Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UoCSFEUIQhfCi54_H6qtw3f_um4.roa
File: UoCSFEUIQhfCi54_H6qtw3f_um4.roa (raw, json)
Hash identifier: 0/1M+hYYECF8IskQbK976YxjJzsEXNMjaJQDHcEoXiA=
Subject key identifier: 52:80:92:14:45:08:42:17:C2:8B:9E:3F:1F:AA:AD:C3:77:FF:BA:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B7D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UoCSFEUIQhfCi54_H6qtw3f_um4.roa
Signing time: Sun 07 Apr 2024 21:52:32 +0000
ROA not before: Sun 07 Apr 2024 21:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15229 (0x3b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 21:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5280921445084217C28B9E3F1FAAADC377FFBA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:41:b4:96:38:d6:4c:2e:77:26:cb:40:a3:
1a:7c:6b:00:cb:b9:70:ac:a7:7e:8e:60:d1:bb:68:
aa:49:0d:73:fe:f5:93:0c:83:cd:9a:bb:46:a9:a3:
40:6c:8d:30:0f:86:40:79:37:1a:a0:ca:12:24:d9:
cf:84:06:bd:37:9a:ec:71:29:71:b0:e3:9e:df:a7:
0e:7e:4e:17:df:6c:39:48:00:9c:be:0c:91:5c:62:
b9:f3:52:c2:82:4d:bc:8e:28:9f:5e:ec:ed:81:c9:
d5:b1:2e:56:f7:c0:c4:ba:e7:9e:d8:1f:1c:44:ed:
05:aa:86:cd:8a:b2:36:39:5f:3f:ae:39:bd:cb:d5:
5c:8b:05:98:f5:72:a5:81:9f:79:66:3a:40:32:7d:
ec:6b:9f:65:cc:81:a3:7b:df:f5:26:f1:2b:7d:24:
fc:de:0c:3e:43:a0:9c:12:30:d8:30:96:ba:f7:36:
56:2f:d8:84:17:7b:4a:9d:fb:ca:48:a2:70:2c:0d:
f6:63:79:c3:1a:b0:64:df:11:78:07:e2:9e:68:fc:
e3:3f:ea:66:c9:7c:ce:d9:10:34:b0:61:09:6c:4d:
f7:6c:88:84:df:6e:32:a5:c0:f5:84:e8:22:cc:02:
57:90:23:3f:8a:20:3b:39:98:77:af:1d:ec:31:fd:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:92:14:45:08:42:17:C2:8B:9E:3F:1F:AA:AD:C3:77:FF:BA:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UoCSFEUIQhfCi54_H6qtw3f_um4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:af:20:ed:9c:d1:c4:89:66:8a:4d:99:b6:79:ba:93:40:05:
40:f8:5c:6a:cc:8e:5d:a1:7a:eb:b8:9a:13:44:c3:8f:c7:92:
7a:d8:50:bd:90:f9:ab:4f:7e:cf:e7:1e:20:ca:0a:50:24:a5:
1e:6e:a6:bb:bd:06:b2:8c:9e:ba:b9:04:4b:a0:b1:b8:74:4c:
23:69:fa:95:88:20:13:7c:5d:4a:e9:62:fd:63:21:6d:c4:67:
58:a9:ff:2e:7e:14:2b:9c:b6:fc:a0:b8:da:df:9d:c5:a4:09:
f0:e3:4f:29:0e:b4:19:88:a8:96:73:5f:24:0b:f5:3c:e1:db:
0d:6a:f5:32:d1:f8:d0:a4:a6:10:a2:3e:38:4a:05:b1:e9:93:
49:a9:84:75:84:69:bf:0a:20:fa:23:0e:70:9e:96:c9:fe:d9:
47:26:ea:a5:e7:29:7c:f5:a2:6e:88:9c:04:9d:da:53:3c:a2:
a1:e2:30:e1:15:8b:5e:89:12:fc:f7:10:ea:03:8f:c9:70:96:
70:5d:6a:21:e6:1b:38:38:be:99:a4:98:94:66:d3:b3:8a:88:
6a:12:81:21:e7:2e:b5:98:60:ed:26:59:ef:b0:65:a0:f3:40:
05:9f:0e:78:c9:ee:d9:95:dd:f4:d3:2c:bc:6a:7d:04:99:b5:
91:23:3e:e7
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICO30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcy
MTUyMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUyODA5MjE0NDUwODQy
MTdDMjhCOUUzRjFGQUFBREMzNzdGRkJBNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdM0G0ljjWTC53JstAoxp8awDLuXCsp36OYNG7aKpJDXP+9ZMM
g82au0apo0BsjTAPhkB5NxqgyhIk2c+EBr03muxxKXGw457fpw5+ThffbDlIAJy+
DJFcYrnzUsKCTbyOKJ9e7O2BydWxLlb3wMS6557YHxxE7QWqhs2KsjY5Xz+uOb3L
1VyLBZj1cqWBn3lmOkAyfexrn2XMgaN73/Um8St9JPzeDD5DoJwSMNgwlrr3NlYv
2IQXe0qd+8pIonAsDfZjecMasGTfEXgH4p5o/OM/6mbJfM7ZEDSwYQlsTfdsiITf
bjKlwPWE6CLMAleQIz+KIDs5mHevHewx/XqJAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUUoCSFEUIQhfCi54/H6qtw3f/um4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VvQ1NGRVVJUWhmQ2k1
NF9INnF0dzNmX3VtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKGvIO2c0cSJZopN
mbZ5upNABUD4XGrMjl2heuu4mhNEw4/HknrYUL2Q+atPfs/nHiDKClAkpR5upru9
BrKMnrq5BEugsbh0TCNp+pWIIBN8XUrpYv1jIW3EZ1ip/y5+FCuctvyguNrfncWk
CfDjTykOtBmIqJZzXyQL9Tzh2w1q9TLR+NCkphCiPjhKBbHpk0mphHWEab8KIPoj
DnCelsn+2Ucm6qXnKXz1om6InASd2lM8oqHiMOEVi16JEvz3EOoDj8lwlnBdaiHm
Gzg4vpmkmJRm07OKiGoSgSHnLrWYYO0mWe+wZaDzQAWfDnjJ7tmV3fTTLLxqfQSZ
tZEjPuc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org