Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/x12kOQp-x-qMgkzc76jtlVF-5Us.roa
File: x12kOQp-x-qMgkzc76jtlVF-5Us.roa (raw, json)
Hash identifier: JiOtDmhVe+ow/6TevwyYoriIURMrsR9KqG2Cmk0OWUc=
Subject key identifier: C7:5D:A4:39:0A:7E:C7:EA:8C:82:4C:DC:EF:A8:ED:95:51:7E:E5:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E5D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x12kOQp-x-qMgkzc76jtlVF-5Us.roa
Signing time: Thu 11 Apr 2024 17:52:46 +0000
ROA not before: Thu 11 Apr 2024 17:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15965 (0x3e5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 17:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C75DA4390A7EC7EA8C824CDCEFA8ED95517EE54B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:7e:f5:98:f3:da:59:43:87:ba:69:6f:5c:
d1:f7:ca:a6:cf:57:05:22:85:5c:30:03:87:96:97:
d7:cb:29:6d:a7:49:83:27:9e:86:25:07:52:b3:3c:
f6:5a:0d:f1:be:c7:bd:74:76:5d:5b:ba:00:77:a5:
4f:d3:c0:1f:bc:c5:02:85:c1:64:67:4b:99:93:0a:
2d:a8:0e:a7:fc:9d:1d:a2:92:af:47:02:e9:cd:fd:
a5:37:5a:99:ea:da:ab:78:d1:4d:42:46:03:32:f3:
a6:51:be:05:65:5e:30:be:ba:cd:0c:f6:d0:9f:47:
8a:36:e3:25:76:63:79:b3:f6:bf:a4:18:e6:42:d6:
2c:c7:b5:44:2c:9d:3d:0f:a1:63:20:b7:42:9b:98:
09:f1:17:d2:8a:e9:36:a7:4d:5d:7d:36:65:bc:31:
ca:f9:a4:d0:2d:fb:90:68:ed:67:27:d7:c5:a1:9e:
00:c4:ff:a8:80:28:f8:80:9b:d0:7b:8d:dd:0a:0e:
47:a6:4f:a7:8b:b3:b4:83:ab:c5:1e:a0:fd:26:f3:
46:28:4e:52:1c:e5:55:21:0e:1b:0b:2f:e7:de:7c:
d9:c2:a0:6a:e4:d4:b6:a9:be:da:5a:41:5f:82:e0:
2f:40:ea:ca:eb:a7:0b:c9:7b:b3:dc:5b:65:e1:80:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5D:A4:39:0A:7E:C7:EA:8C:82:4C:DC:EF:A8:ED:95:51:7E:E5:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x12kOQp-x-qMgkzc76jtlVF-5Us.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:4a:3d:93:a0:56:a9:b6:95:e7:30:8f:d8:9b:d9:02:aa:9f:
cf:d4:a9:59:c8:67:07:8c:5a:57:b5:32:0a:9d:cd:b4:41:e9:
76:ac:b1:08:13:94:9c:c8:2c:d5:fe:96:91:35:26:3e:c9:f8:
5b:ec:84:64:1a:af:74:00:ae:6f:20:e9:ad:b1:87:f9:8f:92:
5b:a0:34:5a:64:3e:01:8c:93:1c:16:50:b4:4f:ed:f6:94:8b:
70:7e:16:90:cb:b2:21:91:c0:69:81:91:63:37:08:e9:40:df:
3f:96:ba:97:bf:a8:d2:22:d3:30:f7:1c:c0:7c:83:f5:38:0a:
82:5e:58:5a:23:20:be:51:b5:4d:3c:d3:a0:56:c5:17:7b:88:
85:31:42:aa:93:5f:3c:38:80:dc:bf:26:6d:f9:1d:4d:7a:fd:
d9:84:85:33:14:10:fb:41:e3:f1:7c:a4:a4:9e:f4:30:55:8a:
26:ae:e9:42:01:da:1b:2f:5f:04:8f:8a:43:26:98:fc:44:38:
56:2b:93:55:b5:89:3a:e1:95:fa:5e:e9:e6:74:71:91:80:2e:
a4:71:2b:e8:fe:92:15:7d:ac:39:61:78:97:fa:be:96:a3:d6:
9d:dc:36:e1:33:4c:79:2b:e9:0a:1e:3f:a2:11:d7:f4:8a:b0:
53:1e:e4:4d
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEx
NzUyNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM3NURBNDM5MEE3RUM3
RUE4QzgyNENEQ0VGQThFRDk1NTE3RUU1NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvBn71mPPaWUOHumlvXNH3yqbPVwUihVwwA4eWl9fLKW2nSYMn
noYlB1KzPPZaDfG+x710dl1bugB3pU/TwB+8xQKFwWRnS5mTCi2oDqf8nR2ikq9H
AunN/aU3Wpnq2qt40U1CRgMy86ZRvgVlXjC+us0M9tCfR4o24yV2Y3mz9r+kGOZC
1izHtUQsnT0PoWMgt0KbmAnxF9KK6TanTV19NmW8Mcr5pNAt+5Bo7Wcn18WhngDE
/6iAKPiAm9B7jd0KDkemT6eLs7SDq8UeoP0m80YoTlIc5VUhDhsLL+fefNnCoGrk
1LapvtpaQV+C4C9A6srrpwvJe7PcW2XhgPQNAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUx12kOQp+x+qMgkzc76jtlVF+5UswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3gxMmtPUXAteC1xTWdr
emM3Nmp0bFZGLTVVcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKRKPZOgVqm2lecw
j9ib2QKqn8/UqVnIZweMWle1MgqdzbRB6XassQgTlJzILNX+lpE1Jj7J+FvshGQa
r3QArm8g6a2xh/mPklugNFpkPgGMkxwWULRP7faUi3B+FpDLsiGRwGmBkWM3COlA
3z+Wupe/qNIi0zD3HMB8g/U4CoJeWFojIL5RtU0806BWxRd7iIUxQqqTXzw4gNy/
Jm35HU16/dmEhTMUEPtB4/F8pKSe9DBViiau6UIB2hsvXwSPikMmmPxEOFYrk1W1
iTrhlfpe6eZ0cZGALqRxK+j+khV9rDlheJf6vpaj1p3cNuEzTHkr6QoeP6IR1/SK
sFMe5E0=
-----END CERTIFICATE-----
Generated at Fri Apr 12 01:38:41 2024 by rpki-client on console.sobornost.net