Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0LAdI23UMNc6uNUieUeQzS4dOYA.roa
File: 0LAdI23UMNc6uNUieUeQzS4dOYA.roa (raw, json)
Hash identifier: 4pdP6ncll3ehRoG2Wg4mC6mU6qa2PsJQueH6jVq7Jp8=
Subject key identifier: D0:B0:1D:23:6D:D4:30:D7:3A:B8:D5:22:79:47:90:CD:2E:1D:39:80
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3352
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0LAdI23UMNc6uNUieUeQzS4dOYA.roa
Signing time: Thu 28 Mar 2024 00:22:03 +0000
ROA not before: Thu 28 Mar 2024 00:22:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13138 (0x3352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 00:22:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D0B01D236DD430D73AB8D522794790CD2E1D3980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:a2:d3:b7:ad:ab:2f:36:4e:f4:83:46:f5:
ca:af:54:4d:01:8c:3e:77:e5:8e:67:53:44:5c:3f:
ab:6a:ff:b2:6a:ca:86:ca:7d:81:2d:6c:65:03:bf:
76:d0:03:37:b5:69:cb:a3:b1:b4:38:01:38:12:5d:
57:45:94:1f:0c:58:44:65:52:3e:0d:7b:a7:13:d8:
21:00:fc:bd:a0:41:87:aa:a5:69:12:f3:cc:99:2d:
75:86:32:c4:d7:98:a2:c0:f2:3b:2d:e2:1d:5a:b8:
b6:dc:ea:07:3c:d3:8f:04:6f:a8:b1:4a:46:74:fd:
f1:62:31:0b:ba:22:0e:e5:60:58:67:09:fd:42:c1:
73:ab:39:f0:32:c6:22:dd:57:a9:eb:3a:0c:21:71:
d4:d9:66:5c:94:de:b4:83:e1:d9:24:be:ff:c5:f3:
a3:d5:16:a5:ab:03:06:f0:11:83:01:8a:12:97:ee:
46:bc:24:ba:b7:cd:1d:a2:57:e0:0f:28:00:29:a2:
c4:04:bf:97:87:28:fe:d1:e8:d6:19:c6:cd:06:6a:
5f:2b:ab:29:ab:c2:a2:59:10:13:b1:e2:33:ce:7a:
97:f6:56:25:16:f9:e4:8d:b1:c7:71:de:1d:e7:d6:
b7:2a:10:7a:70:1e:b4:72:f5:24:9a:36:48:7d:55:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:1D:23:6D:D4:30:D7:3A:B8:D5:22:79:47:90:CD:2E:1D:39:80
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0LAdI23UMNc6uNUieUeQzS4dOYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:8d:3c:3a:b7:a7:83:b5:30:a3:bb:ed:3f:dd:be:4d:99:89:
a3:48:0b:d3:a9:43:5a:46:2c:04:16:2d:13:2f:f3:3e:21:b5:
f6:63:70:4a:df:87:68:5f:21:14:e2:fa:19:0d:a0:54:55:3c:
09:51:ee:28:f9:22:7c:35:7e:79:d1:72:4a:6a:b7:19:92:28:
19:19:4a:40:bc:99:79:49:59:35:55:74:7e:a4:ec:c2:5f:50:
2b:d2:9e:22:49:32:9a:21:99:64:e6:37:d1:4f:42:b1:d0:6c:
62:66:08:cb:f5:16:84:04:cd:2f:59:88:40:08:ec:80:b9:57:
c9:ba:f4:93:97:5d:c2:6b:61:e1:28:41:63:a6:1d:0a:81:84:
7d:fd:17:ec:24:a9:55:10:d3:1a:38:98:44:49:57:fd:85:6e:
75:f2:ce:09:f2:38:c5:49:5f:7a:ad:67:95:95:9a:87:b3:31:
88:67:b9:9a:ba:90:cd:11:2f:99:df:cc:ed:6c:76:fa:89:f7:
10:14:c7:62:52:14:84:86:f5:a7:90:93:7b:99:31:fc:56:ae:
0c:ac:61:a9:f9:ac:ef:9b:20:c9:5f:b6:84:d2:92:7d:40:0d:
4b:0d:48:7e:c0:5e:4a:12:d0:8f:dc:b2:d6:f6:1e:6a:64:88:
91:80:f1:6f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICM1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw
MDIyMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQwQjAxRDIzNkRENDMw
RDczQUI4RDUyMjc5NDc5MENEMkUxRDM5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSlaLTt62rLzZO9ING9cqvVE0BjD535Y5nU0RcP6tq/7JqyobK
fYEtbGUDv3bQAze1acujsbQ4ATgSXVdFlB8MWERlUj4Ne6cT2CEA/L2gQYeqpWkS
88yZLXWGMsTXmKLA8jst4h1auLbc6gc8048Eb6ixSkZ0/fFiMQu6Ig7lYFhnCf1C
wXOrOfAyxiLdV6nrOgwhcdTZZlyU3rSD4dkkvv/F86PVFqWrAwbwEYMBihKX7ka8
JLq3zR2iV+APKAAposQEv5eHKP7R6NYZxs0Gal8rqymrwqJZEBOx4jPOepf2ViUW
+eSNscdx3h3n1rcqEHpwHrRy9SSaNkh9VabdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU0LAdI23UMNc6uNUieUeQzS4dOYAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBMQWRJMjNVTU5jNnVO
VWllVWVRelM0ZE9ZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAFI08Oreng7Uwo7vtP92+TZmJo0gL06lD
WkYsBBYtEy/zPiG19mNwSt+HaF8hFOL6GQ2gVFU8CVHuKPkifDV+edFySmq3GZIo
GRlKQLyZeUlZNVV0fqTswl9QK9KeIkkymiGZZOY30U9CsdBsYmYIy/UWhATNL1mI
QAjsgLlXybr0k5ddwmth4ShBY6YdCoGEff0X7CSpVRDTGjiYRElX/YVudfLOCfI4
xUlfeq1nlZWah7MxiGe5mrqQzREvmd/M7Wx2+on3EBTHYlIUhIb1p5CTe5kx/Fau
DKxhqfms75sgyV+2hNKSfUANSw1IfsBeShLQj9yy1vYeamSIkYDxbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org