Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MD-Tgaamm62qkoVOfVWRylW8iS0.roa
File: MD-Tgaamm62qkoVOfVWRylW8iS0.roa (raw, json)
Hash identifier: Ci2x5Fk50SiWuHP4XqHheAxOo8BXwGFLucLGBZup/eA=
Subject key identifier: 30:3F:93:81:A6:A6:9B:AD:AA:92:85:4E:7D:55:91:CA:55:BC:89:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B25
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MD-Tgaamm62qkoVOfVWRylW8iS0.roa
Signing time: Sun 07 Apr 2024 10:52:31 +0000
ROA not before: Sun 07 Apr 2024 10:52:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15141 (0x3b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 10:52:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=303F9381A6A69BADAA92854E7D5591CA55BC892D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:c4:20:0d:fe:b0:c0:c9:55:de:df:d6:7a:
5d:ae:d2:a4:09:44:f1:2a:11:78:0d:95:bd:9e:7d:
fd:90:e3:41:41:4d:55:4f:4d:51:3b:16:14:b3:ea:
89:ff:a8:83:2a:04:dc:ec:3d:c9:33:b2:85:73:0a:
c2:1d:90:99:f9:3f:70:9d:06:bc:16:21:81:96:58:
eb:2d:a4:08:9f:d7:43:ee:50:4f:0b:b2:48:ec:54:
2b:b2:03:e9:36:88:be:b9:41:b8:a0:ee:e5:31:5a:
65:99:a8:5b:25:15:2b:ec:fd:b6:51:2d:eb:01:f6:
f3:6f:63:bd:1c:e5:d9:9a:e8:24:24:62:98:0a:04:
97:e6:2e:ee:97:a7:58:a6:3c:bd:da:1a:7e:d7:e1:
99:c7:3b:31:a9:04:67:fb:a1:e7:82:7b:e8:11:15:
89:68:ac:de:8e:ae:23:f6:dd:72:41:a9:4d:07:bc:
2d:56:52:0d:1c:d8:b5:08:3b:23:d6:5c:fe:f2:72:
3e:0b:d7:a6:7c:f0:72:c4:a7:af:cb:74:61:ea:33:
cb:29:44:e7:6c:98:af:69:40:36:39:e6:b3:56:f0:
0d:7f:a2:a1:5f:bf:d1:82:24:b8:0e:77:e7:25:9c:
aa:8f:ff:e7:53:0a:00:66:ea:4f:93:f3:13:e6:02:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:93:81:A6:A6:9B:AD:AA:92:85:4E:7D:55:91:CA:55:BC:89:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MD-Tgaamm62qkoVOfVWRylW8iS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:67:74:82:01:8e:7f:d4:45:08:9a:03:20:94:20:1b:40:c3:
bd:fe:f0:3d:16:cb:1b:20:1f:66:05:53:72:24:78:22:69:eb:
2f:3f:86:5d:fc:e6:0d:fc:ce:99:29:1a:ed:a0:c1:94:3a:57:
2e:63:61:07:59:e8:f1:f2:64:4a:ce:85:17:42:3f:e2:7e:29:
23:9d:de:dd:31:46:62:26:c6:6d:03:24:db:cf:f7:bd:f2:fb:
d2:29:5f:85:0e:80:77:e1:9b:1d:3b:d5:3c:29:24:37:a0:de:
e2:d1:32:51:81:6a:c0:4a:8a:b7:73:48:ae:35:50:77:43:a0:
e3:00:1f:55:a4:73:b0:51:4a:b0:7b:f8:47:d8:77:50:4b:2c:
60:a7:6a:f1:ab:b7:20:61:68:e2:38:b7:d7:9d:78:1f:90:ce:
47:d0:95:3b:4c:13:10:52:33:0f:ec:57:32:ef:ef:95:a5:b5:
b8:b6:b9:2d:17:2d:f9:eb:57:be:d7:bf:5b:ed:81:1e:a2:ba:
e0:ff:59:33:bb:cc:e2:38:46:2b:bf:e8:97:a4:68:b2:d5:90:
1b:bd:88:a7:3b:60:f9:74:10:04:30:7b:14:3f:01:2b:41:f8:
5d:f8:29:fd:57:40:a0:53:37:b3:38:18:23:ae:3e:e9:13:82:
4e:c3:28:dc
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcx
MDUyMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMwM0Y5MzgxQTZBNjlC
QURBQTkyODU0RTdENTU5MUNBNTVCQzg5MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgH8QgDf6wwMlV3t/Wel2u0qQJRPEqEXgNlb2eff2Q40FBTVVP
TVE7FhSz6on/qIMqBNzsPckzsoVzCsIdkJn5P3CdBrwWIYGWWOstpAif10PuUE8L
skjsVCuyA+k2iL65Qbig7uUxWmWZqFslFSvs/bZRLesB9vNvY70c5dma6CQkYpgK
BJfmLu6Xp1imPL3aGn7X4ZnHOzGpBGf7oeeCe+gRFYlorN6OriP23XJBqU0HvC1W
Ug0c2LUIOyPWXP7ycj4L16Z88HLEp6/LdGHqM8spROdsmK9pQDY55rNW8A1/oqFf
v9GCJLgOd+clnKqP/+dTCgBm6k+T8xPmAkmJAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUMD+Tgaamm62qkoVOfVWRylW8iS0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L01ELVRnYWFtbTYycWtv
Vk9mVldSeWxXOGlTMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAG9ndIIBjn/URQia
AyCUIBtAw73+8D0WyxsgH2YFU3IkeCJp6y8/hl385g38zpkpGu2gwZQ6Vy5jYQdZ
6PHyZErOhRdCP+J+KSOd3t0xRmImxm0DJNvP973y+9IpX4UOgHfhmx071TwpJDeg
3uLRMlGBasBKirdzSK41UHdDoOMAH1Wkc7BRSrB7+EfYd1BLLGCnavGrtyBhaOI4
t9edeB+QzkfQlTtMExBSMw/sVzLv75Wltbi2uS0XLfnrV77Xv1vtgR6iuuD/WTO7
zOI4Riu/6JekaLLVkBu9iKc7YPl0EAQwexQ/AStB+F34Kf1XQKBTN7M4GCOuPukT
gk7DKNw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org