Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oQXcy7TR5QIH3KXoUatBcbKGQNk.roa
File: oQXcy7TR5QIH3KXoUatBcbKGQNk.roa (raw, json)
Hash identifier: qOIf9A517FoUtbwCjtuG02E2+shLXpJmPxv4wAR+U5o=
Subject key identifier: A1:05:DC:CB:B4:D1:E5:02:07:DC:A5:E8:51:AB:41:71:B2:86:40:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4339
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oQXcy7TR5QIH3KXoUatBcbKGQNk.roa
Signing time: Thu 18 Apr 2024 05:22:59 +0000
ROA not before: Thu 18 Apr 2024 05:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17209 (0x4339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 05:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A105DCCBB4D1E50207DCA5E851AB4171B28640D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:72:c8:58:bc:24:67:b9:cb:2e:44:c3:9e:
7e:83:9e:a8:fc:95:26:26:2f:65:f6:c2:89:df:11:
99:af:48:97:f1:66:18:92:ae:bb:e3:ad:c1:02:e6:
af:82:6b:c6:34:90:c4:17:a6:c4:e9:84:7b:e0:5b:
06:fc:b3:bd:db:da:33:fe:20:9e:48:55:93:95:15:
a7:ff:6d:67:a6:f5:3e:50:b8:52:3f:06:29:fd:f0:
43:db:f7:fe:d4:24:76:f8:a2:8d:cd:0a:ca:a4:9d:
5c:f5:99:24:41:bf:e2:0d:11:64:fd:48:3a:0f:4f:
06:fa:ce:e3:6c:62:bc:8b:98:66:90:0a:09:9b:96:
1e:e0:9b:14:35:7c:03:0a:da:e1:e2:35:03:85:c0:
1f:33:62:74:b9:ab:d7:f1:f0:4a:bf:8d:f9:79:59:
19:b2:2b:ff:c6:70:78:f2:a1:63:a9:e2:d7:da:60:
d4:d8:15:e1:99:96:8d:5e:f1:7a:ce:e1:2f:6d:f9:
51:23:e7:0d:14:ed:9b:4c:8f:d9:bc:9a:f5:a2:22:
6e:3a:54:c6:39:29:4d:0a:ad:5f:9a:b0:4f:08:69:
7e:c9:ec:1f:7b:3e:8b:a8:51:24:08:64:3f:85:6d:
3c:5b:14:31:a2:92:63:43:de:b5:e9:ba:c7:21:97:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:DC:CB:B4:D1:E5:02:07:DC:A5:E8:51:AB:41:71:B2:86:40:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oQXcy7TR5QIH3KXoUatBcbKGQNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
39:0e:d1:09:6f:77:5a:be:db:b3:31:18:a0:d6:9d:06:97:2e:
30:69:c4:b7:8b:de:8b:57:0b:53:04:71:8f:f2:57:f4:11:09:
fa:e5:2e:4a:76:77:ba:d2:e1:e3:a1:4f:fd:98:79:33:a3:a9:
9a:c8:1e:aa:e7:34:ee:36:99:77:98:8d:7d:f1:14:5f:65:af:
7e:6a:fc:47:d0:a8:3e:cc:fd:1b:b9:5c:9c:08:22:fa:04:c3:
a8:90:04:ac:7d:7f:5c:d5:bb:92:16:36:23:3b:a8:7b:8d:09:
dd:6b:e6:82:bd:b5:16:b6:91:89:19:e6:71:73:8d:28:56:ee:
52:30:10:1b:2e:4c:36:3c:5f:85:66:06:94:5a:db:cf:a3:13:
ac:63:8d:4f:b6:0c:0e:53:8f:0a:d8:a1:87:62:42:d9:a3:48:
a8:2f:0e:9f:d1:8b:8a:3c:f6:66:5f:89:52:4c:73:b5:bf:ee:
b3:b6:8c:eb:d4:bc:e1:ca:d5:0d:c1:1d:d9:b5:86:cd:31:95:
81:65:de:74:92:6e:8e:39:ef:7d:25:d7:18:b4:7b:e0:c3:ef:
4f:72:e6:f7:53:52:d0:59:62:94:22:3a:f9:82:d9:8a:f5:09:
53:8b:9f:d4:2b:a2:bc:ec:9a:e2:4f:34:85:a6:3e:12:c7:08:
71:25:23:61
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw
NTIyNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEExMDVEQ0NCQjREMUU1
MDIwN0RDQTVFODUxQUI0MTcxQjI4NjQwRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK0XLIWLwkZ7nLLkTDnn6Dnqj8lSYmL2X2wonfEZmvSJfxZhiS
rrvjrcEC5q+Ca8Y0kMQXpsTphHvgWwb8s73b2jP+IJ5IVZOVFaf/bWem9T5QuFI/
Bin98EPb9/7UJHb4oo3NCsqknVz1mSRBv+INEWT9SDoPTwb6zuNsYryLmGaQCgmb
lh7gmxQ1fAMK2uHiNQOFwB8zYnS5q9fx8Eq/jfl5WRmyK//GcHjyoWOp4tfaYNTY
FeGZlo1e8XrO4S9t+VEj5w0U7ZtMj9m8mvWiIm46VMY5KU0KrV+asE8IaX7J7B97
PouoUSQIZD+FbTxbFDGikmND3rXpuschl3VrAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUoQXcy7TR5QIH3KXoUatBcbKGQNkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29RWGN5N1RSNVFJSDNL
WG9VYXRCY2JLR1FOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADkO0Qlvd1q+27Mx
GKDWnQaXLjBpxLeL3otXC1MEcY/yV/QRCfrlLkp2d7rS4eOhT/2YeTOjqZrIHqrn
NO42mXeYjX3xFF9lr35q/EfQqD7M/Ru5XJwIIvoEw6iQBKx9f1zVu5IWNiM7qHuN
Cd1r5oK9tRa2kYkZ5nFzjShW7lIwEBsuTDY8X4VmBpRa28+jE6xjjU+2DA5TjwrY
oYdiQtmjSKgvDp/Ri4o89mZfiVJMc7W/7rO2jOvUvOHK1Q3BHdm1hs0xlYFl3nSS
bo45730l1xi0e+DD709y5vdTUtBZYpQiOvmC2Yr1CVOLn9QrorzsmuJPNIWmPhLH
CHElI2E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org