Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yanyAzg0FKiEpvYNtkSq8IXyMYk.roa
File: yanyAzg0FKiEpvYNtkSq8IXyMYk.roa (raw, json)
Hash identifier: wIb/c6lkrkvezrDDYoVoQwZbd31d8GiWDUhR1FehiIs=
Subject key identifier: C9:A9:F2:03:38:34:14:A8:84:A6:F6:0D:B6:44:AA:F0:85:F2:31:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 2579
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yanyAzg0FKiEpvYNtkSq8IXyMYk.roa
Signing time: Tue 07 Jun 2022 10:06:21 +0000
ROA not before: Tue 07 Jun 2022 10:06:21 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 24426
IP address blocks: 43.239.32.0/20 maxlen: 20
103.35.32.0/20 maxlen: 20
110.44.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9593 (0x2579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 10:06:21 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=C9A9F203383414A884A6F60DB644AAF085F23189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:7c:c2:00:84:81:87:f2:7f:94:bb:7a:60:
f0:eb:ca:a4:d0:0a:ef:a9:05:a7:cf:27:0d:d7:e4:
bf:64:75:c0:28:d0:4b:30:c4:63:a1:30:b3:88:83:
af:f3:d0:d9:de:ea:a9:c9:3f:3e:18:84:c4:00:eb:
c5:c3:fd:90:88:b7:10:03:3b:e2:42:b4:ad:13:4b:
0b:0b:47:8f:a2:c3:82:d1:50:7e:3a:d1:21:8f:21:
23:4d:6f:49:41:ed:f6:73:d9:db:88:61:da:4c:63:
fc:29:2f:5b:9d:6b:89:32:77:c3:84:31:d8:15:af:
3a:25:ce:ca:d4:e3:dc:50:58:19:3d:11:6f:08:c4:
db:ee:a1:0a:b6:5b:cf:55:90:e1:05:1d:39:a1:cc:
95:eb:73:ce:20:85:2d:49:f2:32:1d:eb:c6:f0:18:
2e:e0:f3:4d:7f:d9:13:92:10:e9:80:d3:81:09:1b:
44:b1:56:64:f1:b1:c7:8e:c3:bf:cf:86:0b:84:40:
1b:d4:8e:6b:24:38:3a:c7:ac:b7:37:81:0c:18:af:
c7:8b:87:2f:8d:54:54:be:ea:da:23:c0:cb:1f:79:
4c:5c:36:68:4d:a5:4e:df:93:f7:31:9e:f0:1c:a2:
bd:2d:5d:13:24:d9:46:f5:f3:a3:7f:a1:f3:bf:cd:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:F2:03:38:34:14:A8:84:A6:F6:0D:B6:44:AA:F0:85:F2:31:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yanyAzg0FKiEpvYNtkSq8IXyMYk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.32.0/20
103.35.32.0/20
110.44.144.0/20
Signature Algorithm: sha256WithRSAEncryption
77:42:8a:92:53:9b:90:e9:91:ab:91:5e:20:ab:b4:24:7c:d8:
f0:0c:76:68:65:f1:48:c9:c5:13:96:98:90:61:82:5c:a5:71:
b2:fc:da:68:bf:76:52:1b:76:c4:5b:9c:39:00:89:26:19:d8:
2b:bc:18:1d:2f:79:ef:dc:1b:e2:1c:0d:17:01:a5:16:e1:57:
98:c8:b7:b3:5a:75:16:ca:63:9c:31:05:9f:0e:eb:ce:3e:87:
a4:49:ad:88:f6:19:53:96:4d:07:4b:d9:3e:66:c5:ce:ba:7f:
24:ab:ce:c4:f3:ac:4f:69:b8:f6:fe:11:06:6c:24:11:81:3d:
7e:ba:5c:a6:82:0b:6f:67:02:70:79:cf:6e:a0:7c:5a:93:e4:
83:20:95:76:a4:9a:62:4c:d2:40:09:34:42:51:bf:29:0e:93:
9e:ce:46:cf:27:53:82:b3:d5:6b:d6:3f:58:32:a4:c1:3f:0a:
4f:0b:03:7d:35:cf:2b:85:a8:c9:6e:1a:c8:df:ae:29:47:14:
eb:a7:dd:c1:0c:47:62:0d:a7:41:34:e4:78:ae:22:ee:f0:eb:
ed:1f:74:00:a1:5d:da:e2:42:17:95:15:b0:cc:43:4f:dd:f9:
55:0c:64:2d:54:23:c2:2a:01:17:20:75:17:25:67:f6:1c:39:
e3:b0:3e:7c
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICJXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yMjA2MDcx
MDA2MjFaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKEM5QTlGMjAzMzgzNDE0
QTg4NEE2RjYwREI2NDRBQUYwODVGMjMxODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZUHzCAISBh/J/lLt6YPDryqTQCu+pBafPJw3X5L9kdcAo0Esw
xGOhMLOIg6/z0Nne6qnJPz4YhMQA68XD/ZCItxADO+JCtK0TSwsLR4+iw4LRUH46
0SGPISNNb0lB7fZz2duIYdpMY/wpL1uda4kyd8OEMdgVrzolzsrU49xQWBk9EW8I
xNvuoQq2W89VkOEFHTmhzJXrc84ghS1J8jId68bwGC7g801/2ROSEOmA04EJG0Sx
VmTxsceOw7/PhguEQBvUjmskODrHrLc3gQwYr8eLhy+NVFS+6tojwMsfeUxcNmhN
pU7fk/cxnvAcor0tXRMk2Ub186N/ofO/zWwhAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUyanyAzg0FKiEpvYNtkSq8IXyMYkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lhbnlBemcwRktpRXB2
WU50a1NxOElYeU1Zay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAQr7yADBARnIyADBARuLJAwDQYJKoZIhvcNAQELBQADggEBAHdCipJTm5DpkauR
XiCrtCR82PAMdmhl8UjJxROWmJBhglylcbL82mi/dlIbdsRbnDkAiSYZ2Cu8GB0v
ee/cG+IcDRcBpRbhV5jIt7NadRbKY5wxBZ8O684+h6RJrYj2GVOWTQdL2T5mxc66
fySrzsTzrE9puPb+EQZsJBGBPX66XKaCC29nAnB5z26gfFqT5IMglXakmmJM0kAJ
NEJRvykOk57ORs8nU4Kz1WvWP1gypME/Ck8LA301zyuFqMluGsjfrilHFOun3cEM
R2INp0E05HiuIu7w6+0fdAChXdriQheVFbDMQ0/d+VUMZC1UI8IqARcgdRclZ/Yc
OeOwPnw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org