Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O5pK_IqDin0oU1vOy15Gr-u_b28.roa
File: O5pK_IqDin0oU1vOy15Gr-u_b28.roa (raw, json)
Hash identifier: rnO3570trmA4ogefZI5A29lXqtpmrbhZq6QiqE896NM=
Subject key identifier: 3B:9A:4A:FC:8A:83:8A:7D:28:53:5B:CE:CB:5E:46:AF:EB:BF:6F:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56A9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O5pK_IqDin0oU1vOy15Gr-u_b28.roa
Signing time: Tue 14 May 2024 03:24:28 +0000
ROA not before: Tue 14 May 2024 03:24:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22185 (0x56a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 03:24:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B9A4AFC8A838A7D28535BCECB5E46AFEBBF6F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:cc:ed:51:5f:ef:59:26:06:43:a4:c6:da:
31:0c:b9:8c:02:13:d4:c2:ff:03:b1:6a:41:95:01:
a0:bf:8a:6e:28:51:53:bd:31:5e:fd:0a:4b:1a:2f:
90:de:2c:4a:62:cc:9f:d3:06:e4:55:63:2e:f9:a1:
73:20:f7:0a:b8:06:72:3c:e2:ac:51:40:44:e4:e1:
54:74:43:a0:b1:4b:bd:43:a0:3b:e2:4a:75:50:2d:
78:c7:be:0d:39:fb:e6:67:47:f2:ed:34:16:ad:94:
f9:bd:c0:f1:61:89:28:2d:f3:d5:e4:24:20:a4:e8:
1e:24:7b:5a:04:bb:17:ed:60:99:4f:fe:83:0f:d3:
8e:a4:6b:76:aa:c9:ae:41:7c:e2:6a:dd:4c:3b:b3:
28:7f:f4:ee:df:6a:b2:89:52:d5:0a:f7:4f:83:cf:
35:0b:02:99:f9:9c:75:f0:11:c2:66:9b:50:a2:1e:
f3:59:09:de:ed:ae:b3:43:2e:d3:bd:a8:51:21:18:
5c:70:07:56:f1:ca:2c:3d:16:92:da:36:06:68:1b:
4d:f1:23:93:1c:e9:d7:30:93:32:48:a3:29:12:4b:
c0:56:f5:ad:c8:25:b5:55:a2:4c:f9:ff:0c:ca:72:
f2:e5:e8:d6:48:fe:0c:6c:1b:7a:79:9e:4b:4e:03:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9A:4A:FC:8A:83:8A:7D:28:53:5B:CE:CB:5E:46:AF:EB:BF:6F:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O5pK_IqDin0oU1vOy15Gr-u_b28.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
21:1e:6a:fb:82:1b:c9:68:38:9a:ef:34:c7:54:09:96:c9:d0:
65:c7:57:b9:95:88:46:a9:5c:1c:04:6f:3a:b9:84:ef:70:93:
de:60:b5:51:56:af:14:64:8d:1a:66:fc:5f:3e:68:38:93:0c:
b6:fc:d1:a7:2a:82:52:0a:38:18:14:9d:a5:ef:a5:ec:99:8f:
cf:4f:6c:ad:4b:9c:96:07:f3:de:61:1a:c0:9a:fe:39:42:c5:
05:cf:0f:ca:6f:0a:80:fa:23:9c:60:cd:27:4f:5c:0f:7a:12:
02:5a:ca:9b:9e:33:a2:39:08:6a:ea:8a:6a:20:99:17:fe:3c:
fd:b7:94:b8:42:a8:9f:aa:7c:4b:16:39:0b:d2:6a:83:07:9d:
b9:cd:2a:0d:ea:ff:bd:05:a7:2d:48:48:45:2b:56:b0:0c:c3:
8c:2e:b9:8a:b5:51:52:6b:c8:ad:6d:df:49:d4:bc:bd:93:70:
e8:ae:00:d0:03:75:8f:61:22:98:f9:fd:64:9a:9d:d8:52:85:
2b:18:5c:1a:08:6b:92:00:fb:d7:bb:cf:b4:88:64:97:08:f6:
40:2b:42:cf:25:9d:72:40:5c:03:9c:37:c7:dc:01:21:74:79:
ed:42:0d:b3:f3:06:b9:4f:ab:52:c3:ab:97:a8:29:9a:ca:c0:
c1:71:f5:17
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICVqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQw
MzI0MjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNCOUE0QUZDOEE4MzhB
N0QyODUzNUJDRUNCNUU0NkFGRUJCRjZGNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGsMztUV/vWSYGQ6TG2jEMuYwCE9TC/wOxakGVAaC/im4oUVO9
MV79CksaL5DeLEpizJ/TBuRVYy75oXMg9wq4BnI84qxRQETk4VR0Q6CxS71DoDvi
SnVQLXjHvg05++ZnR/LtNBatlPm9wPFhiSgt89XkJCCk6B4ke1oEuxftYJlP/oMP
046ka3aqya5BfOJq3Uw7syh/9O7farKJUtUK90+DzzULApn5nHXwEcJmm1CiHvNZ
Cd7trrNDLtO9qFEhGFxwB1bxyiw9FpLaNgZoG03xI5Mc6dcwkzJIoykSS8BW9a3I
JbVVokz5/wzKcvLl6NZI/gxsG3p5nktOA9hpAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUO5pK/IqDin0oU1vOy15Gr+u/b28wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L081cEtfSXFEaW4wb1Ux
dk95MTVHci11X2IyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBACEeavuCG8loOJrv
NMdUCZbJ0GXHV7mViEapXBwEbzq5hO9wk95gtVFWrxRkjRpm/F8+aDiTDLb80acq
glIKOBgUnaXvpeyZj89PbK1LnJYH895hGsCa/jlCxQXPD8pvCoD6I5xgzSdPXA96
EgJaypueM6I5CGrqimogmRf+PP23lLhCqJ+qfEsWOQvSaoMHnbnNKg3q/70Fpy1I
SEUrVrAMw4wuuYq1UVJryK1t30nUvL2TcOiuANADdY9hIpj5/WSandhShSsYXBoI
a5IA+9e7z7SIZJcI9kArQs8lnXJAXAOcN8fcASF0ee1CDbPzBrlPq1LDq5eoKZrK
wMFx9Rc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org