Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZcEcsNnRpdlW0bcXP1ABAXWgZNw.roa
File: ZcEcsNnRpdlW0bcXP1ABAXWgZNw.roa (raw, json)
Hash identifier: Ju4VCOQkqN0eHvoerYqxJxWOdtel3DWEyn7H38YHnOA=
Subject key identifier: 65:C1:1C:B0:D9:D1:A5:D9:56:D1:B7:17:3F:50:01:01:75:A0:64:DC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 482D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZcEcsNnRpdlW0bcXP1ABAXWgZNw.roa
Signing time: Wed 24 Apr 2024 19:53:17 +0000
ROA not before: Wed 24 Apr 2024 19:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18477 (0x482d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 19:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65C11CB0D9D1A5D956D1B7173F50010175A064DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:e5:17:81:ff:cc:18:22:8c:e0:de:3b:70:
df:ca:19:56:4c:29:e2:9c:7d:3d:54:53:44:40:5b:
9a:ca:79:34:aa:1a:50:95:a9:e5:15:55:56:eb:20:
37:da:8f:66:31:0f:c7:74:93:32:94:6a:81:25:4f:
5f:6b:e8:24:15:55:ef:63:d7:19:cd:21:f8:75:3f:
15:37:28:75:9a:eb:6e:6f:6d:20:28:22:41:80:77:
c4:4f:c8:50:71:e7:b9:c7:0c:2a:38:ee:e3:25:68:
06:68:bd:df:80:61:79:cc:38:35:62:07:25:92:63:
95:b4:da:a5:ce:ea:19:d5:2f:58:54:99:82:37:bc:
b7:f8:94:05:42:10:93:fd:f2:7e:eb:25:d2:5f:2e:
86:03:cc:c3:28:68:ae:70:41:a2:bb:c1:d6:00:97:
ec:65:75:04:4f:97:93:76:83:8c:f4:4a:e8:51:8f:
a3:b7:e4:48:7c:fd:d8:4d:27:e7:ce:f6:b1:36:3b:
7d:8f:51:6e:de:57:b6:73:54:c8:77:d5:34:1d:a5:
bc:dc:df:51:6e:06:ee:f8:0f:6e:11:99:55:fa:65:
51:d2:a7:4e:e0:93:b4:44:4e:d1:23:3a:aa:a9:e5:
31:13:06:e4:5f:5e:ff:53:2d:c8:0a:cb:81:fe:84:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:1C:B0:D9:D1:A5:D9:56:D1:B7:17:3F:50:01:01:75:A0:64:DC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZcEcsNnRpdlW0bcXP1ABAXWgZNw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:b5:f3:a2:46:52:86:7e:15:d0:13:e7:5c:24:84:d0:cc:eb:
59:18:15:6f:9c:22:c0:62:56:72:c3:bc:5d:38:6d:bd:50:ba:
5d:36:d8:00:cb:1c:ea:fc:e5:cd:05:bf:98:b0:2f:20:41:96:
ee:d1:b8:0a:46:f9:32:19:e2:43:95:dc:77:51:fd:ae:7d:a1:
69:61:ea:88:fd:29:8b:d2:68:5a:4e:f1:52:46:f8:0b:9e:6c:
6a:0d:88:da:da:cb:83:24:e9:61:a6:c4:5e:b8:02:0e:03:28:
af:4e:13:b8:5f:25:ad:ee:f0:88:11:46:32:88:78:b7:df:2d:
cc:f7:7a:4d:de:11:ab:25:40:5c:a9:59:4c:10:dc:09:c5:1a:
dd:9a:bd:11:bd:00:57:c4:04:21:d6:9d:33:e4:4f:5e:a8:dc:
e8:cb:8c:2b:a8:54:9d:d4:91:f7:f1:95:a9:1c:55:d7:5f:23:
23:e6:71:51:f6:a6:f8:92:67:90:da:5f:40:db:7a:c4:7c:e2:
1f:1d:8c:ac:f0:98:61:fa:fd:c0:96:a7:e4:39:27:ce:e7:0b:
ab:27:ea:29:59:86:2f:20:63:32:ee:4f:77:d6:f3:b5:04:59:
c2:cf:cb:77:70:85:fc:e4:ba:b5:bc:b9:8b:6a:d3:3b:4c:ae:
78:02:ea:6d
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQx
OTUzMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY1QzExQ0IwRDlEMUE1
RDk1NkQxQjcxNzNGNTAwMTAxNzVBMDY0REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOoeUXgf/MGCKM4N47cN/KGVZMKeKcfT1UU0RAW5rKeTSqGlCV
qeUVVVbrIDfaj2YxD8d0kzKUaoElT19r6CQVVe9j1xnNIfh1PxU3KHWa625vbSAo
IkGAd8RPyFBx57nHDCo47uMlaAZovd+AYXnMODViByWSY5W02qXO6hnVL1hUmYI3
vLf4lAVCEJP98n7rJdJfLoYDzMMoaK5wQaK7wdYAl+xldQRPl5N2g4z0SuhRj6O3
5Eh8/dhNJ+fO9rE2O32PUW7eV7ZzVMh31TQdpbzc31FuBu74D24RmVX6ZVHSp07g
k7RETtEjOqqp5TETBuRfXv9TLcgKy4H+hOJdAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUZcEcsNnRpdlW0bcXP1ABAXWgZNwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1pjRWNzTm5ScGRsVzBi
Y1hQMUFCQVhXZ1pOdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAH2186JGUoZ+FdAT
51wkhNDM61kYFW+cIsBiVnLDvF04bb1Qul022ADLHOr85c0Fv5iwLyBBlu7RuApG
+TIZ4kOV3HdR/a59oWlh6oj9KYvSaFpO8VJG+AuebGoNiNray4Mk6WGmxF64Ag4D
KK9OE7hfJa3u8IgRRjKIeLffLcz3ek3eEaslQFypWUwQ3AnFGt2avRG9AFfEBCHW
nTPkT16o3OjLjCuoVJ3UkffxlakcVddfIyPmcVH2pviSZ5DaX0DbesR84h8djKzw
mGH6/cCWp+Q5J87nC6sn6ilZhi8gYzLuT3fW87UEWcLPy3dwhfzkurW8uYtq0ztM
rngC6m0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org