Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Sn19sGeIIFtc6Su2ebeYp0Nmep8.roa
File: Sn19sGeIIFtc6Su2ebeYp0Nmep8.roa (raw, json)
Hash identifier: BI0Kdmob0zSRLAGRtXfVpkT1boSQ6GKKXTEJrJibqyU=
Subject key identifier: 4A:7D:7D:B0:67:88:20:5B:5C:E9:2B:B6:79:B7:98:A7:43:66:7A:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3755
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Sn19sGeIIFtc6Su2ebeYp0Nmep8.roa
Signing time: Tue 02 Apr 2024 08:52:14 +0000
ROA not before: Tue 02 Apr 2024 08:52:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14165 (0x3755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 08:52:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4A7D7DB06788205B5CE92BB679B798A743667A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:5c:19:62:21:ce:ee:08:bd:3c:9f:80:09:
e5:b0:45:9e:bd:97:ea:45:52:14:1a:36:6d:bd:30:
32:eb:7a:4f:8b:d2:13:f3:cc:d7:bd:34:4a:6c:99:
93:53:6f:63:a2:d0:25:8f:69:16:de:56:92:f6:41:
db:36:a6:60:71:93:fe:33:fc:51:5d:dd:81:9b:7a:
2f:3f:e1:9c:8d:58:39:c6:dd:e8:55:86:1b:47:2a:
86:a7:ed:f1:1f:3d:e9:61:4f:41:6c:26:9c:22:27:
b7:f3:27:d7:fa:6a:b2:d0:24:6d:d1:ef:12:a0:2b:
50:9c:95:5e:e7:7c:f7:2e:1f:19:e6:45:76:a3:4a:
b0:a3:79:04:dd:dd:f9:b4:90:9c:e1:0b:7e:b2:33:
3c:bd:76:58:cf:bd:00:11:2b:32:d7:32:4f:20:43:
36:83:a4:b2:eb:64:37:6f:2f:03:83:73:ae:45:d3:
11:40:88:c9:76:29:0b:b5:0e:d7:65:33:90:ae:c4:
f5:41:4d:23:e7:67:61:62:08:9e:13:01:65:17:d7:
30:c3:53:6d:92:b7:37:39:67:93:c0:b2:d8:8f:56:
69:b8:70:9e:de:a5:41:43:ef:8d:86:04:97:68:d2:
a8:4a:5a:e6:94:b8:8e:46:86:4b:61:1c:6e:80:1d:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:7D:B0:67:88:20:5B:5C:E9:2B:B6:79:B7:98:A7:43:66:7A:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Sn19sGeIIFtc6Su2ebeYp0Nmep8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
06:34:c6:6e:13:5e:13:e0:0c:67:a2:cd:c8:a2:fa:1d:01:b5:
1d:4d:91:a9:4d:32:86:31:6c:5b:fe:ec:c6:ba:6b:de:23:c6:
44:f0:14:2a:fc:29:67:7f:e0:39:d6:9f:f4:aa:ad:82:28:43:
4a:77:ed:87:da:3a:37:8b:49:ae:bf:bc:ca:dd:8c:c2:e1:73:
d9:68:79:4a:e6:de:d6:97:26:61:c4:58:b0:59:97:14:2a:49:
b5:55:44:d4:c3:ea:49:17:6c:a8:26:58:38:d5:3f:63:ef:be:
71:a9:0e:af:9a:ec:62:e7:af:0b:a4:c3:cc:be:3d:9f:2f:ab:
5b:af:7f:11:5c:34:98:d8:0a:4c:27:ff:8c:b9:45:9d:e7:7c:
8d:79:5f:71:d6:e9:3b:10:3a:d7:99:f7:25:62:6c:55:29:4d:
16:ea:fe:80:25:75:bb:49:6c:1a:8e:40:3b:28:c4:1f:a6:f8:
67:15:44:62:f7:6c:5b:20:90:b7:1b:8f:61:0b:c5:09:f3:a6:
f5:81:c5:7c:d9:87:1b:2e:5d:58:b2:1e:15:f9:d8:fe:00:55:
cf:07:d6:d6:a1:30:5c:43:3d:28:16:86:60:7a:34:3b:40:4b:
f7:64:ab:7e:84:5e:64:1d:1d:40:ef:84:f6:48:45:30:e3:6b:
4a:1f:9e:50
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICN1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDIw
ODUyMTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRBN0Q3REIwNjc4ODIw
NUI1Q0U5MkJCNjc5Qjc5OEE3NDM2NjdBOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0XlwZYiHO7gi9PJ+ACeWwRZ69l+pFUhQaNm29MDLrek+L0hPz
zNe9NEpsmZNTb2Oi0CWPaRbeVpL2Qds2pmBxk/4z/FFd3YGbei8/4ZyNWDnG3ehV
hhtHKoan7fEfPelhT0FsJpwiJ7fzJ9f6arLQJG3R7xKgK1CclV7nfPcuHxnmRXaj
SrCjeQTd3fm0kJzhC36yMzy9dljPvQARKzLXMk8gQzaDpLLrZDdvLwODc65F0xFA
iMl2KQu1DtdlM5CuxPVBTSPnZ2FiCJ4TAWUX1zDDU22Stzc5Z5PAstiPVmm4cJ7e
pUFD742GBJdo0qhKWuaUuI5GhkthHG6AHWUJAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUSn19sGeIIFtc6Su2ebeYp0Nmep8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1NuMTlzR2VJSUZ0YzZT
dTJlYmVZcDBObWVwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAAY0xm4TXhPgDGei
zcii+h0BtR1NkalNMoYxbFv+7Ma6a94jxkTwFCr8KWd/4DnWn/SqrYIoQ0p37Yfa
OjeLSa6/vMrdjMLhc9loeUrm3taXJmHEWLBZlxQqSbVVRNTD6kkXbKgmWDjVP2Pv
vnGpDq+a7GLnrwukw8y+PZ8vq1uvfxFcNJjYCkwn/4y5RZ3nfI15X3HW6TsQOteZ
9yVibFUpTRbq/oAldbtJbBqOQDsoxB+m+GcVRGL3bFsgkLcbj2ELxQnzpvWBxXzZ
hxsuXViyHhX52P4AVc8H1tahMFxDPSgWhmB6NDtAS/dkq36EXmQdHUDvhPZIRTDj
a0ofnlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org