Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovdyjq83oTajWipn8GBZcKlYTFk.roa
File: Ovdyjq83oTajWipn8GBZcKlYTFk.roa (raw, json)
Hash identifier: MPd28dVsia8IW+yuq+RkauL0bbjJLUoKKrJi892ePNI=
Subject key identifier: 3A:F7:72:8E:AF:37:A1:36:A3:5A:2A:67:F0:60:59:70:A9:58:4C:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4345
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovdyjq83oTajWipn8GBZcKlYTFk.roa
Signing time: Thu 18 Apr 2024 06:53:06 +0000
ROA not before: Thu 18 Apr 2024 06:53:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17221 (0x4345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 06:53:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3AF7728EAF37A136A35A2A67F0605970A9584C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:c0:83:bf:a4:87:b5:70:bf:5d:ca:4f:52:
da:42:00:e3:27:24:35:d9:5b:fb:9a:2c:10:8f:d7:
15:d0:26:70:21:50:d1:96:c7:79:74:e5:f2:c2:95:
c0:84:55:f9:dd:3a:39:fe:af:07:96:6e:34:18:13:
54:37:09:8e:ea:86:73:a9:af:b7:ad:07:e3:d1:4e:
75:b7:c0:44:f8:05:79:a2:9d:63:fe:f2:4d:16:49:
c9:07:2b:9d:13:42:42:73:c7:33:82:6d:76:86:16:
a5:21:77:d9:aa:a1:d1:1d:c4:1e:0b:78:7f:ee:69:
76:ff:86:7a:de:0e:fc:10:4b:3e:8c:2d:56:53:ec:
30:fb:bf:e2:4f:ae:c8:d9:91:2e:60:ff:20:e1:e5:
ad:c0:94:11:17:26:90:45:9a:7a:69:1e:dc:8a:89:
7a:1d:a3:d7:71:34:72:6a:fc:de:37:e0:15:11:6a:
5b:bf:12:c1:2c:40:de:d1:40:a0:6a:c8:51:62:d9:
3f:27:be:06:99:8b:4a:d6:fe:f5:eb:86:52:0a:c6:
22:b9:a0:0c:4e:64:4d:14:af:30:54:20:6c:38:61:
44:22:32:eb:d1:28:45:96:2a:72:ef:7a:cd:fb:31:
59:93:c7:d5:b9:45:8c:10:10:b0:1e:00:04:a3:bf:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:72:8E:AF:37:A1:36:A3:5A:2A:67:F0:60:59:70:A9:58:4C:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovdyjq83oTajWipn8GBZcKlYTFk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:40:b8:ac:41:4c:a8:a0:5c:d6:e6:bb:1a:86:f1:8c:3d:b5:
b6:7c:78:d5:40:59:93:b4:34:a6:53:29:9c:6f:2a:d1:eb:4b:
1c:02:d5:6f:fe:1a:94:74:f7:2b:3d:6f:2f:ad:5b:06:c9:a9:
d1:0b:8e:ce:91:d6:3c:34:29:6c:4e:26:cf:27:7b:2e:e7:fa:
b2:97:f7:0f:b4:9f:f4:7e:ed:f9:a1:6f:0f:cf:1e:9e:ef:15:
86:74:2c:4e:4b:68:6f:2b:a7:de:5f:20:d4:81:51:99:a4:c2:
1e:f4:60:7c:38:8c:f8:25:4d:3c:fd:a3:20:dd:e8:4f:82:41:
41:53:6f:9d:fa:03:21:18:b8:da:6b:64:00:94:2b:1f:bb:1c:
d8:08:de:2e:41:21:85:51:b0:ed:81:99:b6:0a:da:ee:3f:4b:
e1:b0:ee:c3:05:d3:a2:43:04:68:18:86:eb:40:d6:4a:4d:0a:
1f:3e:e4:2b:24:30:df:45:b9:5c:4b:f9:54:66:0d:ea:d1:e4:
56:c7:2a:8a:e0:f4:d3:8f:ef:46:cd:64:ac:fd:17:49:dc:5e:
9f:bf:74:a5:85:de:9e:5c:aa:3c:d9:d6:9c:60:4a:50:50:95:
6c:ce:19:a5:2e:89:a8:77:04:96:89:1a:26:41:76:73:e7:82:
9d:5c:51:7c
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQ0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw
NjUzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBRjc3MjhFQUYzN0Ex
MzZBMzVBMkE2N0YwNjA1OTcwQTk1ODRDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFnMCDv6SHtXC/XcpPUtpCAOMnJDXZW/uaLBCP1xXQJnAhUNGW
x3l05fLClcCEVfndOjn+rweWbjQYE1Q3CY7qhnOpr7etB+PRTnW3wET4BXminWP+
8k0WSckHK50TQkJzxzOCbXaGFqUhd9mqodEdxB4LeH/uaXb/hnreDvwQSz6MLVZT
7DD7v+JPrsjZkS5g/yDh5a3AlBEXJpBFmnppHtyKiXodo9dxNHJq/N434BURalu/
EsEsQN7RQKBqyFFi2T8nvgaZi0rW/vXrhlIKxiK5oAxOZE0UrzBUIGw4YUQiMuvR
KEWWKnLves37MVmTx9W5RYwQELAeAASjv7n1AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUOvdyjq83oTajWipn8GBZcKlYTFkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L092ZHlqcTgzb1Rhaldp
cG44R0JaY0tsWVRGay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALZAuKxBTKigXNbm
uxqG8Yw9tbZ8eNVAWZO0NKZTKZxvKtHrSxwC1W/+GpR09ys9by+tWwbJqdELjs6R
1jw0KWxOJs8ney7n+rKX9w+0n/R+7fmhbw/PHp7vFYZ0LE5LaG8rp95fINSBUZmk
wh70YHw4jPglTTz9oyDd6E+CQUFTb536AyEYuNprZACUKx+7HNgI3i5BIYVRsO2B
mbYK2u4/S+Gw7sMF06JDBGgYhutA1kpNCh8+5CskMN9FuVxL+VRmDerR5FbHKorg
9NOP70bNZKz9F0ncXp+/dKWF3p5cqjzZ1pxgSlBQlWzOGaUuiah3BJaJGiZBdnPn
gp1cUXw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:38 2024 by rpki-client on console-ams.rpki-client.org