Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LsbT-BlNWpyB6TaiDfVNzg-xcWU.roa
File: LsbT-BlNWpyB6TaiDfVNzg-xcWU.roa (raw, json)
Hash identifier: P+QBBO7kt4cuQOVCQMpV/JRjTOuu0zW4Xl7pRBwGaYY=
Subject key identifier: 2E:C6:D3:F8:19:4D:5A:9C:81:E9:36:A2:0D:F5:4D:CE:0F:B1:71:65
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43E5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LsbT-BlNWpyB6TaiDfVNzg-xcWU.roa
Signing time: Fri 19 Apr 2024 02:53:00 +0000
ROA not before: Fri 19 Apr 2024 02:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17381 (0x43e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 02:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2EC6D3F8194D5A9C81E936A20DF54DCE0FB17165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:c7:cf:60:ef:67:8c:37:99:16:68:77:3d:
94:88:77:4b:54:82:4e:50:14:e3:f1:3d:00:32:15:
57:87:c3:38:a3:4d:53:67:82:7b:bd:ad:e6:fc:26:
9a:bb:2b:09:98:62:23:f7:93:52:3b:5c:ea:f4:07:
24:2b:a2:b5:8b:9f:68:dc:7c:9d:46:c3:6e:7e:53:
83:cb:18:a9:78:88:69:88:41:a3:50:b9:84:8d:dd:
6c:13:4f:3a:2c:2b:90:35:1c:09:41:28:3e:4b:06:
c0:29:84:ed:34:a4:b7:e5:06:ca:ae:20:d1:95:77:
57:f6:00:e4:de:f8:7c:50:28:55:3e:88:38:52:a4:
a4:f4:14:1e:77:11:02:cf:60:1a:e5:b1:de:9e:3f:
7a:da:cc:56:cf:64:01:03:a5:85:b5:e7:29:21:0f:
06:28:92:2d:b6:5b:ef:47:84:12:e8:67:e0:84:d7:
54:a4:96:88:82:12:1d:8a:35:31:7d:7f:1b:b9:d7:
d3:0b:66:64:56:a1:1a:31:f4:ae:3c:26:48:86:66:
18:e2:5f:60:30:6b:5f:41:54:1a:44:e3:30:49:a6:
a5:2e:a0:1c:48:91:62:4e:62:08:df:4f:36:d0:56:
53:4d:10:c8:08:53:d9:23:88:4d:b1:a4:a5:c6:a9:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:D3:F8:19:4D:5A:9C:81:E9:36:A2:0D:F5:4D:CE:0F:B1:71:65
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LsbT-BlNWpyB6TaiDfVNzg-xcWU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
14:78:b6:a5:0c:d3:31:8f:e2:09:39:db:8b:0d:e1:46:08:c5:
8f:4d:5e:33:3b:32:60:0d:03:d7:8a:b8:d8:e3:35:3b:c3:32:
b9:42:0e:d3:79:e7:89:2d:5f:71:fb:f9:2c:c4:ea:95:9f:04:
2f:ee:48:72:7c:b3:19:c3:36:e5:23:ca:4a:a2:b5:0b:d6:70:
64:34:ac:06:cc:a7:1f:79:38:80:a0:dc:ca:57:f5:cc:98:8c:
6a:e1:7d:be:11:80:3d:77:ef:1c:c5:54:e0:8f:93:9d:fe:a7:
d9:f0:00:ea:00:28:5d:28:e8:50:a6:50:2f:51:fc:3a:05:ec:
94:c5:78:f4:c2:52:87:3c:02:01:6e:76:03:44:57:40:87:fe:
58:73:9f:26:70:ae:48:03:3a:07:ef:f4:64:2f:4f:5e:51:10:
8e:04:e9:0c:7f:82:48:f6:f9:29:35:d1:d5:d8:fa:73:1c:52:
e1:e1:6a:1b:18:0f:79:38:47:6f:93:f7:a0:42:81:b4:12:55:
df:20:e3:ca:5a:58:ad:b5:ac:15:c5:0e:43:6c:fb:f3:b6:e2:
f2:3d:16:65:48:e5:5d:d1:d2:22:9c:49:51:07:c5:50:63:54:
13:ad:27:d8:7b:ed:03:60:0a:c4:68:ef:f7:83:7f:c3:4a:eb:
ad:38:61:82
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQ+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkw
MjUzMDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJFQzZEM0Y4MTk0RDVB
OUM4MUU5MzZBMjBERjU0RENFMEZCMTcxNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG1sfPYO9njDeZFmh3PZSId0tUgk5QFOPxPQAyFVeHwzijTVNn
gnu9reb8Jpq7KwmYYiP3k1I7XOr0ByQrorWLn2jcfJ1Gw25+U4PLGKl4iGmIQaNQ
uYSN3WwTTzosK5A1HAlBKD5LBsAphO00pLflBsquINGVd1f2AOTe+HxQKFU+iDhS
pKT0FB53EQLPYBrlsd6eP3razFbPZAEDpYW15ykhDwYoki22W+9HhBLoZ+CE11Sk
loiCEh2KNTF9fxu519MLZmRWoRox9K48JkiGZhjiX2Awa19BVBpE4zBJpqUuoBxI
kWJOYgjfTzbQVlNNEMgIU9kjiE2xpKXGqen3AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQULsbT+BlNWpyB6TaiDfVNzg+xcWUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0xzYlQtQmxOV3B5QjZU
YWlEZlZOemcteGNXVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABR4tqUM0zGP4gk5
24sN4UYIxY9NXjM7MmANA9eKuNjjNTvDMrlCDtN554ktX3H7+SzE6pWfBC/uSHJ8
sxnDNuUjykqitQvWcGQ0rAbMpx95OICg3MpX9cyYjGrhfb4RgD137xzFVOCPk53+
p9nwAOoAKF0o6FCmUC9R/DoF7JTFePTCUoc8AgFudgNEV0CH/lhznyZwrkgDOgfv
9GQvT15REI4E6Qx/gkj2+Sk10dXY+nMcUuHhahsYD3k4R2+T96BCgbQSVd8g48pa
WK21rBXFDkNs+/O24vI9FmVI5V3R0iKcSVEHxVBjVBOtJ9h77QNgCsRo7/eDf8NK
6604YYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:33 2024 by rpki-client on console-ams.rpki-client.org