Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VzzjR73Jl0rckM_DCavxoi2q4nQ.roa
File: VzzjR73Jl0rckM_DCavxoi2q4nQ.roa (raw, json)
Hash identifier: rr1l60uYhfRLPm3SXuJ2eUyBw5UK+PyrVs23freX5Tk=
Subject key identifier: 57:3C:E3:47:BD:C9:97:4A:DC:90:CF:C3:09:AB:F1:A2:2D:AA:E2:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A6D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VzzjR73Jl0rckM_DCavxoi2q4nQ.roa
Signing time: Sat 06 Apr 2024 11:52:27 +0000
ROA not before: Sat 06 Apr 2024 11:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14957 (0x3a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 11:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=573CE347BDC9974ADC90CFC309ABF1A22DAAE274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:57:e9:a2:df:ea:b5:ad:44:62:b5:bd:a8:35:
0b:2c:63:ac:46:21:af:02:c4:7b:da:f5:ad:e0:57:
6a:f3:fb:25:35:e1:0a:60:af:95:aa:59:f3:1b:30:
28:88:af:67:e0:5a:d5:a7:44:cf:8f:25:da:c5:cc:
b1:ec:f2:4c:ab:3b:c9:bc:dd:e4:ce:d8:51:1a:34:
12:73:0c:ca:35:32:85:51:13:7f:7e:85:20:3c:bd:
06:d4:b3:c2:cc:ed:14:0d:7e:f3:52:3d:a6:da:25:
bc:d9:91:7d:41:3a:35:5c:f4:c6:3d:bc:0a:c9:c0:
0e:97:18:c9:1c:f0:31:d9:f1:8e:cf:5e:fd:ed:65:
ca:69:92:1b:47:3a:3e:1a:f0:e2:1d:da:12:38:3b:
3d:9b:04:19:7c:0a:4d:cf:05:de:8f:66:57:ad:eb:
55:2a:c2:d6:9d:c4:4c:f4:1d:83:4d:74:e7:4d:22:
22:2a:86:65:9d:3b:5a:bd:ce:5c:dd:2d:11:96:91:
87:30:da:19:f1:88:9d:6a:80:3c:4e:56:50:00:3c:
9c:3e:70:b1:fb:58:15:e4:e7:8f:a6:b0:1d:ae:f4:
5b:40:9a:9a:30:5a:65:43:97:f5:b5:32:d2:03:1a:
64:cf:7f:4e:3e:56:ea:7f:19:bb:6e:5b:4b:00:1f:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:E3:47:BD:C9:97:4A:DC:90:CF:C3:09:AB:F1:A2:2D:AA:E2:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VzzjR73Jl0rckM_DCavxoi2q4nQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:4e:c3:e2:4b:3a:41:c4:74:52:94:c6:d6:b5:de:aa:66:da:
d8:2b:a4:89:1a:16:cd:c5:72:32:6a:e2:51:bb:d3:15:a8:b0:
41:96:a2:21:74:55:83:31:10:84:aa:30:95:98:96:2c:8e:24:
4a:8d:9a:d8:a6:e1:7a:02:05:43:e1:86:71:bf:61:ea:85:3f:
aa:33:f2:ad:5b:fc:0e:e9:fb:e1:23:a8:4d:ff:b8:3a:72:85:
4f:32:d0:e4:75:59:79:86:31:35:b0:43:d2:39:cb:3f:3f:c2:
1f:6d:35:9e:1a:e6:28:61:ef:77:32:6f:61:ef:e8:82:73:32:
9a:80:c2:22:7b:e1:6c:a2:8c:71:4d:cd:be:a7:bd:e9:fc:be:
0a:aa:90:8e:43:bd:17:b4:f3:c8:ca:2b:cb:be:5a:d8:88:d4:
0f:16:e9:ce:7e:b0:05:a3:18:be:66:e3:d5:9e:75:a3:55:b6:
1c:b6:d7:ee:84:57:0a:06:f9:e2:8f:2e:fd:ad:02:25:6a:b9:
73:3d:49:87:a9:26:95:20:cf:f3:3f:16:0d:c8:37:70:85:4e:
f0:66:cd:ae:86:96:3b:d2:42:fc:8f:ba:e0:d4:3a:62:d9:01:
ae:4a:a1:b1:32:e5:25:a0:79:3b:3b:2c:48:9c:c3:40:3d:26:
38:75:46:3a
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDYx
MTUyMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU3M0NFMzQ3QkRDOTk3
NEFEQzkwQ0ZDMzA5QUJGMUEyMkRBQUUyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4V+mi3+q1rURitb2oNQssY6xGIa8CxHva9a3gV2rz+yU14Qpg
r5WqWfMbMCiIr2fgWtWnRM+PJdrFzLHs8kyrO8m83eTO2FEaNBJzDMo1MoVRE39+
hSA8vQbUs8LM7RQNfvNSPabaJbzZkX1BOjVc9MY9vArJwA6XGMkc8DHZ8Y7PXv3t
ZcppkhtHOj4a8OId2hI4Oz2bBBl8Ck3PBd6PZlet61UqwtadxEz0HYNNdOdNIiIq
hmWdO1q9zlzdLRGWkYcw2hnxiJ1qgDxOVlAAPJw+cLH7WBXk54+msB2u9FtAmpow
WmVDl/W1MtIDGmTPf04+Vup/GbtuW0sAH7E7AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUVzzjR73Jl0rckM/DCavxoi2q4nQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1Z6empSNzNKbDByY2tN
X0RDYXZ4b2kycTRuUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAABOw+JLOkHEdFKU
xta13qpm2tgrpIkaFs3FcjJq4lG70xWosEGWoiF0VYMxEISqMJWYliyOJEqNmtim
4XoCBUPhhnG/YeqFP6oz8q1b/A7p++EjqE3/uDpyhU8y0OR1WXmGMTWwQ9I5yz8/
wh9tNZ4a5ihh73cyb2Hv6IJzMpqAwiJ74WyijHFNzb6nven8vgqqkI5DvRe088jK
K8u+WtiI1A8W6c5+sAWjGL5m49WedaNVthy21+6EVwoG+eKPLv2tAiVquXM9SYep
JpUgz/M/Fg3IN3CFTvBmza6GljvSQvyPuuDUOmLZAa5KobEy5SWgeTs7LEicw0A9
Jjh1Rjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org