Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VmnDGB_t2gfE21LfPhWsuXBft0s.roa
File: VmnDGB_t2gfE21LfPhWsuXBft0s.roa (raw, json)
Hash identifier: idl8KKaZOoX+VUm2v40qR8tWPxUXn9u5JthPBA91E8Q=
Subject key identifier: 56:69:C3:18:1F:ED:DA:07:C4:DB:52:DF:3E:15:AC:B9:70:5F:B7:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57A9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VmnDGB_t2gfE21LfPhWsuXBft0s.roa
Signing time: Wed 15 May 2024 11:24:17 +0000
ROA not before: Wed 15 May 2024 11:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22441 (0x57a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 11:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5669C3181FEDDA07C4DB52DF3E15ACB9705FB74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:e0:41:04:9b:0f:9e:c9:e5:fc:64:70:79:
f5:4c:45:4f:ec:24:f9:c4:bd:5b:ca:56:f3:a9:17:
a7:c8:d0:f2:f4:54:ad:5b:99:58:63:6a:b4:b8:76:
3b:b1:d0:b9:a0:c3:2c:6f:0d:5f:50:4e:09:c3:de:
7d:27:c7:4a:f5:9c:64:bb:01:02:ca:90:9a:c8:b9:
77:a3:2a:94:98:39:bf:80:c8:2b:f8:aa:8a:c7:f9:
e9:61:8a:0b:65:9d:62:c2:12:cf:a4:c2:2d:81:47:
f2:05:e5:8c:0a:ac:8d:f3:90:00:00:f1:a2:59:c5:
f1:61:b4:c4:55:18:ec:bc:01:c4:8c:a4:ac:c4:77:
84:d0:7c:81:2c:2b:d5:18:d7:cc:15:b6:6c:33:de:
8d:9e:8d:46:c6:72:40:92:46:f0:32:30:4e:78:2a:
26:50:4b:5a:9f:eb:12:54:b3:15:1d:f2:f6:f2:f8:
9f:fd:9a:b9:18:a2:fe:b6:05:85:e7:09:27:da:ce:
87:4b:f2:f1:c6:e9:82:78:5f:3b:c8:13:bf:bc:98:
d1:2b:b3:0f:7d:01:8d:69:d0:db:16:b1:c7:42:38:
d4:13:5c:f5:a9:eb:92:9e:49:75:b5:16:38:65:0f:
ce:0d:00:9b:8b:54:9c:a0:91:52:e2:9e:38:fb:fe:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:C3:18:1F:ED:DA:07:C4:DB:52:DF:3E:15:AC:B9:70:5F:B7:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VmnDGB_t2gfE21LfPhWsuXBft0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:11:31:14:0e:9a:07:5c:75:df:36:0f:3c:09:f9:c1:e2:6f:
12:ce:17:15:a5:10:a0:eb:54:bf:fa:8f:a1:84:01:46:65:21:
eb:72:36:6e:a9:7b:d7:6c:cc:ec:96:e2:c3:e5:f3:76:5c:d5:
4d:87:0c:61:f3:fe:dc:f8:01:9c:ca:07:78:7f:e0:4e:fa:ac:
0d:45:c8:cb:de:3d:d8:af:87:b5:b7:89:cb:5d:43:55:95:71:
db:a9:fb:29:6f:70:70:a8:34:c8:45:40:6f:01:8b:66:84:08:
53:0b:e2:8f:7b:9a:7e:99:82:3c:53:a3:d1:f9:cf:6b:bf:ed:
b0:25:da:ca:04:97:f1:af:af:f6:b5:09:26:09:f4:3e:bb:34:
7c:f7:cb:6e:3a:e9:47:f9:7c:6c:1b:20:4f:1f:70:32:6c:63:
3f:c0:9a:25:75:b4:a9:ce:f7:c2:37:b0:e9:ae:f0:5d:af:6b:
4b:3c:e1:e8:5f:2c:49:63:db:c9:14:9f:29:5f:7f:57:f4:15:
17:3e:6f:8c:30:53:eb:f2:7c:9d:d5:4f:e4:74:4f:4b:1b:66:
32:56:72:7c:84:74:34:3a:ec:50:6b:72:c2:d4:19:3d:7e:90:
5d:24:87:e9:06:79:49:81:23:06:ae:2f:ed:46:60:87:fe:4b:
bc:04:39:9c
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICV6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUx
MTI0MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU2NjlDMzE4MUZFRERB
MDdDNERCNTJERjNFMTVBQ0I5NzA1RkI3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYpeBBBJsPnsnl/GRwefVMRU/sJPnEvVvKVvOpF6fI0PL0VK1b
mVhjarS4djux0LmgwyxvDV9QTgnD3n0nx0r1nGS7AQLKkJrIuXejKpSYOb+AyCv4
qorH+elhigtlnWLCEs+kwi2BR/IF5YwKrI3zkAAA8aJZxfFhtMRVGOy8AcSMpKzE
d4TQfIEsK9UY18wVtmwz3o2ejUbGckCSRvAyME54KiZQS1qf6xJUsxUd8vby+J/9
mrkYov62BYXnCSfazodL8vHG6YJ4XzvIE7+8mNErsw99AY1p0NsWscdCONQTXPWp
65KeSXW1FjhlD84NAJuLVJygkVLinjj7/oqFAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUVmnDGB/t2gfE21LfPhWsuXBft0swHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ZtbkRHQl90MmdmRTIx
TGZQaFdzdVhCZnQwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABwRMRQOmgdcdd82
DzwJ+cHibxLOFxWlEKDrVL/6j6GEAUZlIetyNm6pe9dszOyW4sPl83Zc1U2HDGHz
/tz4AZzKB3h/4E76rA1FyMvePdivh7W3ictdQ1WVcdup+ylvcHCoNMhFQG8Bi2aE
CFML4o97mn6ZgjxTo9H5z2u/7bAl2soEl/Gvr/a1CSYJ9D67NHz3y2466Uf5fGwb
IE8fcDJsYz/AmiV1tKnO98I3sOmu8F2va0s84ehfLElj28kUnylff1f0FRc+b4ww
U+vyfJ3VT+R0T0sbZjJWcnyEdDQ67FBrcsLUGT1+kF0kh+kGeUmBIwauL+1GYIf+
S7wEOZw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org