Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Uju_rQ-Qsk_TNQoIJOGZke-nAhE.roa
File: Uju_rQ-Qsk_TNQoIJOGZke-nAhE.roa (raw, json)
Hash identifier: fTugmUoYWnJ9qOXay4vFHU2ZB68+iDQGpZ9vYV9cO84=
Subject key identifier: 52:3B:BF:AD:0F:90:B2:4F:D3:35:0A:08:24:E1:99:91:EF:A7:02:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uju_rQ-Qsk_TNQoIJOGZke-nAhE.roa
Signing time: Thu 11 Apr 2024 03:52:46 +0000
ROA not before: Thu 11 Apr 2024 03:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15853 (0x3ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 03:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=523BBFAD0F90B24FD3350A0824E19991EFA70211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:54:3c:52:a2:ad:36:d0:cb:f0:97:95:de:
d8:1d:7e:11:1e:df:c4:07:28:03:6a:5b:df:18:81:
85:b9:99:89:b4:f4:28:59:72:c4:04:f8:6b:0f:f6:
a5:e3:33:57:75:69:03:87:9a:45:26:e4:fb:14:0e:
f9:bc:fe:5c:01:78:c5:c6:31:5b:21:e0:a6:7d:23:
01:cd:b2:ca:fc:fc:e9:c6:73:2f:95:a1:d0:b5:a9:
26:5b:79:9b:0c:c4:a3:8f:4a:0b:68:84:65:49:46:
e5:5b:ab:a9:27:6b:c6:50:fb:87:9d:3f:8d:93:3c:
ba:bd:c3:4b:08:29:15:4f:90:6f:f9:d5:94:91:2f:
2f:b9:80:c0:09:0f:7f:a0:ab:4a:07:cc:43:d8:fd:
23:a7:5d:09:9a:08:c6:ac:8b:2d:60:21:af:fb:1f:
60:59:89:bd:30:06:f5:f7:8b:3f:f8:5e:74:4c:11:
5b:ef:86:0a:66:3f:b5:ac:54:71:8d:56:6f:bd:b4:
0f:26:10:a0:38:ab:95:01:32:17:63:85:bd:d7:38:
82:5c:91:a1:a0:d7:6c:90:b8:3a:99:67:b7:3e:74:
79:59:dd:cf:67:9c:fe:fa:82:8e:ef:50:63:08:d2:
54:d1:5e:33:a5:63:a7:c6:11:e5:f8:30:db:86:02:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:BF:AD:0F:90:B2:4F:D3:35:0A:08:24:E1:99:91:EF:A7:02:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uju_rQ-Qsk_TNQoIJOGZke-nAhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:34:7c:3f:e6:8f:33:09:24:d5:83:24:c4:06:b1:cb:3f:55:
a3:89:4a:70:38:d0:38:b9:c3:fa:b8:81:46:bf:85:a0:c5:92:
6c:43:27:6d:f2:ac:e9:d0:3e:89:e3:9a:2b:26:cc:cc:d5:8c:
e9:cb:1d:6f:0a:37:af:57:8b:3c:eb:9e:90:b0:a5:86:ec:81:
b9:41:68:c8:50:96:3b:c0:58:32:3f:a3:e0:c8:3c:6d:6e:ab:
a3:74:c2:a9:83:7d:0f:ac:7f:db:a9:8a:44:d5:e1:e4:a2:9f:
e4:83:1a:e1:1b:19:0a:27:cf:42:e0:70:e3:f1:73:0b:92:fe:
98:6e:3d:12:09:ab:ed:2b:2c:44:a5:30:ef:73:a9:2d:42:e4:
5f:61:58:9f:bb:9c:e9:f7:be:a6:ff:61:84:17:51:ad:14:5e:
31:3a:cd:46:a7:29:63:91:f6:67:5e:c1:ef:05:dd:a8:34:19:
93:31:91:da:6e:79:63:b2:01:64:99:fc:61:ab:7f:9a:25:41:
f8:60:df:8b:a7:99:d8:cd:bc:fd:b4:b7:bf:ce:07:f2:cd:bf:
86:32:ca:29:ca:91:8c:7b:aa:d1:45:9b:5a:ab:fa:26:10:73:
bb:a9:6a:f8:70:8f:70:84:5d:21:2b:8b:9f:4d:eb:2f:ae:2d:
8a:85:2c:59
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEw
MzUyNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUyM0JCRkFEMEY5MEIy
NEZEMzM1MEEwODI0RTE5OTkxRUZBNzAyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ01Q8UqKtNtDL8JeV3tgdfhEe38QHKANqW98YgYW5mYm09ChZ
csQE+GsP9qXjM1d1aQOHmkUm5PsUDvm8/lwBeMXGMVsh4KZ9IwHNssr8/OnGcy+V
odC1qSZbeZsMxKOPSgtohGVJRuVbq6kna8ZQ+4edP42TPLq9w0sIKRVPkG/51ZSR
Ly+5gMAJD3+gq0oHzEPY/SOnXQmaCMasiy1gIa/7H2BZib0wBvX3iz/4XnRMEVvv
hgpmP7WsVHGNVm+9tA8mEKA4q5UBMhdjhb3XOIJckaGg12yQuDqZZ7c+dHlZ3c9n
nP76go7vUGMI0lTRXjOlY6fGEeX4MNuGAiItAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUUju/rQ+Qsk/TNQoIJOGZke+nAhEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VqdV9yUS1Rc2tfVE5R
b0lKT0daa2UtbkFoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEE0fD/mjzMJJNWD
JMQGscs/VaOJSnA40Di5w/q4gUa/haDFkmxDJ23yrOnQPonjmismzMzVjOnLHW8K
N69XizzrnpCwpYbsgblBaMhQljvAWDI/o+DIPG1uq6N0wqmDfQ+sf9upikTV4eSi
n+SDGuEbGQonz0LgcOPxcwuS/phuPRIJq+0rLESlMO9zqS1C5F9hWJ+7nOn3vqb/
YYQXUa0UXjE6zUanKWOR9mdewe8F3ag0GZMxkdpueWOyAWSZ/GGrf5olQfhg34un
mdjNvP20t7/OB/LNv4YyyinKkYx7qtFFm1qr+iYQc7upavhwj3CEXSEri59N6y+u
LYqFLFk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org