:cd:
f6:97:7b:a0:47:60:6e:b9:0e:c9:46:1b:ac:12:c1:57:02:cf:
be:36:62:7c:bb:4d:28:f4:c3:58:63:7f:3a:aa:19:92:d2:e7:
51:ee:ab:8e:88:b3:4e:32:18:03:8b:c2:df:44:05:60:4e:0f:
31:7f:20:69:aa:ad:fb:16:5e:f9:1b:1b:a2:73:ff:9e:16:2a:
eb:cc:a8:89:93:da:00:95:18:c6:10:5a:ce:87:1c:69:88:ca:
91:50:d9:a2:a7:b5:7b:f8:9d:69:4f:fe:6b:33:04:9a:ee:4e:
3e:8c:ab:af:57:e6:fe:56:b8:0e:75:8b:a7:33:7f:10:55:ce:
82:a3:ba:70:48:b6:89:e0:cc:1f:61:c1:7d:1f:0e:d8:67:d4:
5e:2f:16:e1:5b:b4:af:44:9a:f6:67:c8:cd:14:71:74:13:a9:
ec:a4:cb:fe
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICT8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQy
MzIzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI0RDI3NEI2QUQ2NTM2
QTY0NDczRjMyRjc2NzA2NEI3NzJBQzIzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ39iVOhymyaCbjY/IxWGwshOAa1MIWIKJsC/OVIXQkM7l62Y5
QlJHCAFwoJ4LeMqXx4vU9DtvnBmquFK8btFavtE9LKIseYyPVkrpbHwcCEg1H4q4
D70lsox4VrRB4lz1T1ANjCq1m0ApbjqHBmj1l1NdqKnsjuTx3ErdSn0yxHOBD6VC
VixFACyXNpakkRvapaSzPnUBRia3y+9EADT/1OMiYkU7+uHgbhKu5sOl55TemmWi
CmfMN7tVXszq54Ui4Vnmj8KxBv9uyMsY18nDL5ZEHCWNJqpNmQ75nj+hZhBWbyyH
WNPEvbSwYYIY6Wu3RcMqIi8pM8b3R6OyPJN7AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUJNJ0tq1lNqZEc/MvdnBkt3KsI5kwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0pOSjB0cTFsTnFaRWNf
TXZkbkJrdDNLc0k1ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBACy+yEHMMTcUqycn
mBQU+YDbCZQJejNDyvybo3HAY77CWQL64OHL3C2hilVWaqIojNNE1r3FLZ9wcJeW
jY24ud2fM3dxVgo2SG0zNFRlyIEQ3lBPRDIgBasKzfaXe6BHYG65DslGG6wSwVcC
z742Yny7TSj0w1hjfzqqGZLS51Huq46Is04yGAOLwt9EBWBODzF/IGmqrfsWXvkb
G6Jz/54WKuvMqImT2gCVGMYQWs6HHGmIypFQ2aKntXv4nWlP/mszBJruTj6Mq69X
5v5WuA51i6czfxBVzoKjunBItongzB9hwX0fDthn1F4vFuFbtK9EmvZnyM0UcXQT
qeyky/4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:31 2024 by rpki-client on console-ams.rpki-client.org