Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iIiQxjFfOcNgmZ_gpkAHt1HGup0.roa
File: iIiQxjFfOcNgmZ_gpkAHt1HGup0.roa (raw, json)
Hash identifier: qvy41RD7z7q4VaEPNaHdu82+TfjM3IBZ/V6BYV+gtU4=
Subject key identifier: 88:88:90:C6:31:5F:39:C3:60:99:9F:E0:A6:40:07:B7:51:C6:BA:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iIiQxjFfOcNgmZ_gpkAHt1HGup0.roa
Signing time: Thu 04 Apr 2024 02:52:18 +0000
ROA not before: Thu 04 Apr 2024 02:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14501 (0x38a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 02:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=888890C6315F39C360999FE0A64007B751C6BA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:44:ca:e0:cf:73:81:f3:d9:f6:ae:fd:0c:
15:36:39:05:f6:71:ac:87:4d:05:2f:ba:0d:e5:33:
b9:2e:95:a9:e4:e0:b8:28:b1:34:80:3e:e4:c3:e2:
96:da:93:09:dc:8f:3f:6a:a0:c6:b6:cb:20:e3:79:
62:0d:0c:73:27:87:ba:c5:db:3c:9d:7a:e9:6c:e5:
ba:0e:db:80:db:8d:4c:b8:28:78:66:1b:35:0f:87:
87:96:0f:04:9a:9e:c1:2a:a6:19:1a:f2:8b:da:af:
52:f1:ea:6c:81:c1:bb:d2:55:c1:8a:d7:c3:3c:6b:
4c:bd:f7:ff:78:13:37:d3:13:8b:98:93:1d:bf:17:
01:76:d7:c4:5e:35:16:42:e2:85:90:d1:69:16:0c:
65:ee:44:86:8b:32:f3:fb:a4:f5:94:ac:7b:76:75:
13:f9:8f:6e:eb:8c:b0:6a:ad:16:9e:6e:63:4a:e2:
6c:eb:5c:52:c0:cd:51:92:2e:81:5a:e3:28:af:c9:
5b:b6:ec:be:d6:86:72:71:b5:82:91:fd:f5:5a:c6:
ba:33:f3:58:2f:c5:56:f5:9c:97:b3:a0:a0:b0:df:
cc:9c:24:98:2b:3b:61:11:d1:ca:ec:61:04:77:78:
84:96:22:9a:f1:7d:a7:d6:cb:83:f4:06:c0:4c:34:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:90:C6:31:5F:39:C3:60:99:9F:E0:A6:40:07:B7:51:C6:BA:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iIiQxjFfOcNgmZ_gpkAHt1HGup0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
74:de:82:c2:47:2d:7c:19:73:05:a2:e4:18:a9:bc:93:df:e5:
67:96:7a:df:c9:e1:c6:a1:d1:33:72:36:f8:1c:bc:93:2d:61:
4f:32:82:d5:83:68:7f:10:c9:03:86:86:58:23:cb:90:4b:7b:
0e:1e:76:d4:e5:7b:ce:87:65:4f:7c:56:da:9b:dd:13:eb:19:
ec:95:10:4d:73:80:3a:84:f7:7d:86:eb:bf:64:54:95:89:42:
59:e7:d8:87:58:f5:2a:28:ec:77:80:bd:5c:f8:a4:23:be:3c:
65:44:71:2c:c5:e1:11:d4:6b:48:60:28:57:bc:8a:bf:f6:72:
62:ad:24:e4:7a:e4:a9:7f:a6:fd:10:25:f7:ee:1d:88:84:7c:
e3:ee:a0:7a:57:b0:ff:63:4e:7b:23:cb:08:71:59:ef:e9:92:
fc:86:36:b4:26:e6:a5:7a:29:fc:f6:41:50:07:89:1d:2b:46:
56:65:2f:bd:d0:8e:74:9f:1d:4f:74:38:55:a5:4a:aa:d8:e6:
89:9d:9a:d4:00:9d:ba:89:9b:21:77:0e:0e:1b:ef:3a:44:60:
35:58:40:82:44:96:12:e7:1a:04:11:f7:a1:9f:8c:b2:25:fd:
5d:fe:c6:f1:39:56:51:fc:64:db:0e:1b:01:ac:26:24:30:90:
da:73:a7:dc
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQw
MjUyMThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg4ODg5MEM2MzE1RjM5
QzM2MDk5OUZFMEE2NDAwN0I3NTFDNkJBOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDArUTK4M9zgfPZ9q79DBU2OQX2cayHTQUvug3lM7kulank4Lgo
sTSAPuTD4pbakwncjz9qoMa2yyDjeWINDHMnh7rF2zydeuls5boO24DbjUy4KHhm
GzUPh4eWDwSansEqphka8ovar1Lx6myBwbvSVcGK18M8a0y99/94EzfTE4uYkx2/
FwF218ReNRZC4oWQ0WkWDGXuRIaLMvP7pPWUrHt2dRP5j27rjLBqrRaebmNK4mzr
XFLAzVGSLoFa4yivyVu27L7WhnJxtYKR/fVaxroz81gvxVb1nJezoKCw38ycJJgr
O2ER0crsYQR3eISWIprxfafWy4P0BsBMNOcjAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUiIiQxjFfOcNgmZ/gpkAHt1HGup0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2lJaVF4akZmT2NOZ21a
X2dwa0FIdDFIR3VwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHTegsJHLXwZcwWi
5BipvJPf5WeWet/J4cah0TNyNvgcvJMtYU8ygtWDaH8QyQOGhlgjy5BLew4edtTl
e86HZU98Vtqb3RPrGeyVEE1zgDqE932G679kVJWJQlnn2IdY9Soo7HeAvVz4pCO+
PGVEcSzF4RHUa0hgKFe8ir/2cmKtJOR65Kl/pv0QJffuHYiEfOPuoHpXsP9jTnsj
ywhxWe/pkvyGNrQm5qV6Kfz2QVAHiR0rRlZlL73QjnSfHU90OFWlSqrY5omdmtQA
nbqJmyF3Dg4b7zpEYDVYQIJElhLnGgQR96GfjLIl/V3+xvE5VlH8ZNsOGwGsJiQw
kNpzp9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org