Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lKVp8GKqv3qljnc1J11rBzteXEg.roa
File: lKVp8GKqv3qljnc1J11rBzteXEg.roa (raw, json)
Hash identifier: Qc7/zO5ZoTBA6yBNS+/i03mxeYUICWZy32JzD19PTqg=
Subject key identifier: 94:A5:69:F0:62:AA:BF:7A:A5:8E:77:35:27:5D:6B:07:3B:5E:5C:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FA1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lKVp8GKqv3qljnc1J11rBzteXEg.roa
Signing time: Sat 13 Apr 2024 10:22:55 +0000
ROA not before: Sat 13 Apr 2024 10:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16289 (0x3fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 10:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=94A569F062AABF7AA58E7735275D6B073B5E5C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:60:87:52:e2:e6:0f:af:b3:a4:14:3d:b6:
0a:be:80:50:07:3f:ab:70:6c:e5:21:93:d5:80:52:
54:ad:bd:ec:80:12:49:08:af:8d:de:36:80:5f:0d:
15:ef:fb:4c:ce:c4:15:8f:2f:1a:f1:d2:e3:2b:95:
59:96:78:37:04:3b:1f:37:2b:39:7c:e0:db:9a:c8:
f5:e8:02:6c:b2:39:c5:40:70:9a:d8:3d:aa:09:83:
30:ad:29:a0:c6:df:56:31:32:cb:86:2f:63:ae:4b:
c6:54:62:71:86:06:37:2e:8d:68:ae:d6:91:f6:dd:
38:8b:7a:60:ef:ec:25:45:ff:3d:77:9a:21:cf:b3:
8d:f0:42:36:55:f9:ec:dd:ec:7b:a1:1c:48:3c:41:
cf:54:f8:8f:4e:ce:bb:56:f3:b9:db:f2:df:74:6e:
d8:61:08:5b:5b:9d:73:17:b5:9f:40:51:e7:7d:3c:
c5:a5:d3:96:92:33:ca:8c:4e:0c:e7:ef:46:11:5e:
6d:49:b1:f4:11:0b:b1:63:4b:ee:7a:6e:3d:24:20:
74:17:94:70:10:5e:6a:09:b7:1b:84:f0:89:46:87:
55:e0:61:cd:a6:bb:76:3a:98:47:7a:ed:30:2c:10:
70:d0:8e:c1:b6:1a:c2:18:12:6f:48:45:1f:c3:a7:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A5:69:F0:62:AA:BF:7A:A5:8E:77:35:27:5D:6B:07:3B:5E:5C:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lKVp8GKqv3qljnc1J11rBzteXEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:67:40:88:9f:e4:09:46:f5:f8:dc:66:09:91:b9:4f:5a:2a:
7b:6c:60:77:c0:38:40:55:9d:e1:64:7c:aa:69:33:68:1b:39:
55:1d:fd:fd:3c:12:7f:3d:b4:99:5b:e1:11:66:fd:dd:7f:93:
2f:8b:03:fc:be:8f:b0:71:e6:7f:ec:6a:52:f3:3b:d7:01:bc:
36:68:88:28:46:8b:db:3d:b6:32:6e:13:37:99:00:43:28:e6:
2d:d8:b8:51:6d:13:8a:c2:24:ae:0b:02:78:e9:05:0c:db:da:
6f:c4:1d:f9:95:a4:aa:6e:cb:c1:a8:88:9a:f2:bb:1c:1a:a6:
f3:90:a2:85:2d:87:ea:60:0d:af:9f:47:72:1f:9f:ce:50:72:
66:1d:d8:94:94:a6:b9:84:2e:c5:a0:93:c8:69:0f:91:1a:c2:
85:5f:02:4f:a6:16:73:ba:55:5b:5c:88:b4:23:56:c2:7a:dd:
73:08:e0:60:32:6c:ab:7c:d2:f6:23:4c:b0:c0:d6:0d:77:6a:
17:b6:8c:80:43:ca:60:de:8c:20:83:c5:11:d0:cb:64:78:7e:
be:65:ee:a1:4a:ac:ac:f6:ca:3c:63:ca:14:23:f1:09:bc:45:
22:0e:e6:de:03:57:59:17:f3:7c:8a:e5:23:74:c5:8e:cc:16:
20:1f:6a:b1
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICP6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMx
MDIyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk0QTU2OUYwNjJBQUJG
N0FBNThFNzczNTI3NUQ2QjA3M0I1RTVDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4SmCHUuLmD6+zpBQ9tgq+gFAHP6twbOUhk9WAUlStveyAEkkI
r43eNoBfDRXv+0zOxBWPLxrx0uMrlVmWeDcEOx83Kzl84NuayPXoAmyyOcVAcJrY
PaoJgzCtKaDG31YxMsuGL2OuS8ZUYnGGBjcujWiu1pH23TiLemDv7CVF/z13miHP
s43wQjZV+ezd7HuhHEg8Qc9U+I9OzrtW87nb8t90bthhCFtbnXMXtZ9AUed9PMWl
05aSM8qMTgzn70YRXm1JsfQRC7FjS+56bj0kIHQXlHAQXmoJtxuE8IlGh1XgYc2m
u3Y6mEd67TAsEHDQjsG2GsIYEm9IRR/Dp9ZDAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUlKVp8GKqv3qljnc1J11rBzteXEgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2xLVnA4R0txdjNxbGpu
YzFKMTFyQnp0ZVhFZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADtnQIif5AlG9fjc
ZgmRuU9aKntsYHfAOEBVneFkfKppM2gbOVUd/f08En89tJlb4RFm/d1/ky+LA/y+
j7Bx5n/salLzO9cBvDZoiChGi9s9tjJuEzeZAEMo5i3YuFFtE4rCJK4LAnjpBQzb
2m/EHfmVpKpuy8GoiJryuxwapvOQooUth+pgDa+fR3Ifn85QcmYd2JSUprmELsWg
k8hpD5EawoVfAk+mFnO6VVtciLQjVsJ63XMI4GAybKt80vYjTLDA1g13ahe2jIBD
ymDejCCDxRHQy2R4fr5l7qFKrKz2yjxjyhQj8Qm8RSIO5t4DV1kX83yK5SN0xY7M
FiAfarE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org