Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r7iH7UjzllHubWAcYwuUPxmh4VI.roa
File: r7iH7UjzllHubWAcYwuUPxmh4VI.roa (raw, json)
Hash identifier: TBWKejkm7Mcq5n4Kjt60NfaJuHY1vR+WyBkgQzAs9vo=
Subject key identifier: AF:B8:87:ED:48:F3:96:51:EE:6D:60:1C:63:0B:94:3F:19:A1:E1:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5749
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r7iH7UjzllHubWAcYwuUPxmh4VI.roa
Signing time: Tue 14 May 2024 23:24:11 +0000
ROA not before: Tue 14 May 2024 23:24:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22345 (0x5749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 23:24:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AFB887ED48F39651EE6D601C630B943F19A1E152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:3e:89:f5:81:96:33:eb:15:e4:c5:82:58:
1f:23:11:ad:18:cd:2d:bf:70:35:fd:66:a0:b1:0b:
9b:3b:f3:4a:1d:8e:98:19:64:64:cb:15:c8:a0:8d:
b9:d9:86:62:bb:22:30:72:97:eb:65:b4:d2:50:cf:
23:b3:8c:31:aa:a8:52:1f:75:de:af:05:00:ee:ce:
2f:93:1d:28:76:35:ce:c0:15:62:80:23:fe:7d:8c:
15:53:70:a7:dd:2b:4f:ef:89:62:30:25:a5:60:40:
d8:86:f4:15:0d:b3:4a:b9:10:33:f9:47:64:03:b6:
da:de:11:ce:e8:51:46:98:d6:3b:e1:6d:37:6f:06:
c8:4c:63:2b:c2:32:3b:91:0b:e2:cf:0f:6b:d7:9d:
f6:da:4e:4e:56:b0:9e:58:42:9d:7f:e9:9e:f1:5d:
f3:27:a8:6a:02:86:77:4d:04:4d:ac:0d:1c:6a:9f:
26:3f:d6:cd:b0:dc:ba:95:30:b5:63:33:b6:eb:67:
6a:5e:86:3d:23:8d:2c:76:1a:6f:4b:a8:08:8c:1c:
7d:ae:af:d8:d9:68:20:46:a2:d8:7c:34:7f:54:cb:
49:50:0e:95:a6:2c:ed:8e:96:ae:b7:2a:d8:d8:21:
93:ab:b6:a1:75:e1:fe:91:f4:29:20:2c:67:21:f8:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:87:ED:48:F3:96:51:EE:6D:60:1C:63:0B:94:3F:19:A1:E1:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r7iH7UjzllHubWAcYwuUPxmh4VI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:71:3e:09:21:2a:99:c8:e6:21:2e:57:0f:d7:b7:c2:86:15:
de:d1:9e:4c:01:12:8e:39:03:30:de:1a:11:03:5f:81:58:c0:
f1:e1:30:19:d3:9f:24:a5:20:30:1d:25:ef:9d:ed:4c:b7:e3:
f3:c8:a9:36:cc:55:68:31:2a:06:5b:e9:80:87:7b:2c:87:95:
ca:d7:8b:85:26:3a:d0:65:99:ed:14:71:66:6e:95:d3:d5:10:
f0:fb:24:e3:45:00:c1:a4:e6:9f:b7:ad:45:2a:1d:46:f7:e6:
47:81:7a:d1:80:f7:0f:4e:76:08:b0:a7:89:9b:1f:24:18:e7:
fc:17:07:bd:36:ce:1e:17:ab:c8:70:0a:dd:a9:65:67:d6:a9:
4c:34:c5:a4:95:2b:a1:b6:62:7f:b3:60:5d:34:05:64:c6:47:
70:5b:43:02:2f:bd:c6:7f:a2:53:bf:23:ac:51:36:b7:28:e6:
4f:0e:cc:c6:4c:6e:c6:bf:68:71:37:18:b7:84:dd:1f:fc:4c:
10:06:c9:cd:36:ef:32:fb:64:97:1f:df:ce:3f:72:90:b7:d4:
b4:28:d6:41:1d:ef:36:8a:c0:e8:46:bf:7b:fa:2c:ec:a9:33:
ea:3d:2d:02:eb:12:8f:8d:08:50:68:07:db:1c:de:82:38:a3:
de:86:b3:2f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICV0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQy
MzI0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFGQjg4N0VENDhGMzk2
NTFFRTZENjAxQzYzMEI5NDNGMTlBMUUxNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH+z6J9YGWM+sV5MWCWB8jEa0YzS2/cDX9ZqCxC5s780odjpgZ
ZGTLFcigjbnZhmK7IjByl+tltNJQzyOzjDGqqFIfdd6vBQDuzi+THSh2Nc7AFWKA
I/59jBVTcKfdK0/viWIwJaVgQNiG9BUNs0q5EDP5R2QDttreEc7oUUaY1jvhbTdv
BshMYyvCMjuRC+LPD2vXnfbaTk5WsJ5YQp1/6Z7xXfMnqGoChndNBE2sDRxqnyY/
1s2w3LqVMLVjM7brZ2pehj0jjSx2Gm9LqAiMHH2ur9jZaCBGoth8NH9Uy0lQDpWm
LO2Olq63KtjYIZOrtqF14f6R9CkgLGch+E61AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUr7iH7UjzllHubWAcYwuUPxmh4VIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3I3aUg3VWp6bGxIdWJX
QWNZd3VVUHhtaDRWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAC9xPgkhKpnI5iEu
Vw/Xt8KGFd7RnkwBEo45AzDeGhEDX4FYwPHhMBnTnySlIDAdJe+d7Uy34/PIqTbM
VWgxKgZb6YCHeyyHlcrXi4UmOtBlme0UcWZuldPVEPD7JONFAMGk5p+3rUUqHUb3
5keBetGA9w9Odgiwp4mbHyQY5/wXB702zh4Xq8hwCt2pZWfWqUw0xaSVK6G2Yn+z
YF00BWTGR3BbQwIvvcZ/olO/I6xRNrco5k8OzMZMbsa/aHE3GLeE3R/8TBAGyc02
7zL7ZJcf384/cpC31LQo1kEd7zaKwOhGv3v6LOypM+o9LQLrEo+NCFBoB9sc3oI4
o96Gsy8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org