Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C_i8uucNpilTit3dTezXaODf1Ys.roa
File: C_i8uucNpilTit3dTezXaODf1Ys.roa (raw, json)
Hash identifier: zls9jkT5B4vbSN9xNKr1hH0y5v7rdlq6Fdf9oisQ2hA=
Subject key identifier: 0B:F8:BC:BA:E7:0D:A6:29:53:8A:DD:DD:4D:EC:D7:68:E0:DF:D5:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BDD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_i8uucNpilTit3dTezXaODf1Ys.roa
Signing time: Mon 08 Apr 2024 09:53:03 +0000
ROA not before: Mon 08 Apr 2024 09:53:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15325 (0x3bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 09:53:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BF8BCBAE70DA629538ADDDD4DECD768E0DFD58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:14:7c:3f:84:2c:d8:2b:cb:c8:fe:1c:10:
ce:0a:9c:4b:81:34:0d:b7:4d:53:92:19:ad:f8:04:
df:81:35:58:01:4d:2b:a6:1e:97:77:a2:85:b8:e4:
7d:b1:c5:81:2e:74:8e:63:15:b1:59:e4:b6:31:d4:
49:09:7f:36:2d:e3:05:0b:ce:e0:0b:41:b2:78:4a:
c5:25:3a:30:d3:00:8f:60:a0:27:8f:0c:ed:f6:ba:
36:f7:ed:40:c6:cb:aa:ab:71:1c:99:f8:54:b3:9a:
f7:41:5c:c8:43:8b:57:0e:e1:de:76:fb:5d:5b:c3:
e1:d2:87:24:5a:8d:98:9c:71:8a:17:9a:b8:b6:e2:
0a:8f:ac:71:de:e0:5d:9e:6b:d9:8b:19:b5:36:65:
77:f1:4f:4a:4b:ca:c3:78:47:d8:41:fd:52:f1:e1:
b0:b9:a7:51:1e:21:58:14:0d:3c:ff:dd:0f:e9:da:
4d:95:d4:34:70:26:1e:e2:45:4d:96:8f:ff:e3:5a:
89:da:fe:78:f0:c2:59:89:8d:1c:36:7e:dd:0d:f3:
47:92:a7:67:c5:78:e4:ab:61:21:eb:f7:c9:17:39:
98:7c:21:59:4c:bc:d1:a7:38:70:56:fd:56:e9:cb:
ed:de:db:a1:7b:c7:c0:d6:eb:70:ca:8d:9f:01:ed:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:BC:BA:E7:0D:A6:29:53:8A:DD:DD:4D:EC:D7:68:E0:DF:D5:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_i8uucNpilTit3dTezXaODf1Ys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
79:e4:02:65:b0:d2:82:81:0f:94:df:42:09:89:b5:47:e4:6a:
61:2f:a7:6f:97:08:e1:f4:60:62:1e:9b:75:34:4c:73:99:78:
b3:c0:c6:13:d9:a5:51:ab:b0:a2:1a:d4:4c:0d:e5:f8:7b:2e:
be:d8:a7:c2:d3:74:9b:e9:21:f9:41:0f:3d:37:7b:13:21:01:
d1:9a:32:91:e7:7e:85:b7:d6:58:d8:fe:ab:8a:fd:62:e6:59:
43:a7:57:bf:1d:d2:f6:db:20:1e:da:37:57:f0:04:c6:03:0b:
73:04:7f:4a:94:93:fc:9d:f3:33:50:03:72:94:c8:0b:fe:ca:
d2:4b:ba:e6:9b:40:00:4a:f5:f2:01:92:52:a5:57:c5:d3:e1:
33:e0:2e:23:2a:e8:6d:d5:26:9a:85:07:b5:2e:72:a0:db:a5:
a5:2f:a2:29:51:59:c5:33:56:65:7c:7c:82:94:12:8a:7e:e9:
8e:27:8a:6e:47:71:29:3a:95:2d:88:00:97:1c:f6:f5:64:55:
37:12:54:86:7e:2a:6e:b4:33:d8:26:bc:85:86:54:79:f3:3d:
2a:a7:60:45:3a:bb:18:4a:74:94:8f:8b:00:d5:92:d1:6d:ba:
9c:b8:c8:94:d2:b4:b4:2e:d9:91:45:d3:fc:7f:90:a5:76:db:
0c:90:47:96
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICO90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw
OTUzMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBCRjhCQ0JBRTcwREE2
Mjk1MzhBRERERDRERUNENzY4RTBERkQ1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO5RR8P4Qs2CvLyP4cEM4KnEuBNA23TVOSGa34BN+BNVgBTSum
Hpd3ooW45H2xxYEudI5jFbFZ5LYx1EkJfzYt4wULzuALQbJ4SsUlOjDTAI9goCeP
DO32ujb37UDGy6qrcRyZ+FSzmvdBXMhDi1cO4d52+11bw+HShyRajZiccYoXmri2
4gqPrHHe4F2ea9mLGbU2ZXfxT0pLysN4R9hB/VLx4bC5p1EeIVgUDTz/3Q/p2k2V
1DRwJh7iRU2Wj//jWona/njwwlmJjRw2ft0N80eSp2fFeOSrYSHr98kXOZh8IVlM
vNGnOHBW/Vbpy+3e26F7x8DW63DKjZ8B7TAbAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUC/i8uucNpilTit3dTezXaODf1YswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0NfaTh1dWNOcGlsVGl0
M2RUZXpYYU9EZjFZcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHnkAmWw0oKBD5Tf
QgmJtUfkamEvp2+XCOH0YGIem3U0THOZeLPAxhPZpVGrsKIa1EwN5fh7Lr7Yp8LT
dJvpIflBDz03exMhAdGaMpHnfoW31ljY/quK/WLmWUOnV78d0vbbIB7aN1fwBMYD
C3MEf0qUk/yd8zNQA3KUyAv+ytJLuuabQABK9fIBklKlV8XT4TPgLiMq6G3VJpqF
B7UucqDbpaUvoilRWcUzVmV8fIKUEop+6Y4nim5HcSk6lS2IAJcc9vVkVTcSVIZ+
Km60M9gmvIWGVHnzPSqnYEU6uxhKdJSPiwDVktFtupy4yJTStLQu2ZFF0/x/kKV2
2wyQR5Y=
-----END CERTIFICATE-----
Generated at Mon Apr 8 16:31:00 2024 by rpki-client on console.sobornost.net