Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/e4SCuLplvuN38cptEZaUwhrC2gE.roa
File: e4SCuLplvuN38cptEZaUwhrC2gE.roa (raw, json)
Hash identifier: NZWlKWzyzARgco9hP4ATD7ADnZrK3zojYwssFEYtXgk=
Subject key identifier: 7B:84:82:B8:BA:65:BE:E3:77:F1:CA:6D:11:96:94:C2:1A:C2:DA:01
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4159
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e4SCuLplvuN38cptEZaUwhrC2gE.roa
Signing time: Mon 15 Apr 2024 17:22:54 +0000
ROA not before: Mon 15 Apr 2024 17:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16729 (0x4159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 17:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7B8482B8BA65BEE377F1CA6D119694C21AC2DA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:96:18:c5:fc:ed:d7:50:0e:aa:d9:b7:e3:
57:ec:ca:7e:1f:49:36:50:c8:f2:28:61:ef:a0:13:
97:69:8b:9d:e8:97:a4:b9:58:10:69:d5:2e:96:f0:
65:c2:4b:77:a4:ce:1a:29:3c:01:d7:8c:6d:eb:d4:
73:2c:3a:70:3d:1c:1b:43:92:5a:60:d4:69:37:0e:
14:80:6b:e3:74:9f:06:c5:16:6b:db:a9:67:f4:41:
ca:51:20:44:c8:eb:6f:3c:f2:d1:10:3b:84:74:eb:
8e:75:28:20:f1:c3:d8:34:6e:e7:33:7d:54:df:a2:
dd:e9:bd:38:19:9d:a9:2f:30:7b:de:8b:b6:49:d2:
74:22:d7:7e:53:a6:28:7d:e6:1e:c4:3c:79:0f:43:
c9:eb:54:72:93:7c:2c:79:83:e8:5e:aa:ab:16:2e:
fa:45:a3:3b:5b:4b:9a:3e:b4:d2:37:6e:c9:7a:0f:
03:89:59:d6:e4:4d:c9:75:a2:d8:fc:c1:82:32:33:
6c:18:9d:57:76:9a:7e:5e:fb:fc:2d:f3:9f:64:73:
1a:6c:dc:be:ed:2b:b4:59:31:08:ac:7b:ab:29:fe:
9f:bc:e3:6a:bb:8f:d6:d0:ad:58:31:44:03:82:08:
65:8d:58:c1:00:92:3f:ac:98:11:22:7d:bc:e4:89:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:82:B8:BA:65:BE:E3:77:F1:CA:6D:11:96:94:C2:1A:C2:DA:01
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/e4SCuLplvuN38cptEZaUwhrC2gE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:e1:a1:59:4f:28:64:30:e4:21:c5:41:e8:79:b9:72:b5:5d:
07:16:14:80:f7:0b:36:de:3b:2e:34:ed:70:db:ea:a3:ee:35:
14:63:70:43:6e:fa:cc:a4:45:ed:8e:3c:b3:c8:4e:c5:f2:07:
0a:f0:c4:43:67:70:d8:e7:20:9b:27:b8:23:11:b7:19:0f:b6:
d3:6c:ff:ce:58:56:65:21:09:5c:04:58:a4:ce:35:6d:07:30:
b5:f9:d2:1a:07:9c:e3:35:c1:7e:39:ad:70:b3:85:16:46:2a:
0e:9d:a8:99:ef:5c:85:01:94:29:99:82:a6:7e:e8:73:2e:46:
99:e0:03:a8:95:69:f9:7d:ca:6c:31:56:de:c8:41:ea:26:c4:
3b:8a:6b:45:71:36:2d:cf:e3:72:24:2b:9f:4b:56:ba:84:2b:
08:36:97:7a:96:bf:f0:f0:22:d0:dd:42:f2:c5:15:62:80:5e:
97:63:3a:2b:5f:eb:b2:bf:0f:38:2b:22:48:ca:38:4a:c9:f1:
4d:a4:da:33:88:fb:a4:27:1f:c3:f9:d0:e8:41:56:ab:c2:4a:
8b:fb:55:bc:3c:01:15:93:1a:66:f1:a9:d2:12:81:2a:fb:56:
37:49:4d:d2:9c:de:e7:7f:4c:99:95:bc:ec:55:f6:5d:26:65:
2f:14:3a:4f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUx
NzIyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdCODQ4MkI4QkE2NUJF
RTM3N0YxQ0E2RDExOTY5NEMyMUFDMkRBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF9pYYxfzt11AOqtm341fsyn4fSTZQyPIoYe+gE5dpi53ol6S5
WBBp1S6W8GXCS3ekzhopPAHXjG3r1HMsOnA9HBtDklpg1Gk3DhSAa+N0nwbFFmvb
qWf0QcpRIETI62888tEQO4R06451KCDxw9g0buczfVTfot3pvTgZnakvMHvei7ZJ
0nQi135Tpih95h7EPHkPQ8nrVHKTfCx5g+heqqsWLvpFoztbS5o+tNI3bsl6DwOJ
WdbkTcl1otj8wYIyM2wYnVd2mn5e+/wt859kcxps3L7tK7RZMQise6sp/p+842q7
j9bQrVgxRAOCCGWNWMEAkj+smBEifbzkib7pAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUe4SCuLplvuN38cptEZaUwhrC2gEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2U0U0N1THBsdnVOMzhj
cHRFWmFVd2hyQzJnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALzhoVlPKGQw5CHF
Qeh5uXK1XQcWFID3CzbeOy407XDb6qPuNRRjcENu+sykRe2OPLPITsXyBwrwxENn
cNjnIJsnuCMRtxkPttNs/85YVmUhCVwEWKTONW0HMLX50hoHnOM1wX45rXCzhRZG
Kg6dqJnvXIUBlCmZgqZ+6HMuRpngA6iVafl9ymwxVt7IQeomxDuKa0VxNi3P43Ik
K59LVrqEKwg2l3qWv/DwItDdQvLFFWKAXpdjOitf67K/DzgrIkjKOErJ8U2k2jOI
+6QnH8P50OhBVqvCSov7Vbw8ARWTGmbxqdISgSr7VjdJTdKc3ud/TJmVvOxV9l0m
ZS8UOk8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org