Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W8vAZuKTO5qwJxm6DLgkMMmwbLw.roa
File: W8vAZuKTO5qwJxm6DLgkMMmwbLw.roa (raw, json)
Hash identifier: jzKorc+TVLBJtKv4sB8csjE+bEqN7iqigacRZVqh2aI=
Subject key identifier: 5B:CB:C0:66:E2:93:3B:9A:B0:27:19:BA:0C:B8:24:30:C9:B0:6C:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48CD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W8vAZuKTO5qwJxm6DLgkMMmwbLw.roa
Signing time: Thu 25 Apr 2024 15:53:20 +0000
ROA not before: Thu 25 Apr 2024 15:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18637 (0x48cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 15:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5BCBC066E2933B9AB02719BA0CB82430C9B06CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:39:69:29:ca:37:38:5c:0c:38:44:2a:3c:
5b:b3:8f:02:04:47:e3:86:59:af:a4:01:8c:87:45:
29:04:d1:e9:41:98:7a:61:32:dd:66:20:58:59:22:
bd:84:55:40:ea:06:9f:6e:6c:50:14:a4:f3:c6:04:
d1:dc:bc:fa:53:3b:d3:6b:ff:1a:54:b4:64:70:44:
e5:3b:3e:73:fb:24:b2:6c:68:8d:4f:25:41:d6:e8:
85:e5:ee:0e:5e:f4:06:98:12:2c:05:d2:fd:3d:5e:
d6:3c:16:c5:22:97:92:b8:3c:6a:f4:06:25:91:04:
5a:32:a3:0e:d7:ea:cb:60:ae:5a:4e:93:bb:f5:24:
06:a8:f4:cd:3f:fa:9f:2c:39:6e:a0:27:3c:76:32:
44:22:c5:af:6b:96:4f:0a:0c:52:c6:09:31:0b:45:
ff:57:08:ba:4d:07:0d:24:c2:e5:23:38:c7:6e:aa:
9c:e0:03:c0:61:5e:39:9e:80:e1:e2:16:e1:cc:d1:
89:f2:c6:57:92:f1:8b:8e:d3:8e:4f:b5:c9:bf:36:
46:d3:0e:1a:ee:ff:a9:25:c5:11:40:dc:7d:67:b3:
de:e4:c5:12:5f:32:0e:e6:8d:86:36:9c:2e:3e:8c:
85:d2:91:4f:bf:6b:b5:3a:3d:52:53:c0:a5:b4:81:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:C0:66:E2:93:3B:9A:B0:27:19:BA:0C:B8:24:30:C9:B0:6C:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W8vAZuKTO5qwJxm6DLgkMMmwbLw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:7d:6d:b1:37:b5:20:f7:0d:c7:fb:0e:1f:dd:fc:46:b6:2e:
54:80:c0:2f:a9:c6:35:a6:c5:6e:6e:f0:21:ea:97:22:95:ea:
24:9c:e1:4d:15:c6:e7:6f:4c:8d:d7:eb:23:48:36:71:7f:00:
c7:06:ba:c4:e7:fb:3f:60:3b:a6:b1:18:50:05:cd:7f:70:e2:
55:9f:ca:57:64:bb:bd:65:6b:a2:ec:ce:e1:a8:ab:7a:99:4c:
f9:2a:a9:ac:81:6b:6f:97:17:01:66:ef:0c:d9:27:65:fb:0c:
a4:ce:81:ae:a8:b7:ec:3a:61:2c:f5:ef:a9:be:f8:65:d9:5d:
c1:5e:60:d4:29:56:ac:e7:0e:44:30:89:e4:e1:61:0b:00:1b:
41:1d:64:73:72:9b:a0:60:e1:af:fb:bd:eb:80:f0:c7:4f:23:
ac:1e:25:b1:9a:18:75:7e:1c:db:39:08:a4:04:0b:15:8d:bf:
4b:c1:7a:72:3c:e4:42:1d:cb:08:12:17:37:04:89:45:3b:00:
aa:f4:83:fe:95:eb:ba:58:70:76:34:0a:a7:bc:a2:b6:cf:e8:
e4:10:97:89:a5:09:73:aa:bd:15:0d:9a:7a:1a:c9:1b:be:63:
14:2d:a9:31:fc:11:8d:81:41:6c:4d:d9:9e:ee:b0:0a:08:8f:
02:17:b0:65
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUx
NTUzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVCQ0JDMDY2RTI5MzNC
OUFCMDI3MTlCQTBDQjgyNDMwQzlCMDZDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPITlpKco3OFwMOEQqPFuzjwIER+OGWa+kAYyHRSkE0elBmHph
Mt1mIFhZIr2EVUDqBp9ubFAUpPPGBNHcvPpTO9Nr/xpUtGRwROU7PnP7JLJsaI1P
JUHW6IXl7g5e9AaYEiwF0v09XtY8FsUil5K4PGr0BiWRBFoyow7X6stgrlpOk7v1
JAao9M0/+p8sOW6gJzx2MkQixa9rlk8KDFLGCTELRf9XCLpNBw0kwuUjOMduqpzg
A8BhXjmegOHiFuHM0YnyxleS8YuO045Ptcm/NkbTDhru/6klxRFA3H1ns97kxRJf
Mg7mjYY2nC4+jIXSkU+/a7U6PVJTwKW0gXWpAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUW8vAZuKTO5qwJxm6DLgkMMmwbLwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1c4dkFadUtUTzVxd0p4
bTZETGdrTU1td2JMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADp9bbE3tSD3Dcf7
Dh/d/Ea2LlSAwC+pxjWmxW5u8CHqlyKV6iSc4U0VxudvTI3X6yNINnF/AMcGusTn
+z9gO6axGFAFzX9w4lWfyldku71la6LszuGoq3qZTPkqqayBa2+XFwFm7wzZJ2X7
DKTOga6ot+w6YSz176m++GXZXcFeYNQpVqznDkQwieThYQsAG0EdZHNym6Bg4a/7
veuA8MdPI6weJbGaGHV+HNs5CKQECxWNv0vBenI85EIdywgSFzcEiUU7AKr0g/6V
67pYcHY0Cqe8orbP6OQQl4mlCXOqvRUNmnoayRu+YxQtqTH8EY2BQWxN2Z7usAoI
jwIXsGU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org