Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovl3TQIAsoZpcZkNC6rmD82RGVI.roa
File: Ovl3TQIAsoZpcZkNC6rmD82RGVI.roa (raw, json)
Hash identifier: 2G8mBV0qc3/FfcVUxLPFcaQIvpD1Z7CSL5lyEqrbG+8=
Subject key identifier: 3A:F9:77:4D:02:00:B2:86:69:71:99:0D:0B:AA:E6:0F:CD:91:19:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3669
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovl3TQIAsoZpcZkNC6rmD82RGVI.roa
Signing time: Mon 01 Apr 2024 03:22:12 +0000
ROA not before: Mon 01 Apr 2024 03:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13929 (0x3669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 03:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3AF9774D0200B2866971990D0BAAE60FCD911952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:d7:cc:49:f2:d3:e3:3e:03:da:55:ab:3b:
eb:fa:d8:27:fe:aa:02:d5:a1:ea:3b:3a:cb:65:d0:
a1:ee:9d:b2:35:01:4c:33:4c:d6:31:6e:01:96:e7:
fd:35:68:2d:e2:ce:3d:25:d4:02:07:d6:d0:cb:06:
c1:0a:a4:db:a3:c2:46:92:97:7b:13:52:f5:34:d9:
97:88:2c:24:e8:95:c7:c4:fa:2e:74:04:40:ee:ae:
36:8e:09:6d:31:e8:9c:77:33:2a:ea:2a:0b:2c:a3:
27:1c:d0:df:07:5f:84:fc:c3:a4:e3:1d:63:ad:88:
c8:48:85:f6:71:35:06:d0:ab:7c:54:7e:c3:64:7d:
b9:5a:f8:33:f5:aa:7a:80:cd:2d:61:b1:27:27:a8:
49:0f:10:16:c6:0d:b7:20:7c:ba:9a:cc:2c:84:b6:
09:cb:21:d6:a7:fc:f5:8d:3f:b9:8c:84:af:a5:74:
8f:f3:7b:74:0f:69:69:44:7a:ee:c8:41:56:01:29:
ef:ed:2d:04:0d:d3:14:ee:50:bd:fb:ab:f9:6b:a2:
ea:37:27:12:82:d9:96:a0:0b:85:21:fe:ab:e2:8f:
5e:d1:0e:0f:8d:c2:45:4f:24:ed:5f:3a:db:cc:77:
08:fa:2e:a3:64:fd:4c:e8:09:37:e5:02:c5:f0:c5:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:77:4D:02:00:B2:86:69:71:99:0D:0B:AA:E6:0F:CD:91:19:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ovl3TQIAsoZpcZkNC6rmD82RGVI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:ec:e6:a8:dc:6e:5f:fb:52:81:59:cc:d9:34:71:ec:02:64:
d8:df:b0:ca:f3:38:47:4f:48:8a:58:9e:55:c5:ca:2b:c7:92:
de:db:09:a2:c6:91:c7:44:5a:c6:d7:30:2f:99:d9:da:13:ff:
52:b8:4f:0c:23:11:0a:c6:60:3f:2a:bc:fd:7f:52:9d:aa:4b:
6a:0f:4b:6a:84:f0:b1:2f:20:eb:2f:bd:2b:52:5b:77:2d:29:
35:75:14:75:d9:91:cb:14:4b:31:89:da:c1:84:e2:2e:50:63:
65:28:4a:d2:59:f1:af:e4:c6:8b:86:f8:10:1c:a8:d8:ed:f7:
ba:75:0c:36:68:e4:5d:e9:a3:ca:07:a1:4f:ce:aa:d3:e4:b2:
a5:9f:de:20:8f:15:98:8b:50:7a:5a:96:c7:cc:e7:1c:9c:21:
d0:15:07:52:0a:3a:ce:ae:19:20:c8:3b:50:93:83:00:01:d6:
1f:b7:cd:c9:de:60:0d:fb:84:2f:42:8a:f9:65:83:e2:38:49:
41:25:b9:54:81:5f:27:f0:5f:cd:ec:bc:93:db:f2:f9:42:7d:
f5:90:98:a9:e8:0e:3c:fd:06:ce:6a:db:37:23:ff:fe:c1:aa:
72:6b:73:2f:a6:4d:50:49:c5:18:83:3c:7a:3f:cd:70:da:5d:
3a:4f:04:e7
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEw
MzIyMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBRjk3NzREMDIwMEIy
ODY2OTcxOTkwRDBCQUFFNjBGQ0Q5MTE5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVIdfMSfLT4z4D2lWrO+v62Cf+qgLVoeo7Ostl0KHunbI1AUwz
TNYxbgGW5/01aC3izj0l1AIH1tDLBsEKpNujwkaSl3sTUvU02ZeILCTolcfE+i50
BEDurjaOCW0x6Jx3MyrqKgssoycc0N8HX4T8w6TjHWOtiMhIhfZxNQbQq3xUfsNk
fbla+DP1qnqAzS1hsScnqEkPEBbGDbcgfLqazCyEtgnLIdan/PWNP7mMhK+ldI/z
e3QPaWlEeu7IQVYBKe/tLQQN0xTuUL37q/lrouo3JxKC2ZagC4Uh/qvij17RDg+N
wkVPJO1fOtvMdwj6LqNk/UzoCTflAsXwxZnNAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUOvl3TQIAsoZpcZkNC6rmD82RGVIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L092bDNUUUlBc29acGNa
a05DNnJtRDgyUkdWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABjs5qjcbl/7UoFZ
zNk0cewCZNjfsMrzOEdPSIpYnlXFyivHkt7bCaLGkcdEWsbXMC+Z2doT/1K4Twwj
EQrGYD8qvP1/Up2qS2oPS2qE8LEvIOsvvStSW3ctKTV1FHXZkcsUSzGJ2sGE4i5Q
Y2UoStJZ8a/kxouG+BAcqNjt97p1DDZo5F3po8oHoU/OqtPksqWf3iCPFZiLUHpa
lsfM5xycIdAVB1IKOs6uGSDIO1CTgwAB1h+3zcneYA37hC9Civllg+I4SUEluVSB
XyfwX83svJPb8vlCffWQmKnoDjz9Bs5q2zcj//7BqnJrcy+mTVBJxRiDPHo/zXDa
XTpPBOc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org