Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SC_QZAg5LSfhZ2LI69Xg4U8i_Ic.roa
File: SC_QZAg5LSfhZ2LI69Xg4U8i_Ic.roa (raw, json)
Hash identifier: bc9oIj3K3UTVVG2V4T1lgKbZt7kSbG+zX8T6nfycPis=
Subject key identifier: 48:2F:D0:64:08:39:2D:27:E1:67:62:C8:EB:D5:E0:E1:4F:22:FC:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43C5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SC_QZAg5LSfhZ2LI69Xg4U8i_Ic.roa
Signing time: Thu 18 Apr 2024 22:53:24 +0000
ROA not before: Thu 18 Apr 2024 22:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17349 (0x43c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 22:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=482FD06408392D27E16762C8EBD5E0E14F22FC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:59:6c:5a:a6:81:71:28:a6:ab:e5:76:95:
bd:8e:ae:a8:08:6c:37:44:8c:79:a6:43:69:3d:e8:
de:87:4d:10:fc:d8:17:cd:2d:65:3d:28:9d:ff:5d:
c7:57:bd:5d:eb:0c:79:58:e2:75:46:f7:e3:23:0f:
13:92:f2:92:78:08:16:ab:d5:eb:9d:c9:3b:ea:1f:
d9:92:40:77:66:7e:8a:dd:37:3c:70:52:ee:0c:db:
2d:d7:ec:e7:75:0e:1f:73:59:52:b7:a5:9a:2d:6c:
fb:c7:1c:d3:89:28:26:d2:61:d6:66:24:6d:4b:2f:
ce:3b:88:55:ec:22:e4:51:ab:9b:15:79:9e:a3:81:
0f:61:07:e4:5b:da:e8:fa:df:0f:3b:f3:f1:f5:80:
02:4e:ee:2d:72:f1:43:c9:b7:a9:01:e1:f0:4c:3d:
f0:e0:b5:9f:44:ea:5f:69:0b:1d:78:36:37:1a:4a:
e6:81:63:8a:66:db:fe:9c:50:0e:23:2e:aa:26:78:
1e:63:3f:22:8a:87:10:63:aa:0d:cd:de:e5:bf:47:
33:c1:dc:d2:7a:4e:dd:d1:34:81:c0:36:42:ec:b0:
eb:a7:d8:c4:30:ed:8d:f8:81:2b:36:72:a7:34:0f:
fd:d3:f1:2b:89:6b:c7:c6:55:2a:5d:78:72:bc:83:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2F:D0:64:08:39:2D:27:E1:67:62:C8:EB:D5:E0:E1:4F:22:FC:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SC_QZAg5LSfhZ2LI69Xg4U8i_Ic.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:48:9f:58:65:a5:43:18:54:8e:2b:e4:61:89:c7:b9:96:fd:
71:c9:f4:16:ae:28:5c:c7:4a:21:2c:e1:7b:61:75:44:b0:8a:
e5:3f:b9:70:78:05:d1:87:28:2f:e9:c1:1b:24:55:27:19:84:
cb:72:50:cb:f2:64:be:1b:9e:c5:62:03:80:88:a5:d6:64:b8:
e8:f6:ec:35:18:98:20:25:da:d3:be:f3:53:ac:13:33:aa:0b:
0c:7d:90:01:c3:4c:ba:e3:ff:8b:38:d3:8e:65:2c:08:ad:75:
43:46:ff:31:fe:7b:bf:63:5e:7d:06:f9:4d:6e:28:2c:78:42:
71:a3:a5:d9:bb:e4:27:b6:0b:be:98:22:9c:0f:44:d5:46:3b:
77:29:04:ef:7a:98:2c:ef:db:dd:2a:85:fd:fa:a3:9d:35:b4:
d3:d4:35:90:b4:82:02:fa:df:9c:9b:f2:81:4b:e0:66:db:5f:
28:92:e2:18:fb:43:57:ae:0e:30:ff:fc:a0:91:9b:b5:68:fd:
8b:bf:8d:c5:79:47:99:9f:0f:2a:36:0e:34:bb:5e:52:4d:1e:
96:7e:35:c3:31:c3:31:43:87:07:27:38:9d:02:ad:7d:c7:65:
b1:1b:ff:32:a2:7c:9c:b2:b2:fe:4f:ad:f4:b4:f2:97:cc:e1:
d2:ed:e6:92
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQ8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgy
MjUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ4MkZEMDY0MDgzOTJE
MjdFMTY3NjJDOEVCRDVFMEUxNEYyMkZDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF11lsWqaBcSimq+V2lb2OrqgIbDdEjHmmQ2k96N6HTRD82BfN
LWU9KJ3/XcdXvV3rDHlY4nVG9+MjDxOS8pJ4CBar1eudyTvqH9mSQHdmfordNzxw
Uu4M2y3X7Od1Dh9zWVK3pZotbPvHHNOJKCbSYdZmJG1LL847iFXsIuRRq5sVeZ6j
gQ9hB+Rb2uj63w878/H1gAJO7i1y8UPJt6kB4fBMPfDgtZ9E6l9pCx14NjcaSuaB
Y4pm2/6cUA4jLqomeB5jPyKKhxBjqg3N3uW/RzPB3NJ6Tt3RNIHANkLssOun2MQw
7Y34gSs2cqc0D/3T8SuJa8fGVSpdeHK8g/avAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUSC/QZAg5LSfhZ2LI69Xg4U8i/IcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1NDX1FaQWc1TFNmaFoy
TEk2OVhnNFU4aV9JYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJxIn1hlpUMYVI4r
5GGJx7mW/XHJ9BauKFzHSiEs4XthdUSwiuU/uXB4BdGHKC/pwRskVScZhMtyUMvy
ZL4bnsViA4CIpdZkuOj27DUYmCAl2tO+81OsEzOqCwx9kAHDTLrj/4s4045lLAit
dUNG/zH+e79jXn0G+U1uKCx4QnGjpdm75Ce2C76YIpwPRNVGO3cpBO96mCzv290q
hf36o501tNPUNZC0ggL635yb8oFL4GbbXyiS4hj7Q1euDjD//KCRm7Vo/Yu/jcV5
R5mfDyo2DjS7XlJNHpZ+NcMxwzFDhwcnOJ0CrX3HZbEb/zKifJyysv5PrfS08pfM
4dLt5pI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org