Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/uzGcOYOLVs9mdTnhJB9Aqqs8vxU.roa
File: uzGcOYOLVs9mdTnhJB9Aqqs8vxU.roa (raw, json)
Hash identifier: ygq4kYrlWt5SqdVJNqGN6IMeo2mFcMrE1w2GRlEjndc=
Subject key identifier: BB:31:9C:39:83:8B:56:CF:66:75:39:E1:24:1F:40:AA:AB:3C:BF:15
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0C9F
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/uzGcOYOLVs9mdTnhJB9Aqqs8vxU.roa
Signing time: Fri 16 Feb 2024 01:58:16 +0000
ROA not before: Fri 16 Feb 2024 01:58:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
59.83.240.0/23 maxlen: 24
114.66.149.0/24 maxlen: 24
114.66.169.0/24 maxlen: 24
114.66.181.0/24 maxlen: 24
114.66.183.0/24 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.212.0/24 maxlen: 24
114.66.214.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Feb 16 01:58:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB319C39838B56CF667539E1241F40AAAB3CBF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:18:59:12:23:2e:03:d8:f6:02:e5:b2:e8:
41:6c:68:75:14:ee:95:d4:28:cb:7f:4a:1a:f6:7a:
91:59:08:34:14:fc:c3:52:df:7a:33:4c:39:48:e0:
92:3b:50:04:27:8c:9a:59:08:34:a4:f9:68:83:6f:
b0:06:5e:0b:18:be:f1:aa:be:91:3d:08:a0:90:55:
3f:ce:06:70:6f:ee:52:fc:70:d6:27:51:b3:10:a3:
cd:4e:ee:a3:b0:ae:a4:4a:a7:4c:2b:f0:25:f6:e3:
5f:c3:2f:ec:81:14:b8:6f:5f:cf:a1:da:78:8f:d5:
f8:b4:8f:c2:03:11:b6:68:85:b6:df:10:fd:39:99:
67:44:b3:a3:97:fc:96:49:76:05:b2:e3:2c:0c:90:
f4:bc:b4:9b:47:2e:10:86:db:53:98:37:d6:70:f1:
b0:00:9e:99:6f:5b:4d:93:72:81:91:04:43:30:04:
08:34:e8:23:d6:30:a7:59:62:c8:5e:e7:52:04:8a:
47:aa:e5:ba:5d:3b:54:a9:c1:3b:15:41:30:f4:1b:
9d:dd:76:e7:fc:d0:c4:3e:4a:37:fd:4d:0a:c2:b9:
5e:00:a9:f0:0d:66:ee:1f:35:f0:1f:cb:72:95:29:
3e:cb:53:b1:4e:1d:03:0d:f0:77:2a:50:2a:ea:c1:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:9C:39:83:8B:56:CF:66:75:39:E1:24:1F:40:AA:AB:3C:BF:15
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/uzGcOYOLVs9mdTnhJB9Aqqs8vxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.149.0/24
114.66.169.0/24
114.66.181.0/24
114.66.183.0/24
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
71:59:e9:46:76:46:f3:4c:4a:1b:a5:01:79:b8:92:86:65:2a:
63:bd:53:f2:ed:b6:ab:26:61:96:ca:f4:ac:c6:e6:82:cf:0e:
68:c7:43:04:ea:d6:db:9b:2a:45:ca:b1:bb:4b:04:c0:db:2b:
e8:7f:33:c0:11:13:98:26:08:28:f3:90:6e:76:f4:82:04:0d:
ad:0e:d3:4a:5d:de:62:b9:c2:55:ec:f0:07:4e:ac:cb:01:ab:
fa:06:9a:22:33:9e:9e:2e:87:5c:a8:06:b2:4b:ad:f4:13:99:
c6:d2:8e:46:ac:af:c9:ac:6e:5b:0b:3e:73:5b:2d:3b:28:9b:
5e:f4:bc:45:b5:bc:a1:fd:79:f6:7c:6c:b5:a4:b4:bf:30:62:
0d:57:dc:e9:74:bc:2c:91:3d:19:9d:f1:56:d8:3a:5e:72:cd:
b0:38:7e:d8:92:4f:f9:f0:3d:9d:8f:2f:91:32:bc:26:8b:38:
5a:47:8d:3d:66:ed:8c:3b:ac:17:64:00:29:73:9a:74:52:9a:
fd:93:3a:55:05:0c:4a:1a:a3:05:f7:00:d6:30:4c:9e:1a:8e:
d1:63:4c:5f:63:e3:7c:9e:d7:0d:1e:4d:53:e7:f0:0c:bb:70:
59:81:4e:3e:22:1b:8b:0b:5b:a3:4d:df:fa:63:e4:d4:e0:d3:
63:15:3e:3e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw
QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yNDAyMTYw
MTU4MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJCMzE5QzM5ODM4QjU2
Q0Y2Njc1MzlFMTI0MUY0MEFBQUIzQ0JGMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt1hhZEiMuA9j2AuWy6EFsaHUU7pXUKMt/Shr2epFZCDQU/MNS
33ozTDlI4JI7UAQnjJpZCDSk+WiDb7AGXgsYvvGqvpE9CKCQVT/OBnBv7lL8cNYn
UbMQo81O7qOwrqRKp0wr8CX241/DL+yBFLhvX8+h2niP1fi0j8IDEbZohbbfEP05
mWdEs6OX/JZJdgWy4ywMkPS8tJtHLhCG21OYN9Zw8bAAnplvW02TcoGRBEMwBAg0
6CPWMKdZYshe51IEikeq5bpdO1SpwTsVQTD0G53dduf80MQ+Sjf9TQrCuV4AqfAN
Zu4fNfAfy3KVKT7LU7FOHQMN8HcqUCrqwWerAgMBAAGjggIdMIICGTAdBgNVHQ4E
FgQUuzGcOYOLVs9mdTnhJB9Aqqs8vxUwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX
i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw
OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvdXpHY09ZT0xWczlt
ZFRuaEpCOUFxcXM4dnhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEw
MAMEAztTiAMEAztT8AMEAHJClQMEAHJCqQMEAHJCtQMEAHJCtwMEAnJC1AMEAtpi
UDANBgkqhkiG9w0BAQsFAAOCAQEAcVnpRnZG80xKG6UBebiShmUqY71T8u22qyZh
lsr0rMbmgs8OaMdDBOrW25sqRcqxu0sEwNsr6H8zwBETmCYIKPOQbnb0ggQNrQ7T
Sl3eYrnCVezwB06sywGr+gaaIjOeni6HXKgGskut9BOZxtKORqyvyaxuWws+c1st
OyibXvS8RbW8of159nxstaS0vzBiDVfc6XS8LJE9GZ3xVtg6XnLNsDh+2JJP+fA9
nY8vkTK8Jos4WkeNPWbtjDusF2QAKXOadFKa/ZM6VQUMShqjBfcA1jBMnhqO0WNM
X2PjfJ7XDR5NU+fwDLtwWYFOPiIbiwtbo03f+mPk1ODTYxU+Pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org