Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Pei0gYtFjagRvxBFYdMpOwvCeTU.roa
File: Pei0gYtFjagRvxBFYdMpOwvCeTU.roa (raw, json)
Hash identifier: 3MDy7z8eBeuIvJpVSf3Kbz2V/YpMxPmTFkxDVmGoCqs=
Subject key identifier: 3D:E8:B4:81:8B:45:8D:A8:11:BF:10:45:61:D3:29:3B:0B:C2:79:35
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52C5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pei0gYtFjagRvxBFYdMpOwvCeTU.roa
Signing time: Wed 08 May 2024 22:53:59 +0000
ROA not before: Wed 08 May 2024 22:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21189 (0x52c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 22:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3DE8B4818B458DA811BF104561D3293B0BC27935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:ab:60:8d:2c:42:ea:34:a9:eb:dd:78:bd:
eb:27:ca:31:bb:07:4a:fc:a6:5c:1e:bd:1b:ce:12:
f6:fd:f5:9a:13:7e:8a:5e:28:b0:e9:06:f5:1a:28:
5b:87:8d:80:d7:ec:e9:66:3b:4e:4d:80:b4:29:6e:
79:ec:8a:6a:01:a8:58:da:c0:a4:af:ab:3d:58:b7:
42:ab:70:92:19:93:18:98:f5:27:49:94:63:e8:d2:
7e:c6:f6:9d:7e:f4:c6:e5:73:b0:ee:3f:4a:47:8a:
1c:78:a5:c9:4f:59:1d:b0:0e:4a:88:8e:85:e0:1f:
bd:dc:11:38:71:03:d6:39:d6:20:d6:18:dc:c5:39:
1b:42:28:e7:73:3a:25:74:4b:0a:6d:7c:56:35:ac:
bd:aa:48:05:0a:ac:2c:a6:8b:75:dd:68:44:0c:c3:
11:13:5a:d0:63:f3:22:d2:9c:dc:33:f6:f1:1b:aa:
2f:4f:64:59:33:7f:75:5a:e1:1a:3e:db:8c:3f:7a:
43:34:e7:c3:ed:32:aa:61:4f:f3:fa:64:d2:91:71:
4b:8c:52:95:5d:aa:57:f2:08:2d:f8:57:c6:78:74:
dd:44:bd:70:29:33:53:91:ed:0f:33:31:77:68:ea:
ae:de:f0:8b:c8:61:d8:1c:8b:68:ff:bc:2e:51:15:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:B4:81:8B:45:8D:A8:11:BF:10:45:61:D3:29:3B:0B:C2:79:35
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pei0gYtFjagRvxBFYdMpOwvCeTU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:30:8d:b4:d4:73:9b:28:90:53:1f:e2:3b:cf:36:2f:04:ba:
b9:07:6b:07:b4:be:8e:cf:b7:3e:b7:01:a3:b8:d6:3c:b8:d7:
f8:b1:85:ee:88:26:9f:44:1a:80:f9:f0:79:33:32:93:f8:d9:
53:9c:b0:51:47:92:54:13:5d:9b:87:8f:71:98:46:d2:b8:2d:
f8:89:2b:46:1c:da:60:2e:74:fc:cf:83:d2:56:7c:e5:93:a7:
c2:66:86:00:dd:12:76:61:6d:04:a1:1f:22:96:08:ac:28:1c:
08:70:02:a4:81:46:45:b9:56:87:b9:a1:92:5f:e4:7a:5d:8f:
d6:b4:b0:a1:41:f0:0b:ff:97:88:ed:11:9d:2f:7f:e9:e3:41:
85:25:24:92:93:f1:79:b3:02:f7:c7:2e:e7:b4:d9:ab:94:8f:
93:d6:d4:80:f5:82:82:37:6c:1d:ec:b0:c9:6b:ec:56:8b:1c:
1c:f1:3c:f8:e4:99:d6:0a:16:93:3d:06:32:67:35:04:e5:ab:
e0:89:76:1d:b4:4b:f0:30:cf:02:9a:66:b1:f6:95:fd:37:ff:
03:29:ef:1f:72:26:e8:6a:ee:ca:eb:04:1d:f5:9b:3a:c4:5f:
65:f0:b6:64:d3:f6:24:52:6d:46:e7:9d:c4:54:fa:4b:e6:f2:
77:f8:43:ee
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICUsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDgy
MjUzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNERThCNDgxOEI0NThE
QTgxMUJGMTA0NTYxRDMyOTNCMEJDMjc5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAr6tgjSxC6jSp6914vesnyjG7B0r8plwevRvOEvb99ZoTfope
KLDpBvUaKFuHjYDX7OlmO05NgLQpbnnsimoBqFjawKSvqz1Yt0KrcJIZkxiY9SdJ
lGPo0n7G9p1+9Mblc7DuP0pHihx4pclPWR2wDkqIjoXgH73cEThxA9Y51iDWGNzF
ORtCKOdzOiV0SwptfFY1rL2qSAUKrCymi3XdaEQMwxETWtBj8yLSnNwz9vEbqi9P
ZFkzf3Va4Ro+24w/ekM058PtMqphT/P6ZNKRcUuMUpVdqlfyCC34V8Z4dN1EvXAp
M1OR7Q8zMXdo6q7e8IvIYdgci2j/vC5RFakzAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUPei0gYtFjagRvxBFYdMpOwvCeTUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BlaTBnWXRGamFnUnZ4
QkZZZE1wT3d2Q2VUVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEwwjbTUc5sokFMf
4jvPNi8EurkHawe0vo7Ptz63AaO41jy41/ixhe6IJp9EGoD58HkzMpP42VOcsFFH
klQTXZuHj3GYRtK4LfiJK0Yc2mAudPzPg9JWfOWTp8JmhgDdEnZhbQShHyKWCKwo
HAhwAqSBRkW5Voe5oZJf5Hpdj9a0sKFB8Av/l4jtEZ0vf+njQYUlJJKT8XmzAvfH
Lue02auUj5PW1ID1goI3bB3ssMlr7FaLHBzxPPjkmdYKFpM9BjJnNQTlq+CJdh20
S/AwzwKaZrH2lf03/wMp7x9yJuhq7srrBB31mzrEX2XwtmTT9iRSbUbnncRU+kvm
8nf4Q+4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:39 2024 by rpki-client on console-ams.rpki-client.org