Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vO-JiQL2S95M3UZgdWMHtyS1ICM.roa
File: vO-JiQL2S95M3UZgdWMHtyS1ICM.roa (raw, json)
Hash identifier: fJ+KOE0EYpHkwoSGSFg4a3bEylXH6Hk/LKo7yJ1u7Nw=
Subject key identifier: BC:EF:89:89:02:F6:4B:DE:4C:DD:46:60:75:63:07:B7:24:B5:20:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3931
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vO-JiQL2S95M3UZgdWMHtyS1ICM.roa
Signing time: Thu 04 Apr 2024 20:22:23 +0000
ROA not before: Thu 04 Apr 2024 20:22:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14641 (0x3931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 20:22:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BCEF898902F64BDE4CDD4660756307B724B52023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:9a:82:6c:96:74:c7:c4:4f:74:15:e5:5f:
e9:e5:6f:c7:a5:2b:85:de:7a:b3:0b:eb:49:b6:1a:
e1:02:23:e0:c5:e9:82:42:98:22:48:a0:17:e6:3b:
8d:31:43:7f:27:4d:b6:9a:9e:db:e0:84:f2:9c:0a:
3e:4c:8e:e9:0c:e4:b1:b2:e9:de:d5:74:17:c5:73:
51:1e:b9:83:c1:21:f1:62:76:19:43:43:ec:69:c3:
5c:91:35:bc:d6:93:2e:00:99:db:ef:e0:41:0a:bb:
0a:7b:88:c0:63:1d:da:9d:9a:e1:a8:a2:f1:c2:3d:
67:4e:ed:30:71:0e:5e:00:a7:e6:0e:d5:af:ed:81:
1c:66:bb:32:50:51:6f:0f:f1:f1:b3:ba:a3:d8:53:
ea:8f:15:0c:ed:aa:55:99:7a:f0:e4:b7:c7:2b:d9:
b3:df:65:ec:8f:e2:08:52:ca:63:ba:63:05:c4:2a:
9b:5d:a6:fb:f0:26:dc:a9:e1:7d:b7:bd:09:b3:b4:
9c:cc:a0:99:40:08:15:0e:1d:93:a0:ea:12:3c:f3:
19:14:77:27:d4:4f:ff:10:92:b8:22:66:02:df:47:
87:70:0c:7e:ff:02:ed:7e:35:4f:2d:bb:56:42:16:
7e:cf:f7:ed:c9:af:60:c2:e1:2a:14:1c:10:b7:76:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:89:89:02:F6:4B:DE:4C:DD:46:60:75:63:07:B7:24:B5:20:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vO-JiQL2S95M3UZgdWMHtyS1ICM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:77:1d:84:69:4f:41:01:25:b5:de:c1:1f:98:16:3a:fc:8b:
ca:b0:7a:e8:03:30:fe:6b:a4:01:4c:e6:57:66:1a:f0:55:5e:
ac:f6:3f:a2:a1:29:68:b9:f9:69:c9:ac:bb:c8:65:d3:cb:9f:
2a:82:75:b0:c6:7f:41:00:99:ff:eb:64:87:ea:16:be:94:f1:
49:97:f9:88:5f:3b:21:63:f2:fa:20:24:30:8d:ab:02:cb:48:
e6:c8:e3:33:fc:a2:06:56:be:23:5f:32:b0:ce:58:3b:6e:0f:
27:20:8d:75:09:0d:c7:bc:dd:79:66:b7:35:48:17:2d:f2:17:
37:65:87:ab:46:c1:0c:84:86:da:0e:15:4c:07:89:39:7d:bf:
b9:df:d2:3f:5a:9b:2c:6f:2d:ee:6c:ea:2c:3c:5a:0e:1e:fc:
77:79:3d:38:6b:c6:8e:c7:16:24:2c:e8:9a:05:14:be:af:06:
5f:a7:f0:99:eb:c0:4e:94:39:dc:bd:24:ed:d2:de:a0:9d:8b:
6f:7f:b9:7c:49:90:14:39:eb:9d:ee:23:c0:57:c3:f8:9c:53:
c5:bd:67:48:d9:78:61:06:45:7d:46:9c:c4:4c:a4:35:23:58:
3d:48:a6:75:de:60:e7:f8:14:cc:2f:84:6d:1c:bd:12:c7:13:
f1:23:c4:40
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQy
MDIyMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJDRUY4OTg5MDJGNjRC
REU0Q0RENDY2MDc1NjMwN0I3MjRCNTIwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBqJqCbJZ0x8RPdBXlX+nlb8elK4XeerML60m2GuECI+DF6YJC
mCJIoBfmO40xQ38nTbaantvghPKcCj5MjukM5LGy6d7VdBfFc1EeuYPBIfFidhlD
Q+xpw1yRNbzWky4Amdvv4EEKuwp7iMBjHdqdmuGoovHCPWdO7TBxDl4Ap+YO1a/t
gRxmuzJQUW8P8fGzuqPYU+qPFQztqlWZevDkt8cr2bPfZeyP4ghSymO6YwXEKptd
pvvwJtyp4X23vQmztJzMoJlACBUOHZOg6hI88xkUdyfUT/8QkrgiZgLfR4dwDH7/
Au1+NU8tu1ZCFn7P9+3Jr2DC4SoUHBC3dhSdAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUvO+JiQL2S95M3UZgdWMHtyS1ICMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZPLUppUUwyUzk1TTNV
WmdkV01IdHlTMUlDTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAK93HYRpT0EBJbXe
wR+YFjr8i8qweugDMP5rpAFM5ldmGvBVXqz2P6KhKWi5+WnJrLvIZdPLnyqCdbDG
f0EAmf/rZIfqFr6U8UmX+YhfOyFj8vogJDCNqwLLSObI4zP8ogZWviNfMrDOWDtu
DycgjXUJDce83XlmtzVIFy3yFzdlh6tGwQyEhtoOFUwHiTl9v7nf0j9amyxvLe5s
6iw8Wg4e/Hd5PThrxo7HFiQs6JoFFL6vBl+n8JnrwE6UOdy9JO3S3qCdi29/uXxJ
kBQ5653uI8BXw/icU8W9Z0jZeGEGRX1GnMRMpDUjWD1IpnXeYOf4FMwvhG0cvRLH
E/EjxEA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org