Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wJi_y6vAdFgg3oUPfilIqTvYEyg.roa
File: wJi_y6vAdFgg3oUPfilIqTvYEyg.roa (raw, json)
Hash identifier: xOw2QNpEugV2d1jZZjpGQwbTF2GxPjyipB0zFdtNcsc=
Subject key identifier: C0:98:BF:CB:AB:C0:74:58:20:DE:85:0F:7E:29:48:A9:3B:D8:13:28
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5819
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wJi_y6vAdFgg3oUPfilIqTvYEyg.roa
Signing time: Thu 16 May 2024 01:24:47 +0000
ROA not before: Thu 16 May 2024 01:24:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22553 (0x5819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 01:24:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C098BFCBABC0745820DE850F7E2948A93BD81328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:5e:52:fe:ab:a9:11:a4:5b:7c:3a:a0:05:
6e:76:b2:36:7a:5a:6f:75:22:4b:0c:86:f1:09:1d:
4e:6d:61:21:ba:9c:32:5e:33:25:2e:3c:4e:a6:e9:
89:ef:90:5b:b4:d6:dd:ff:5e:71:73:37:2b:dc:b3:
6f:f5:bd:a5:24:2f:ec:3c:4d:38:1b:17:0f:04:76:
25:a7:1c:f1:d2:bd:3e:bb:a0:4d:17:52:00:11:83:
43:16:80:97:d6:4d:52:bc:ad:93:05:c3:99:3f:09:
e7:cd:d9:0e:c1:67:fc:d3:18:8f:77:bb:b5:1d:85:
75:bd:ac:d6:98:0c:e9:a1:b8:7e:6c:d1:7a:f4:99:
6c:d8:6b:3f:df:99:55:e0:92:78:39:fb:64:2e:6a:
97:44:ff:69:79:cb:af:b9:e5:03:e0:41:41:20:0c:
31:22:6b:d6:31:d8:fa:c1:5b:5b:64:72:cb:52:45:
ac:e5:6b:ee:46:cb:b5:23:1d:26:be:76:6a:83:7a:
28:36:5a:74:93:0f:eb:7b:8c:a0:ca:50:ca:28:67:
8e:6e:7b:bb:2a:c1:2f:3f:87:2d:bf:27:56:77:86:
91:62:5b:19:c2:40:80:64:72:54:34:a5:04:77:12:
92:3c:d4:6a:00:22:1d:54:99:57:98:d0:52:b9:e5:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:BF:CB:AB:C0:74:58:20:DE:85:0F:7E:29:48:A9:3B:D8:13:28
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wJi_y6vAdFgg3oUPfilIqTvYEyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:e1:7f:74:28:1b:ac:c8:e8:19:9a:7e:6b:b6:0e:ea:65:ae:
b4:a1:67:1a:e3:aa:05:d9:2e:4b:92:ed:02:b1:3c:d8:28:36:
0a:10:e3:8a:ec:6d:87:a9:f4:fe:5f:69:b7:a1:a5:e7:4e:81:
05:5a:1b:28:7e:5a:75:c8:8a:7e:04:54:ce:b7:85:de:59:68:
fc:b5:32:92:07:48:fc:26:55:5b:30:f9:d0:38:a5:05:b4:1d:
7b:e3:a7:1d:28:94:30:9a:a7:f5:31:11:55:38:11:41:c2:74:
83:a7:60:d2:fc:e6:72:97:22:c5:f9:f8:2d:75:9b:eb:04:9c:
d4:59:56:d4:a6:dd:b5:1d:2f:24:1e:c1:ce:61:ef:79:40:fa:
5c:9a:20:3c:b0:c1:e1:6d:8f:e6:5c:fa:4c:75:de:57:48:30:
4d:dc:9e:83:52:1a:9a:5b:38:fc:24:db:07:cd:ee:13:17:d0:
28:e0:43:d3:10:ad:e6:58:04:c5:90:fc:c1:70:48:c8:5e:68:
44:ee:48:37:69:2e:f7:7b:03:24:b4:ec:90:d8:a1:bb:c2:b2:
58:3c:36:a6:cf:50:55:2b:03:ec:08:43:6d:22:a3:be:bd:93:
9f:07:9b:9d:cb:96:72:54:93:f7:61:48:44:04:d8:97:c1:67:
7b:5e:09:bb
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICWBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTYw
MTI0NDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMwOThCRkNCQUJDMDc0
NTgyMERFODUwRjdFMjk0OEE5M0JEODEzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIdl5S/qupEaRbfDqgBW52sjZ6Wm91IksMhvEJHU5tYSG6nDJe
MyUuPE6m6YnvkFu01t3/XnFzNyvcs2/1vaUkL+w8TTgbFw8EdiWnHPHSvT67oE0X
UgARg0MWgJfWTVK8rZMFw5k/CefN2Q7BZ/zTGI93u7UdhXW9rNaYDOmhuH5s0Xr0
mWzYaz/fmVXgkng5+2QuapdE/2l5y6+55QPgQUEgDDEia9Yx2PrBW1tkcstSRazl
a+5Gy7UjHSa+dmqDeig2WnSTD+t7jKDKUMooZ45ue7sqwS8/hy2/J1Z3hpFiWxnC
QIBkclQ0pQR3EpI81GoAIh1UmVeY0FK55RZ3AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUwJi/y6vAdFgg3oUPfilIqTvYEygwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3dKaV95NnZBZEZnZzNv
VVBmaWxJcVR2WUV5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAIThf3QoG6zI6Bma
fmu2DuplrrShZxrjqgXZLkuS7QKxPNgoNgoQ44rsbYep9P5fabehpedOgQVaGyh+
WnXIin4EVM63hd5ZaPy1MpIHSPwmVVsw+dA4pQW0HXvjpx0olDCap/UxEVU4EUHC
dIOnYNL85nKXIsX5+C11m+sEnNRZVtSm3bUdLyQewc5h73lA+lyaIDywweFtj+Zc
+kx13ldIME3cnoNSGppbOPwk2wfN7hMX0CjgQ9MQreZYBMWQ/MFwSMheaETuSDdp
Lvd7AyS07JDYobvCslg8NqbPUFUrA+wIQ20io769k58Hm53LlnJUk/dhSEQE2JfB
Z3teCbs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org