Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ej4w7RDSAxu0yhlNNxwYAjZCgxE.roa
File: ej4w7RDSAxu0yhlNNxwYAjZCgxE.roa (raw, json)
Hash identifier: d8O3hKuVk+eC9tLR19N6zkQrV0l1NB1mrxQjWWKleZ8=
Subject key identifier: 7A:3E:30:ED:10:D2:03:1B:B4:CA:19:4D:37:1C:18:02:36:42:83:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5729
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ej4w7RDSAxu0yhlNNxwYAjZCgxE.roa
Signing time: Tue 14 May 2024 19:24:14 +0000
ROA not before: Tue 14 May 2024 19:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22313 (0x5729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 19:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7A3E30ED10D2031BB4CA194D371C180236428311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:96:3f:26:35:f4:ea:d6:8a:f8:33:40:18:
fa:ad:4a:ca:75:ba:f6:f9:cf:fd:ac:b6:96:40:c4:
41:7d:0f:68:bf:8d:df:73:63:b2:a1:19:a6:da:a0:
64:e3:b4:3d:ef:00:f4:71:5f:be:f3:3c:5b:63:07:
74:0c:28:4e:68:06:37:e1:c6:4c:d1:25:18:0b:4c:
78:c5:91:2e:d9:2f:b5:01:d2:c8:fd:88:81:9c:78:
39:93:52:09:3f:da:35:04:76:3d:47:9f:47:82:0d:
7a:da:98:1d:04:fd:a5:25:89:93:37:91:eb:85:5b:
1b:2e:57:e5:f3:ae:d8:8c:82:b0:fa:f0:d1:80:a1:
1a:b4:b2:7a:2c:70:3a:04:5b:46:43:f1:6e:d2:cf:
d1:ed:9d:d9:e6:86:00:1c:3d:32:d3:2c:14:d8:ed:
62:bf:f8:48:b7:da:b7:74:1f:d5:b3:5d:c1:68:b3:
d5:59:c0:d1:5c:36:b5:cd:94:31:71:9a:4f:f8:74:
a7:b1:c8:ff:56:4e:87:9d:5b:42:eb:df:f0:59:1e:
67:75:67:fb:0f:5f:e1:47:be:26:1c:1c:e4:ab:20:
ac:0b:67:1e:23:64:c5:9c:1c:d0:63:48:6d:e8:28:
19:08:d3:68:3f:9c:e4:21:c5:82:7d:49:41:13:c6:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:30:ED:10:D2:03:1B:B4:CA:19:4D:37:1C:18:02:36:42:83:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ej4w7RDSAxu0yhlNNxwYAjZCgxE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:4e:57:b9:93:cd:c0:d1:7a:cd:89:ff:d6:83:b6:88:bc:d9:
a7:d1:05:34:ad:f0:8a:88:5c:84:f6:55:ce:5c:d5:d3:71:9e:
e9:2a:c8:44:81:4d:f1:ad:ae:29:f4:36:a6:02:ed:a4:7d:c4:
67:b2:51:86:af:09:85:c3:d6:10:6c:33:a4:2d:be:85:dc:f0:
7d:6c:d7:3d:94:e0:cf:39:86:99:f8:90:e7:ac:6e:f0:2b:64:
fd:10:0c:d1:8c:35:31:8d:d9:d5:90:18:93:88:e4:b6:57:a9:
b1:c5:67:09:34:3c:5b:fd:b0:2b:00:68:e2:85:93:bf:59:b8:
b8:82:b9:af:28:c9:6c:11:3a:a8:91:2b:88:d8:ee:90:b8:09:
3d:12:4b:2c:bb:43:11:bc:0a:70:78:a3:d3:4e:e1:ef:c2:85:
1a:ce:45:95:ab:a4:8e:55:71:98:d2:0b:84:2e:b9:d4:90:60:
39:dc:bf:16:b1:d5:eb:63:ba:26:af:ea:57:4d:ec:fe:bd:e8:
a2:d9:bb:a0:e1:46:8d:e9:2a:bb:f0:93:57:05:3e:79:9b:ec:
be:83:5e:32:c0:74:b7:77:e2:1f:b8:68:26:d0:54:c8:6c:ea:
68:b7:07:3f:6a:20:4b:7e:01:03:be:58:c0:8e:54:a8:c3:17:
c4:98:51:26
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICVykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQx
OTI0MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdBM0UzMEVEMTBEMjAz
MUJCNENBMTk0RDM3MUMxODAyMzY0MjgzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzBpY/JjX06taK+DNAGPqtSsp1uvb5z/2stpZAxEF9D2i/jd9z
Y7KhGabaoGTjtD3vAPRxX77zPFtjB3QMKE5oBjfhxkzRJRgLTHjFkS7ZL7UB0sj9
iIGceDmTUgk/2jUEdj1Hn0eCDXramB0E/aUliZM3keuFWxsuV+XzrtiMgrD68NGA
oRq0snoscDoEW0ZD8W7Sz9HtndnmhgAcPTLTLBTY7WK/+Ei32rd0H9WzXcFos9VZ
wNFcNrXNlDFxmk/4dKexyP9WToedW0Lr3/BZHmd1Z/sPX+FHviYcHOSrIKwLZx4j
ZMWcHNBjSG3oKBkI02g/nOQhxYJ9SUETxnsbAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUej4w7RDSAxu0yhlNNxwYAjZCgxEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2VqNHc3UkRTQXh1MHlo
bE5OeHdZQWpaQ2d4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAGNOV7mTzcDRes2J
/9aDtoi82afRBTSt8IqIXIT2Vc5c1dNxnukqyESBTfGtrin0NqYC7aR9xGeyUYav
CYXD1hBsM6QtvoXc8H1s1z2U4M85hpn4kOesbvArZP0QDNGMNTGN2dWQGJOI5LZX
qbHFZwk0PFv9sCsAaOKFk79ZuLiCua8oyWwROqiRK4jY7pC4CT0SSyy7QxG8CnB4
o9NO4e/ChRrORZWrpI5VcZjSC4QuudSQYDncvxax1etjuiav6ldN7P696KLZu6Dh
Ro3pKrvwk1cFPnmb7L6DXjLAdLd34h+4aCbQVMhs6mi3Bz9qIEt+AQO+WMCOVKjD
F8SYUSY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org