Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c_asZ-ylnVx9eu73Ij6jZ9B5Oyc.roa
File: c_asZ-ylnVx9eu73Ij6jZ9B5Oyc.roa (raw, json)
Hash identifier: Tka7wdtbasdcZX/rwAhz7Qd99kT8kSL/bduVr9kYafQ=
Subject key identifier: 73:F6:AC:67:EC:A5:9D:5C:7D:7A:EE:F7:22:3E:A3:67:D0:79:3B:27
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F09
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c_asZ-ylnVx9eu73Ij6jZ9B5Oyc.roa
Signing time: Fri 03 May 2024 23:23:49 +0000
ROA not before: Fri 03 May 2024 23:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20233 (0x4f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 23:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=73F6AC67ECA59D5C7D7AEEF7223EA367D0793B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:5e:6f:9a:c2:82:06:10:ed:77:11:4e:6f:
5b:85:41:16:e8:44:09:b9:ff:83:78:fa:8d:1e:05:
de:08:f3:03:31:47:88:93:8e:d5:bb:7a:6c:96:d3:
c6:43:1f:34:33:e1:f3:04:a3:a3:d9:30:ff:64:8e:
06:ef:06:b3:fe:30:22:f3:df:b6:a5:01:ef:94:38:
20:21:7f:ea:56:27:68:f5:91:4d:12:74:5f:3c:f3:
40:a7:b6:b4:dd:66:8b:6d:35:39:cc:88:dd:b8:7a:
6d:b6:8e:70:18:b6:4c:b8:c4:cb:6c:f6:13:54:25:
50:e3:4e:d7:77:a8:50:d3:b6:0a:89:cc:63:6a:05:
67:17:9f:8d:0f:e4:c2:df:f9:f0:34:4b:08:7b:ee:
67:bd:94:fd:99:35:52:3a:65:14:85:69:b6:15:14:
89:0e:91:5c:93:4e:fb:92:c6:12:61:32:da:4f:08:
e7:bc:8e:b6:1d:f5:57:9f:ba:a6:66:fa:fe:2a:f5:
5e:ab:4a:ab:5d:cb:b3:d8:c3:7d:2b:9b:54:a3:1e:
f8:55:9d:6c:e5:d2:61:b2:12:d7:ec:16:b8:0f:6b:
58:d5:b2:ad:d9:dd:fd:b1:af:fe:53:90:8b:c6:69:
e6:45:eb:ca:fa:cb:f7:a7:ff:17:ea:93:2f:53:ac:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:AC:67:EC:A5:9D:5C:7D:7A:EE:F7:22:3E:A3:67:D0:79:3B:27
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c_asZ-ylnVx9eu73Ij6jZ9B5Oyc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:aa:ff:de:9f:5f:f0:17:43:6a:3f:57:c8:3e:1c:cc:88:e8:
22:ee:b4:64:c7:26:52:b7:00:99:0b:de:ac:85:08:be:25:cd:
68:24:2b:d6:35:d1:10:9b:ea:0e:76:39:83:32:fa:66:46:96:
9b:e0:6a:e9:96:0c:09:4c:07:a8:75:a6:e0:aa:46:55:3d:73:
ff:d9:89:fb:19:31:4c:55:8b:43:97:c4:76:09:0f:b2:d6:19:
d2:ce:d6:85:ce:2e:c9:be:6b:ce:e5:bf:23:43:08:32:5e:eb:
a3:ea:83:4d:cc:72:74:40:cd:96:e5:23:4e:e1:1a:0f:62:98:
0f:57:c8:a2:81:44:82:39:a0:2b:ac:ca:c5:92:4e:8d:f2:1f:
6c:e8:2c:d9:00:97:ce:7a:cc:14:d8:83:c9:8f:5f:2a:8a:f2:
ff:8e:9c:9d:e6:e6:51:c0:85:89:d4:87:b0:ad:11:c0:ac:c5:
8d:68:bc:f5:47:ca:64:b3:93:73:76:6a:7a:e3:27:00:32:23:
bc:e3:cf:09:8f:ec:19:c5:49:96:16:c3:29:ef:d8:50:b3:39:
ac:e5:53:87:06:e6:d2:fc:e2:2e:04:94:a5:f7:59:66:74:4d:
fa:db:de:53:9e:a9:50:6f:37:1f:36:be:36:3f:6f:e4:db:ae:
28:05:15:15
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICTwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMy
MzIzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDczRjZBQzY3RUNBNTlE
NUM3RDdBRUVGNzIyM0VBMzY3RDA3OTNCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFp15vmsKCBhDtdxFOb1uFQRboRAm5/4N4+o0eBd4I8wMxR4iT
jtW7emyW08ZDHzQz4fMEo6PZMP9kjgbvBrP+MCLz37alAe+UOCAhf+pWJ2j1kU0S
dF8880CntrTdZottNTnMiN24em22jnAYtky4xMts9hNUJVDjTtd3qFDTtgqJzGNq
BWcXn40P5MLf+fA0Swh77me9lP2ZNVI6ZRSFabYVFIkOkVyTTvuSxhJhMtpPCOe8
jrYd9VefuqZm+v4q9V6rSqtdy7PYw30rm1SjHvhVnWzl0mGyEtfsFrgPa1jVsq3Z
3f2xr/5TkIvGaeZF68r6y/en/xfqky9TrAfFAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUc/asZ+ylnVx9eu73Ij6jZ9B5OycwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2NfYXNaLXlsblZ4OWV1
NzNJajZqWjlCNU95Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALiq/96fX/AXQ2o/
V8g+HMyI6CLutGTHJlK3AJkL3qyFCL4lzWgkK9Y10RCb6g52OYMy+mZGlpvgaumW
DAlMB6h1puCqRlU9c//ZifsZMUxVi0OXxHYJD7LWGdLO1oXOLsm+a87lvyNDCDJe
66Pqg03McnRAzZblI07hGg9imA9XyKKBRII5oCusysWSTo3yH2zoLNkAl856zBTY
g8mPXyqK8v+OnJ3m5lHAhYnUh7CtEcCsxY1ovPVHymSzk3N2anrjJwAyI7zjzwmP
7BnFSZYWwynv2FCzOazlU4cG5tL84i4ElKX3WWZ0Tfrb3lOeqVBvNx82vjY/b+Tb
rigFFRU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:56 2024 by rpki-client on console-ams.rpki-client.org