Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ulpuLP16CgbFQjM16Z_YQugzZkQ.roa
File: ulpuLP16CgbFQjM16Z_YQugzZkQ.roa (raw, json)
Hash identifier: JvAqpgT+A5Yr5QogS6E9Ht3folxftx98NZiPcMYwBvM=
Subject key identifier: BA:5A:6E:2C:FD:7A:0A:06:C5:42:33:35:E9:9F:D8:42:E8:33:66:44
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CD9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ulpuLP16CgbFQjM16Z_YQugzZkQ.roa
Signing time: Tue 09 Apr 2024 17:22:42 +0000
ROA not before: Tue 09 Apr 2024 17:22:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15577 (0x3cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 17:22:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA5A6E2CFD7A0A06C5423335E99FD842E8336644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:84:f1:67:b5:17:08:78:65:4c:95:08:4a:
fc:76:76:7e:c3:b2:e6:2d:86:fc:24:85:0c:05:2e:
00:e4:60:d5:bb:33:52:d1:e1:da:e9:37:2a:50:d1:
f6:f8:d0:9e:3e:a9:ad:ba:66:75:04:f2:80:20:c7:
d4:2d:1b:70:5a:07:ec:36:d0:49:18:2e:0f:17:34:
ad:1c:3f:b7:1a:32:76:19:4f:c6:4d:57:0d:86:ca:
12:4e:d6:a0:b9:33:d5:23:03:ce:f1:25:57:ba:dd:
df:f3:1e:cc:87:c4:5f:5e:0f:c6:57:08:57:c3:e4:
0a:c5:78:f2:4b:85:5d:8e:6a:82:e0:82:82:0e:43:
c8:07:f8:06:d5:78:21:b1:c2:75:65:db:9d:b3:64:
45:af:ea:b1:fe:99:d1:e5:eb:5d:08:5b:ef:08:2d:
7e:be:e0:c0:a2:70:22:70:34:58:75:92:12:c9:5e:
be:ed:c9:d5:a3:bd:8c:75:b2:b4:07:4d:e2:fe:f4:
46:7a:17:15:41:57:ee:5d:24:8f:bf:5e:4b:51:fe:
a6:5e:f0:02:06:ae:96:17:4c:89:de:7a:14:2d:36:
6f:fc:50:16:52:b7:6b:1a:f1:a5:15:5b:93:bb:d3:
0d:b2:0c:75:ad:9e:f0:76:92:02:6d:a2:80:8a:df:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:6E:2C:FD:7A:0A:06:C5:42:33:35:E9:9F:D8:42:E8:33:66:44
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ulpuLP16CgbFQjM16Z_YQugzZkQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:1a:51:78:ee:fc:b8:c2:f0:20:7a:e8:3b:bc:c7:65:cf:9c:
e9:f2:2b:a3:e7:44:b3:a1:0b:b4:4d:cd:6a:3b:b2:f9:b9:af:
0a:92:dc:5d:34:4f:3a:2c:27:f9:c5:97:bd:56:85:8b:7a:7a:
a8:0b:66:70:28:1e:5f:be:db:42:0a:be:ca:99:f4:0d:3c:ae:
a1:36:47:cf:45:9b:ac:ac:7f:ac:72:db:0a:1e:02:63:33:cf:
6c:da:4a:5e:14:8a:3e:43:b6:ca:39:e8:34:61:08:50:fc:6e:
40:76:2a:2f:2f:46:ce:96:41:46:98:b6:f3:c2:c6:97:03:fb:
c2:01:ee:69:de:53:24:7e:59:b8:31:2c:6b:09:44:ef:b8:67:
10:11:82:5e:cb:b1:16:20:4c:12:17:27:4a:6b:7d:58:cf:c8:
28:cf:07:af:fa:26:10:ea:90:54:b4:ba:50:47:ab:64:88:43:
8e:fb:d7:53:ee:e9:77:e0:12:8d:38:c1:10:97:1f:b2:fe:53:
2f:ab:96:0c:e6:1b:43:62:94:79:99:6d:ff:4b:ac:61:fb:7b:
30:59:9b:24:9e:f8:07:ec:c2:9c:1a:a4:93:20:5d:b1:2e:27:
e1:29:66:64:e9:d8:80:6b:2f:55:26:a0:80:46:e2:08:76:a7:
9b:39:6b:15
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkx
NzIyNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJBNUE2RTJDRkQ3QTBB
MDZDNTQyMzMzNUU5OUZEODQyRTgzMzY2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqSoTxZ7UXCHhlTJUISvx2dn7DsuYthvwkhQwFLgDkYNW7M1LR
4drpNypQ0fb40J4+qa26ZnUE8oAgx9QtG3BaB+w20EkYLg8XNK0cP7caMnYZT8ZN
Vw2GyhJO1qC5M9UjA87xJVe63d/zHsyHxF9eD8ZXCFfD5ArFePJLhV2OaoLggoIO
Q8gH+AbVeCGxwnVl252zZEWv6rH+mdHl610IW+8ILX6+4MCicCJwNFh1khLJXr7t
ydWjvYx1srQHTeL+9EZ6FxVBV+5dJI+/XktR/qZe8AIGrpYXTIneehQtNm/8UBZS
t2sa8aUVW5O70w2yDHWtnvB2kgJtooCK3zoTAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUulpuLP16CgbFQjM16Z/YQugzZkQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3VscHVMUDE2Q2diRlFq
TTE2Wl9ZUXVnelprUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAIwaUXju/LjC8CB6
6Du8x2XPnOnyK6PnRLOhC7RNzWo7svm5rwqS3F00TzosJ/nFl71WhYt6eqgLZnAo
Hl++20IKvsqZ9A08rqE2R89Fm6ysf6xy2woeAmMzz2zaSl4Uij5Dtso56DRhCFD8
bkB2Ki8vRs6WQUaYtvPCxpcD+8IB7mneUyR+WbgxLGsJRO+4ZxARgl7LsRYgTBIX
J0prfVjPyCjPB6/6JhDqkFS0ulBHq2SIQ47711Pu6XfgEo04wRCXH7L+Uy+rlgzm
G0NilHmZbf9LrGH7ezBZmySe+AfswpwapJMgXbEuJ+EpZmTp2IBrL1UmoIBG4gh2
p5s5axU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org