Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Z57FbWQy7ufSGTKEcRZrCVRMkR8.roa
File: Z57FbWQy7ufSGTKEcRZrCVRMkR8.roa (raw, json)
Hash identifier: bojZNZrcTZH3/So23D8vM+lmNprTGQGcZC8aE95q0LU=
Subject key identifier: 67:9E:C5:6D:64:32:EE:E7:D2:19:32:84:71:16:6B:09:54:4C:91:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39E5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z57FbWQy7ufSGTKEcRZrCVRMkR8.roa
Signing time: Fri 05 Apr 2024 18:52:54 +0000
ROA not before: Fri 05 Apr 2024 18:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14821 (0x39e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 18:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=679EC56D6432EEE7D219328471166B09544C911F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:d8:a5:14:58:12:ec:f7:74:e7:bd:58:b9:
07:74:de:44:e5:79:20:04:4f:4d:57:8a:b0:e9:06:
02:db:a0:c7:19:a6:de:81:46:a0:37:3b:19:d9:cd:
12:53:02:f4:72:ce:14:3b:65:c0:7a:b6:c6:38:33:
88:c6:5a:49:ab:43:7c:c2:af:37:0a:88:6c:b3:db:
d5:45:c9:7b:4f:bd:a6:f0:bd:c6:ee:3f:fb:c6:78:
1a:a0:41:2e:b6:12:5c:fb:b3:8a:17:17:ea:e6:96:
72:f6:d7:38:6b:92:00:49:8e:f1:0f:27:6f:0d:ba:
74:a0:b9:f8:a3:cf:3c:aa:8e:6c:c3:d9:25:ef:b3:
e5:90:36:6f:92:22:4d:89:7f:a2:93:22:4b:08:d2:
93:31:74:15:05:b0:8f:14:20:2e:ca:6d:20:59:f9:
b9:32:bb:eb:d2:d6:b1:68:09:76:c5:5c:4b:3e:32:
6a:8c:36:22:4c:c3:1e:ba:e0:24:f4:4c:5c:c1:77:
7f:cd:f3:1c:fe:c8:d8:49:28:9e:94:55:ee:57:95:
52:c4:3f:39:d6:35:ad:9e:f7:6e:03:2b:86:a6:b6:
fd:96:9f:2c:4c:8a:64:e6:ea:79:8f:10:fd:6b:0e:
a8:a3:16:b2:9a:02:a3:ed:f8:d4:5b:6d:d9:86:e0:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:C5:6D:64:32:EE:E7:D2:19:32:84:71:16:6B:09:54:4C:91:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z57FbWQy7ufSGTKEcRZrCVRMkR8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:f2:32:45:29:fb:14:86:f5:c5:ee:c0:ef:aa:82:02:95:82:
f5:69:40:f3:e7:02:2e:78:36:0e:d9:51:6a:af:ee:66:35:64:
ed:a5:b3:e7:78:8e:18:22:7a:70:35:e8:88:06:f5:4e:17:60:
48:f5:1a:e1:52:8e:58:3f:8b:f0:3e:a3:ba:91:31:d9:d4:13:
63:92:59:ac:52:db:2e:7a:65:0e:13:53:e8:9d:62:e5:c8:cc:
34:3c:37:c4:5f:bd:0d:c4:76:87:56:8c:54:63:e1:71:91:fe:
4c:63:25:42:7b:ef:0b:c6:d0:52:f0:e9:3b:58:99:71:c9:86:
40:09:38:fc:83:07:97:96:9d:d9:27:cc:0f:62:ff:b0:67:74:
ed:8d:2c:1d:c6:55:61:0e:16:37:cf:45:f4:ad:48:fc:53:c6:
a7:4b:2c:1c:91:ff:d1:5f:1e:c2:a3:01:a6:ff:e5:76:18:3a:
9a:0e:4c:3b:65:0a:1a:f9:c1:ff:58:a6:74:45:d3:b6:a0:15:
06:c9:86:89:77:1e:30:23:b8:0f:4d:27:3e:61:dd:59:6f:7b:
1e:74:b2:af:0d:42:0b:8a:65:0d:42:e7:53:d7:58:50:22:e2:
bf:9b:7d:ae:7c:87:2d:95:46:79:a3:97:7f:78:0f:e0:45:ca:
a5:c1:62:00
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDUx
ODUyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY3OUVDNTZENjQzMkVF
RTdEMjE5MzI4NDcxMTY2QjA5NTQ0QzkxMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnVdilFFgS7Pd0571YuQd03kTleSAET01XirDpBgLboMcZpt6B
RqA3OxnZzRJTAvRyzhQ7ZcB6tsY4M4jGWkmrQ3zCrzcKiGyz29VFyXtPvabwvcbu
P/vGeBqgQS62Elz7s4oXF+rmlnL21zhrkgBJjvEPJ28NunSgufijzzyqjmzD2SXv
s+WQNm+SIk2Jf6KTIksI0pMxdBUFsI8UIC7KbSBZ+bkyu+vS1rFoCXbFXEs+MmqM
NiJMwx664CT0TFzBd3/N8xz+yNhJKJ6UVe5XlVLEPznWNa2e924DK4amtv2WnyxM
imTm6nmPEP1rDqijFrKaAqPt+NRbbdmG4DvBAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUZ57FbWQy7ufSGTKEcRZrCVRMkR8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1o1N0ZiV1F5N3VmU0dU
S0VjUlpyQ1ZSTWtSOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBACryMkUp+xSG9cXu
wO+qggKVgvVpQPPnAi54Ng7ZUWqv7mY1ZO2ls+d4jhgienA16IgG9U4XYEj1GuFS
jlg/i/A+o7qRMdnUE2OSWaxS2y56ZQ4TU+idYuXIzDQ8N8RfvQ3EdodWjFRj4XGR
/kxjJUJ77wvG0FLw6TtYmXHJhkAJOPyDB5eWndknzA9i/7BndO2NLB3GVWEOFjfP
RfStSPxTxqdLLByR/9FfHsKjAab/5XYYOpoOTDtlChr5wf9YpnRF07agFQbJhol3
HjAjuA9NJz5h3Vlvex50sq8NQguKZQ1C51PXWFAi4r+bfa58hy2VRnmjl394D+BF
yqXBYgA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org