Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W6LRTKuKtuWiHq2WXz94msBdKWI.roa
File: W6LRTKuKtuWiHq2WXz94msBdKWI.roa (raw, json)
Hash identifier: m7eq8y/SN/MSWKpaWIjWk/+t/121e8q1FGRPA24BnzA=
Subject key identifier: 5B:A2:D1:4C:AB:8A:B6:E5:A2:1E:AD:96:5F:3F:78:9A:C0:5D:29:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 523D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W6LRTKuKtuWiHq2WXz94msBdKWI.roa
Signing time: Wed 08 May 2024 05:53:56 +0000
ROA not before: Wed 08 May 2024 05:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21053 (0x523d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 05:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5BA2D14CAB8AB6E5A21EAD965F3F789AC05D2962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:84:15:97:92:c5:6b:04:5d:36:a4:12:a3:
cc:5b:20:7b:3b:b8:7e:01:21:a6:44:fa:a4:de:71:
37:17:fb:4b:ff:51:93:d7:38:9c:e4:29:ed:f7:fe:
9d:4d:91:e9:24:42:7a:d3:7a:46:10:b1:17:09:b2:
8a:22:0e:de:dd:65:85:e4:a0:e3:5e:1a:be:8b:67:
43:14:78:1d:6d:98:38:55:1c:95:4c:af:df:7d:19:
7f:d4:3c:d0:6c:a1:5a:aa:dc:80:34:4c:a0:1e:04:
c0:f9:a3:1d:38:b6:a0:e2:6a:97:bc:47:af:b6:c9:
d4:67:11:ac:aa:a2:32:52:84:d8:86:a8:cb:bf:4f:
6e:5c:ec:91:b2:62:b6:1c:14:7a:d7:66:e6:80:ad:
2f:ac:46:d5:38:2a:10:2d:a5:c0:5f:bd:92:75:96:
37:93:de:b2:73:06:38:4a:72:8a:05:22:f1:f8:a2:
79:16:3f:e5:93:65:fa:36:17:8c:91:3e:f1:c4:19:
b8:5f:66:54:e9:80:08:3b:e0:85:8c:eb:24:92:77:
fb:4d:2f:71:ff:bc:f3:3a:9f:3d:e3:ff:48:a5:09:
58:b8:20:87:b1:52:03:43:e6:30:0b:c7:6b:d9:81:
81:60:41:eb:7b:63:f6:61:05:e6:77:09:47:4b:29:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:D1:4C:AB:8A:B6:E5:A2:1E:AD:96:5F:3F:78:9A:C0:5D:29:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W6LRTKuKtuWiHq2WXz94msBdKWI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:8b:56:89:ad:9e:5b:8a:22:bd:6d:2e:dd:fb:d6:c7:45:fd:
1e:a7:09:19:22:ab:6f:42:87:f8:05:c6:0e:41:a2:ae:18:07:
af:af:44:fb:63:b9:95:e9:d2:e6:b0:cb:b6:fb:11:0a:d6:6f:
6c:e5:c9:fe:61:37:97:9f:8e:56:de:6c:c0:d8:bd:0d:04:9e:
d6:98:e4:b7:bf:25:7a:6a:92:f0:e6:ae:ca:dc:d0:d1:95:ef:
9c:35:58:85:68:26:e9:9c:23:f4:9f:3c:f4:ae:96:b0:9e:0d:
91:a7:f6:4b:10:45:13:8a:aa:1e:36:34:c6:a4:ca:6e:96:9b:
2a:7d:a6:f5:f4:83:08:12:d3:a5:77:04:31:91:b1:a3:6a:f1:
0f:c6:d7:d0:6c:66:d8:be:e8:42:47:e0:cb:75:41:ba:5c:96:
07:25:44:1a:c7:12:62:0c:67:2d:69:0d:e6:59:1a:a9:e1:f1:
a5:2f:33:61:68:8b:7e:11:2d:a1:68:80:8f:f0:58:7a:63:45:
62:82:24:ee:e2:92:ec:71:5b:49:19:95:20:45:ca:a8:dc:d4:
27:8c:23:39:32:50:3d:45:55:fc:d1:62:b4:1a:58:86:1a:fb:
04:33:51:b2:50:cb:8a:1c:67:7d:f7:f7:e0:0a:db:d7:7f:95:
c3:90:bf:32
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICUj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDgw
NTUzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVCQTJEMTRDQUI4QUI2
RTVBMjFFQUQ5NjVGM0Y3ODlBQzA1RDI5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCj7IQVl5LFawRdNqQSo8xbIHs7uH4BIaZE+qTecTcX+0v/UZPX
OJzkKe33/p1NkekkQnrTekYQsRcJsooiDt7dZYXkoONeGr6LZ0MUeB1tmDhVHJVM
r999GX/UPNBsoVqq3IA0TKAeBMD5ox04tqDiape8R6+2ydRnEayqojJShNiGqMu/
T25c7JGyYrYcFHrXZuaArS+sRtU4KhAtpcBfvZJ1ljeT3rJzBjhKcooFIvH4onkW
P+WTZfo2F4yRPvHEGbhfZlTpgAg74IWM6ySSd/tNL3H/vPM6nz3j/0ilCVi4IIex
UgND5jALx2vZgYFgQet7Y/ZhBeZ3CUdLKbKjAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUW6LRTKuKtuWiHq2WXz94msBdKWIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1c2TFJUS3VLdHVXaUhx
MldYejk0bXNCZEtXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALiLVomtnluKIr1t
Lt371sdF/R6nCRkiq29Ch/gFxg5Boq4YB6+vRPtjuZXp0uawy7b7EQrWb2zlyf5h
N5efjlbebMDYvQ0EntaY5Le/JXpqkvDmrsrc0NGV75w1WIVoJumcI/SfPPSulrCe
DZGn9ksQRROKqh42NMakym6Wmyp9pvX0gwgS06V3BDGRsaNq8Q/G19BsZti+6EJH
4Mt1QbpclgclRBrHEmIMZy1pDeZZGqnh8aUvM2Foi34RLaFogI/wWHpjRWKCJO7i
kuxxW0kZlSBFyqjc1CeMIzkyUD1FVfzRYrQaWIYa+wQzUbJQy4ocZ3339+AK29d/
lcOQvzI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org