Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RZyXSev-AFY0fmfHuH-NFce-fxY.roa
File: RZyXSev-AFY0fmfHuH-NFce-fxY.roa (raw, json)
Hash identifier: PnhL93IZZjuqCkFRWrsRpfC825UxlQ3H6Cxikt1hsuY=
Subject key identifier: 45:9C:97:49:EB:FE:00:56:34:7E:67:C7:B8:7F:8D:15:C7:BE:7F:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4259
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RZyXSev-AFY0fmfHuH-NFce-fxY.roa
Signing time: Wed 17 Apr 2024 01:23:16 +0000
ROA not before: Wed 17 Apr 2024 01:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16985 (0x4259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 01:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=459C9749EBFE0056347E67C7B87F8D15C7BE7F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:4c:b9:bf:6f:5f:14:ba:7c:2d:4d:4b:70:
6f:a6:7a:71:79:71:e2:d5:2f:2b:f6:20:92:74:19:
e7:30:3b:d3:a8:ed:97:1f:f2:43:82:d8:f6:0d:ea:
ba:5c:6f:0e:07:74:79:6f:87:cb:77:af:65:87:ee:
14:c4:5f:ba:9f:eb:6c:92:1a:04:7e:99:23:e4:fd:
5b:83:50:06:e0:2c:b0:bc:4a:32:4f:6e:35:e3:fa:
69:4d:a2:3e:dd:c1:c3:61:27:8b:50:1e:e3:99:94:
6b:b8:2b:b4:a8:b6:d1:e7:7a:53:19:cf:93:33:74:
7d:4a:3a:c8:e0:ef:be:ee:aa:84:37:32:71:ea:c3:
50:9d:fd:d6:78:cf:b9:5e:ea:5a:19:c0:0f:b5:f3:
ea:db:56:d2:5c:a7:b9:95:a2:32:a2:a4:91:42:32:
de:7d:7f:19:38:2a:e4:d8:78:58:b6:1f:81:fe:19:
d4:88:f7:4c:b2:68:68:9d:76:ad:80:9e:75:8f:4a:
6a:fa:d6:d7:dd:00:79:28:ee:aa:c1:70:ec:51:5a:
6c:17:7d:25:12:9d:4e:e0:15:b6:9e:77:1e:9f:1f:
6d:4b:70:57:5e:5f:a5:fb:a7:30:fd:e3:05:a0:43:
e4:d1:65:4a:6c:74:52:10:66:df:c6:8c:de:0c:3e:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:97:49:EB:FE:00:56:34:7E:67:C7:B8:7F:8D:15:C7:BE:7F:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RZyXSev-AFY0fmfHuH-NFce-fxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
66:ca:75:e9:81:89:69:d7:2b:c8:c2:f9:2b:38:4c:af:d7:78:
be:cb:90:69:c9:1c:f0:1c:f5:73:cc:0b:18:53:d9:1a:9f:d4:
0f:9c:ae:45:35:3c:94:84:a9:ec:5f:da:ca:fd:f5:e5:1a:0e:
c1:4d:a8:38:5b:1b:46:70:0f:35:27:ff:b6:ac:07:4b:f7:d7:
b0:ad:e7:94:2a:53:97:af:ec:ac:c5:41:b3:50:1a:32:e3:43:
a9:91:5a:54:cc:92:e2:30:1c:59:4a:ae:2e:ca:76:aa:a1:dd:
9a:a5:7b:2d:e7:77:51:b1:5e:70:f6:f3:0b:61:e0:6a:93:c8:
a1:e7:f6:5c:d3:ab:06:34:6d:a2:10:37:a6:67:40:1d:8c:e5:
b2:6c:b1:e1:6b:ce:a0:18:21:4c:11:6c:ac:f1:6b:63:70:8f:
18:b3:1d:e9:d9:10:16:ce:a4:6b:f9:ad:ea:f4:d4:e9:4b:78:
bb:d1:58:f3:41:94:66:e9:f9:9d:f7:3b:08:4c:0a:cb:4e:65:
86:4e:21:c7:5b:31:ec:68:09:29:c8:c6:90:1f:3d:5e:0f:fe:
4b:b1:16:a5:0a:a9:2c:93:e5:bc:11:a1:b2:9d:b5:59:9c:7e:
2f:ef:44:c3:26:40:30:4e:4b:54:02:9f:bb:a4:a1:ec:ce:ba:
81:ec:c3:c6
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
MTIzMTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ1OUM5NzQ5RUJGRTAw
NTYzNDdFNjdDN0I4N0Y4RDE1QzdCRTdGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAtUy5v29fFLp8LU1LcG+menF5ceLVLyv2IJJ0GecwO9Oo7Zcf
8kOC2PYN6rpcbw4HdHlvh8t3r2WH7hTEX7qf62ySGgR+mSPk/VuDUAbgLLC8SjJP
bjXj+mlNoj7dwcNhJ4tQHuOZlGu4K7SottHnelMZz5MzdH1KOsjg777uqoQ3MnHq
w1Cd/dZ4z7le6loZwA+18+rbVtJcp7mVojKipJFCMt59fxk4KuTYeFi2H4H+GdSI
90yyaGiddq2AnnWPSmr61tfdAHko7qrBcOxRWmwXfSUSnU7gFbaedx6fH21LcFde
X6X7pzD94wWgQ+TRZUpsdFIQZt/GjN4MPqtFAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQURZyXSev+AFY0fmfHuH+NFce+fxYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1JaeVhTZXYtQUZZMGZt
Zkh1SC1ORmNlLWZ4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAGbKdemBiWnXK8jC
+Ss4TK/XeL7LkGnJHPAc9XPMCxhT2Rqf1A+crkU1PJSEqexf2sr99eUaDsFNqDhb
G0ZwDzUn/7asB0v317Ct55QqU5ev7KzFQbNQGjLjQ6mRWlTMkuIwHFlKri7Kdqqh
3Zqley3nd1GxXnD28wth4GqTyKHn9lzTqwY0baIQN6ZnQB2M5bJsseFrzqAYIUwR
bKzxa2NwjxizHenZEBbOpGv5rer01OlLeLvRWPNBlGbp+Z33OwhMCstOZYZOIcdb
MexoCSnIxpAfPV4P/kuxFqUKqSyT5bwRobKdtVmcfi/vRMMmQDBOS1QCn7ukoezO
uoHsw8Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org