Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NLCZUXSD268yZe4d__1oKN3aaHg.roa
File: NLCZUXSD268yZe4d__1oKN3aaHg.roa (raw, json)
Hash identifier: sb4k7DI8sHP8omx92Gs+mGwAGADkXGFGFLfDR+qSjD4=
Subject key identifier: 34:B0:99:51:74:83:DB:AF:32:65:EE:1D:FF:FD:68:28:DD:DA:68:78
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 343D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NLCZUXSD268yZe4d__1oKN3aaHg.roa
Signing time: Fri 29 Mar 2024 05:52:03 +0000
ROA not before: Fri 29 Mar 2024 05:52:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13373 (0x343d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 05:52:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=34B099517483DBAF3265EE1DFFFD6828DDDA6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:e1:c8:b8:cd:4f:85:96:cf:2c:0d:cd:a9:
58:ae:52:e0:e2:36:0b:ef:78:96:1c:55:aa:da:f6:
96:11:bd:70:9c:67:c3:87:6d:a3:10:7c:75:64:1c:
2b:36:fd:d7:4e:a4:90:6c:0c:01:8a:76:4a:3e:a3:
51:17:ac:4a:b1:48:60:cc:3e:3f:5c:ad:39:f4:e2:
0d:c0:42:dd:22:2f:9f:cc:73:11:4b:0b:1c:c4:00:
da:37:35:70:28:07:0c:db:e2:4f:cd:29:41:90:04:
03:9c:aa:2f:26:4f:46:e2:12:e5:22:e8:e8:69:44:
ce:08:f0:54:2e:5c:a1:14:b3:0c:12:45:7c:18:5b:
92:97:12:66:e0:9b:b4:da:79:9d:60:fd:80:7a:f0:
08:28:a1:80:9a:bd:d9:bc:d3:3d:27:28:67:ff:47:
89:41:d3:fc:8a:4e:24:af:7a:8b:5c:80:16:bd:42:
24:24:f3:eb:f6:f0:84:b3:4e:31:1d:e6:45:c0:2d:
65:1f:fa:e7:8e:2c:e0:50:c4:4f:3c:d6:f4:78:50:
f9:52:92:8c:37:0f:8d:f6:02:e4:2b:b5:77:eb:c0:
93:8c:ac:96:d4:6d:b7:54:7e:be:a3:f0:40:48:90:
8c:ef:61:ff:1b:b2:43:87:b9:80:10:97:29:b6:64:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:99:51:74:83:DB:AF:32:65:EE:1D:FF:FD:68:28:DD:DA:68:78
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NLCZUXSD268yZe4d__1oKN3aaHg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
73:28:87:29:b2:96:76:b1:fd:f0:7e:63:9e:18:74:90:6d:04:
14:ef:cb:c1:9b:ea:bc:a4:c3:c6:8a:6a:e0:6c:ae:ae:0e:f9:
2c:af:8d:b3:53:01:cc:d2:54:01:85:0d:bb:17:8d:0e:ab:06:
3b:56:c5:17:77:89:a5:c7:31:da:36:0b:53:24:2f:aa:9d:7e:
2c:ed:82:8c:c6:7c:ab:a8:1b:75:fc:90:cc:a8:1b:ca:71:62:
83:e0:3f:62:9d:37:b1:fb:e2:35:18:52:c0:de:9a:b9:6e:48:
77:06:78:51:b6:06:7c:69:94:19:e5:26:a6:02:c8:e6:65:f5:
9b:15:f4:2e:ff:3c:c6:b0:8c:05:c4:e5:38:5b:33:05:b9:20:
55:87:05:66:b3:fa:28:91:59:07:44:0e:74:4e:e1:90:09:c8:
91:c2:f9:93:28:b6:31:09:2f:33:52:57:2a:35:58:15:58:39:
e1:19:a7:32:1e:d2:1a:fb:cb:39:62:1f:82:f3:64:ca:e1:b5:
58:d0:26:f0:ea:aa:09:4d:45:bd:20:3c:9d:55:37:50:ea:0a:
9e:6a:4f:97:e9:d9:b8:10:2a:58:8e:26:7e:c6:82:0f:74:a2:
8c:0c:d5:c5:de:7e:b4:61:15:15:d0:49:2d:aa:42:56:18:df:
a6:df:d6:c8
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICND0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjkw
NTUyMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM0QjA5OTUxNzQ4M0RC
QUYzMjY1RUUxREZGRkQ2ODI4REREQTY4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpT+HIuM1PhZbPLA3NqViuUuDiNgvveJYcVara9pYRvXCcZ8OH
baMQfHVkHCs2/ddOpJBsDAGKdko+o1EXrEqxSGDMPj9crTn04g3AQt0iL5/McxFL
CxzEANo3NXAoBwzb4k/NKUGQBAOcqi8mT0biEuUi6OhpRM4I8FQuXKEUswwSRXwY
W5KXEmbgm7TaeZ1g/YB68AgooYCavdm80z0nKGf/R4lB0/yKTiSveotcgBa9QiQk
8+v28ISzTjEd5kXALWUf+ueOLOBQxE881vR4UPlSkow3D432AuQrtXfrwJOMrJbU
bbdUfr6j8EBIkIzvYf8bskOHuYAQlym2ZCXdAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUNLCZUXSD268yZe4d//1oKN3aaHgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L05MQ1pVWFNEMjY4eVpl
NGRfXzFvS04zYWFIZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHMohymylnax/fB+
Y54YdJBtBBTvy8Gb6rykw8aKauBsrq4O+SyvjbNTAczSVAGFDbsXjQ6rBjtWxRd3
iaXHMdo2C1MkL6qdfiztgozGfKuoG3X8kMyoG8pxYoPgP2KdN7H74jUYUsDemrlu
SHcGeFG2BnxplBnlJqYCyOZl9ZsV9C7/PMawjAXE5ThbMwW5IFWHBWaz+iiRWQdE
DnRO4ZAJyJHC+ZMotjEJLzNSVyo1WBVYOeEZpzIe0hr7yzliH4LzZMrhtVjQJvDq
qglNRb0gPJ1VN1DqCp5qT5fp2bgQKliOJn7Ggg90oowM1cXefrRhFRXQSS2qQlYY
36bf1sg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:35 2024 by rpki-client on console-ams.rpki-client.org