Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/y3v8dHgOebfyT3wzvCe8td1uKdU.roa
File: y3v8dHgOebfyT3wzvCe8td1uKdU.roa (raw, json)
Hash identifier: i8nQ+B8u4Gy0FmDc6vLu7QgZH6LJVUaFlhc8sXjXkVA=
Subject key identifier: CB:7B:FC:74:78:0E:79:B7:F2:4F:7C:33:BC:27:BC:B5:DD:6E:29:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3431
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y3v8dHgOebfyT3wzvCe8td1uKdU.roa
Signing time: Fri 29 Mar 2024 04:22:03 +0000
ROA not before: Fri 29 Mar 2024 04:22:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13361 (0x3431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 04:22:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CB7BFC74780E79B7F24F7C33BC27BCB5DD6E29D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:98:4b:ab:02:01:3a:67:f5:15:06:99:c7:
14:89:81:d2:0e:31:17:9d:46:a1:67:aa:2a:d9:d1:
93:39:bc:81:e9:78:86:83:21:e0:bc:1f:e7:03:09:
e2:da:1e:4c:2a:28:d5:77:71:74:b4:86:b4:7c:69:
aa:49:26:8a:f3:e9:7d:ea:9e:38:76:43:32:fc:e3:
9d:68:ad:08:e3:6f:1a:bc:5d:83:f3:29:e4:fe:71:
56:ae:b5:c4:73:7b:04:b1:15:5d:2c:43:ee:6d:74:
4f:5c:7b:66:07:18:84:2a:38:5c:f8:52:78:12:72:
d4:ae:2b:64:2c:98:41:da:b5:85:7d:8f:27:68:75:
46:1f:a6:58:42:09:aa:bb:0c:27:f3:2e:64:89:96:
7e:54:e6:e1:ff:86:13:16:b6:11:09:50:48:31:ce:
be:f9:b0:c1:2d:29:c8:b2:87:25:1b:2e:54:ec:7b:
f6:37:64:ac:5e:9c:cc:e5:ce:d0:05:86:08:5c:15:
cb:db:3a:ed:37:09:f9:93:aa:5b:e3:d2:9e:a9:aa:
94:22:eb:bb:d4:83:d1:1e:5a:53:51:76:d7:e3:6a:
f4:63:09:0b:3b:97:5e:3a:3c:ca:96:4f:a7:a3:ba:
df:fb:68:a0:e3:d9:f7:76:d7:ea:c2:38:ab:b3:75:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:FC:74:78:0E:79:B7:F2:4F:7C:33:BC:27:BC:B5:DD:6E:29:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y3v8dHgOebfyT3wzvCe8td1uKdU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
77:44:66:92:a1:bd:98:fc:3d:79:f4:32:f8:cb:3e:54:ee:cc:
11:61:6d:96:58:9e:98:3b:bb:4a:d1:7b:b4:65:8a:e0:da:a6:
2a:52:91:ab:d7:d0:90:d8:2a:e6:a5:05:68:62:88:fa:06:aa:
be:42:ab:93:b1:cf:42:b7:20:29:86:17:ce:f4:fb:88:59:a1:
d9:2e:a3:b6:82:22:cd:82:ce:d8:6d:63:cf:8d:ff:6c:63:ab:
d4:d3:4a:7e:06:5b:70:0f:1b:71:a2:df:3c:0e:f8:49:5b:54:
74:ba:3e:b1:de:50:dc:e5:4a:e5:7b:c9:b0:dc:34:bc:45:ba:
4f:b1:b7:b9:7c:90:c2:f6:58:98:45:25:83:b7:96:14:9f:3e:
af:d0:df:72:1a:52:99:ea:fa:c1:ff:12:43:7b:eb:81:a2:0e:
68:07:82:2b:00:2e:9c:a2:31:86:fa:34:78:9c:76:b6:00:89:
81:52:c7:c4:e5:bf:c1:48:a8:97:23:39:3c:92:f4:80:5f:ac:
b1:06:30:97:62:f0:d3:a7:72:04:95:f4:8d:00:4a:ec:6f:7e:
30:d8:5b:d3:7f:82:39:56:47:75:b5:8f:6f:54:0a:a8:31:72:
39:07:6e:3a:3f:27:10:42:9a:d6:46:50:f3:80:98:84:4b:08:
9c:76:64:b5
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjkw
NDIyMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENCN0JGQzc0NzgwRTc5
QjdGMjRGN0MzM0JDMjdCQ0I1REQ2RTI5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKpphLqwIBOmf1FQaZxxSJgdIOMRedRqFnqirZ0ZM5vIHpeIaD
IeC8H+cDCeLaHkwqKNV3cXS0hrR8aapJJorz6X3qnjh2QzL8451orQjjbxq8XYPz
KeT+cVautcRzewSxFV0sQ+5tdE9ce2YHGIQqOFz4UngSctSuK2QsmEHatYV9jydo
dUYfplhCCaq7DCfzLmSJln5U5uH/hhMWthEJUEgxzr75sMEtKciyhyUbLlTse/Y3
ZKxenMzlztAFhghcFcvbOu03CfmTqlvj0p6pqpQi67vUg9EeWlNRdtfjavRjCQs7
l146PMqWT6ejut/7aKDj2fd21+rCOKuzda0LAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUy3v8dHgOebfyT3wzvCe8td1uKdUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3kzdjhkSGdPZWJmeVQz
d3p2Q2U4dGQxdUtkVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHdEZpKhvZj8PXn0
MvjLPlTuzBFhbZZYnpg7u0rRe7RliuDapipSkavX0JDYKualBWhiiPoGqr5Cq5Ox
z0K3ICmGF870+4hZodkuo7aCIs2CzthtY8+N/2xjq9TTSn4GW3APG3Gi3zwO+Elb
VHS6PrHeUNzlSuV7ybDcNLxFuk+xt7l8kML2WJhFJYO3lhSfPq/Q33IaUpnq+sH/
EkN764GiDmgHgisALpyiMYb6NHicdrYAiYFSx8Tlv8FIqJcjOTyS9IBfrLEGMJdi
8NOncgSV9I0ASuxvfjDYW9N/gjlWR3W1j29UCqgxcjkHbjo/JxBCmtZGUPOAmIRL
CJx2ZLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org