Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UMv_ZyySQD5s9gAx3Vd-MgBggS8.roa
File: UMv_ZyySQD5s9gAx3Vd-MgBggS8.roa (raw, json)
Hash identifier: Z4hENyCgNysHVE9T45IlKATTdf1F1/WYL3VUa2TaUGc=
Subject key identifier: 50:CB:FF:67:2C:92:40:3E:6C:F6:00:31:DD:57:7E:32:00:60:81:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BA9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UMv_ZyySQD5s9gAx3Vd-MgBggS8.roa
Signing time: Mon 29 Apr 2024 11:23:36 +0000
ROA not before: Mon 29 Apr 2024 11:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19369 (0x4ba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 11:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=50CBFF672C92403E6CF60031DD577E320060812F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:19:26:b9:25:81:4b:8f:68:e4:b3:f7:f5:ee:
38:36:49:36:d5:cb:83:ba:99:01:5d:f6:d9:c6:b1:
44:30:34:e2:75:37:37:85:b0:66:e5:63:14:98:69:
9e:d1:4a:24:4d:b5:ac:57:27:30:1b:9b:a0:2d:3c:
c9:82:01:74:f8:a1:cb:97:62:83:96:45:b3:24:1c:
14:ea:45:a3:58:4d:b1:44:16:ae:c1:cc:f6:af:b1:
86:7b:99:53:99:66:04:18:94:a2:40:38:17:3e:f4:
fd:b6:6b:40:37:15:f6:0d:9c:04:c1:71:57:95:08:
d3:db:92:da:eb:a2:e1:5e:9e:1e:e6:24:df:d4:65:
2f:2a:d2:d7:ac:22:a5:39:c5:e8:3c:5d:f6:98:54:
e1:0b:5b:f0:76:40:65:b0:35:e2:71:9b:5b:28:b6:
cc:40:04:25:0b:c0:3e:56:ef:c9:05:00:c0:e7:fc:
f6:b2:73:57:f6:85:fc:4c:b3:8a:b1:e3:43:ce:af:
62:93:e9:f9:29:71:28:e8:67:16:9c:57:41:0e:b7:
56:05:fc:25:1a:aa:aa:c3:9d:ae:c1:ec:c2:15:bc:
70:e9:59:ec:71:16:d2:8d:67:66:48:49:30:7e:1e:
e8:63:39:06:93:fb:3f:3b:a1:77:b1:6c:7a:96:f4:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:FF:67:2C:92:40:3E:6C:F6:00:31:DD:57:7E:32:00:60:81:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UMv_ZyySQD5s9gAx3Vd-MgBggS8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:f0:09:01:3e:73:b7:3c:ae:21:d5:7a:db:c1:49:6b:d1:a9:
d0:3d:c8:86:e2:5f:df:f2:11:57:81:f9:12:3b:4c:f1:5a:36:
3f:3d:9a:dc:60:2d:1d:af:c7:7c:20:de:66:09:92:86:d6:e8:
95:a9:65:d3:e7:2d:7a:32:af:4c:56:2c:5a:59:c9:ed:0d:ee:
da:c5:d8:37:17:94:2a:c8:2b:af:1e:3d:85:ad:ce:b2:16:20:
a9:50:a2:c2:18:35:8a:f1:c1:a8:7b:5e:cc:df:0b:99:9e:e6:
b4:ec:e2:3c:a4:eb:8d:bc:e4:a7:59:2f:07:f6:d7:27:e7:9f:
96:25:40:0f:1c:e7:98:d1:a7:52:a5:87:a7:dd:93:3a:14:6c:
8c:c9:54:94:dd:5b:48:5b:cb:b7:88:23:c9:12:53:93:67:6d:
51:64:da:c8:8d:05:39:13:0c:37:3d:c8:cc:1f:7d:e0:4b:27:
53:de:d7:63:c6:23:3f:46:8e:de:6a:fa:ee:e6:03:9a:3a:2a:
be:b9:96:be:45:69:4d:81:92:f4:a7:68:33:73:97:e6:52:a0:
06:88:20:8f:e7:90:6f:15:a8:51:7f:57:d8:0b:9a:0d:55:7b:
7f:a5:75:b7:69:c6:83:9b:c2:e5:93:a2:74:7f:27:31:dc:b6:
23:89:04:81
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICS6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkx
MTIzMzZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUwQ0JGRjY3MkM5MjQw
M0U2Q0Y2MDAzMURENTc3RTMyMDA2MDgxMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzGSa5JYFLj2jks/f17jg2STbVy4O6mQFd9tnGsUQwNOJ1NzeF
sGblYxSYaZ7RSiRNtaxXJzAbm6AtPMmCAXT4ocuXYoOWRbMkHBTqRaNYTbFEFq7B
zPavsYZ7mVOZZgQYlKJAOBc+9P22a0A3FfYNnATBcVeVCNPbktrrouFenh7mJN/U
ZS8q0tesIqU5xeg8XfaYVOELW/B2QGWwNeJxm1sotsxABCULwD5W78kFAMDn/Pay
c1f2hfxMs4qx40POr2KT6fkpcSjoZxacV0EOt1YF/CUaqqrDna7B7MIVvHDpWexx
FtKNZ2ZISTB+HuhjOQaT+z87oXexbHqW9Ho5AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUUMv/ZyySQD5s9gAx3Vd+MgBggS8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VNdl9aeXlTUUQ1czln
QXgzVmQtTWdCZ2dTOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJrwCQE+c7c8riHV
etvBSWvRqdA9yIbiX9/yEVeB+RI7TPFaNj89mtxgLR2vx3wg3mYJkobW6JWpZdPn
LXoyr0xWLFpZye0N7trF2DcXlCrIK68ePYWtzrIWIKlQosIYNYrxwah7XszfC5me
5rTs4jyk64285KdZLwf21yfnn5YlQA8c55jRp1Klh6fdkzoUbIzJVJTdW0hby7eI
I8kSU5NnbVFk2siNBTkTDDc9yMwffeBLJ1Pe12PGIz9Gjt5q+u7mA5o6Kr65lr5F
aU2BkvSnaDNzl+ZSoAaIII/nkG8VqFF/V9gLmg1Ve3+ldbdpxoObwuWTonR/JzHc
tiOJBIE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org