Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4PzqN6NShRPBNgQnYZ8cj3W2yVg.roa
File: 4PzqN6NShRPBNgQnYZ8cj3W2yVg.roa (raw, json)
Hash identifier: ysMzO0PtmQ9Yvt1sd9maycVZ9HOMnq857bA8kw3BQlw=
Subject key identifier: E0:FC:EA:37:A3:52:85:13:C1:36:04:27:61:9F:1C:8F:75:B6:C9:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4PzqN6NShRPBNgQnYZ8cj3W2yVg.roa
Signing time: Tue 14 May 2024 04:54:17 +0000
ROA not before: Tue 14 May 2024 04:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22198 (0x56b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 04:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E0FCEA37A3528513C1360427619F1C8F75B6C958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:bf:2d:41:46:e5:c9:c3:e5:d1:c5:82:23:
d5:82:eb:da:90:d8:44:e5:47:87:b7:c4:32:77:ba:
78:42:90:d3:22:30:2e:1a:dc:b2:e5:a7:91:e4:40:
be:69:48:ed:5d:a3:19:ff:9f:e5:93:25:d3:06:91:
20:63:77:81:b4:3d:bd:9c:c4:e5:1d:d4:04:f5:fb:
90:d9:02:88:4e:75:2c:8e:7d:0e:d4:91:bb:31:c3:
7c:09:4f:95:c3:cb:7c:bf:63:e4:b1:35:f2:09:28:
66:53:08:f8:a1:c7:91:79:3d:73:c5:25:5d:9b:a2:
ba:34:36:49:76:3d:df:cd:fe:3d:ea:cf:4d:86:88:
fc:a6:15:5b:44:ce:da:c5:89:f3:4d:70:af:f5:3c:
6e:1f:09:a8:b5:a3:9a:b8:0a:c7:c2:16:00:f8:bd:
91:99:c8:ed:7c:66:13:71:70:b9:2d:55:26:e1:f7:
12:4e:b2:8e:da:e1:c4:a6:ca:8e:9e:0f:3f:15:5b:
6c:92:3d:1c:a6:ca:fe:ab:ba:59:e3:a4:98:22:a6:
3e:94:52:57:fd:9e:db:c6:2d:b4:ba:35:50:54:b4:
e2:48:fe:bf:41:d9:59:c6:cf:db:c1:5b:45:87:e9:
0c:b1:1f:ed:75:d5:20:92:e2:61:45:37:2d:88:3a:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:EA:37:A3:52:85:13:C1:36:04:27:61:9F:1C:8F:75:B6:C9:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4PzqN6NShRPBNgQnYZ8cj3W2yVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:15:c0:9f:af:5f:7c:d9:f6:eb:e4:69:40:c0:34:07:54:2d:
0b:23:5f:ba:69:6c:ad:42:03:7e:93:d5:ac:8a:ff:a2:8f:da:
c6:7d:05:b2:76:96:70:f9:05:3c:33:a6:b8:ea:b4:a5:4a:d6:
34:d0:84:e0:1b:8b:ec:3a:91:12:5c:10:d4:c5:88:67:78:f8:
96:99:26:bc:d7:c3:c9:b5:02:f6:7e:38:5c:15:cc:c1:e7:bc:
e1:eb:a5:d2:6e:36:73:3a:e8:86:37:bc:91:65:97:f6:3c:1e:
7b:9d:23:f4:ff:0d:e0:fd:60:d8:ca:53:44:31:2e:df:bf:a8:
82:79:3a:f6:0b:2f:b5:0d:30:4a:56:28:da:9f:55:7d:4c:4e:
f0:9b:85:5b:04:3f:6d:45:fc:08:32:84:09:82:c8:3e:7e:52:
f5:13:4f:91:3e:0c:3b:5e:81:50:3b:27:ac:2a:99:de:f6:b4:
05:1c:e1:c2:b8:6a:d1:23:ac:3f:09:73:16:42:5b:ee:e2:48:
2e:ac:6c:d7:41:6c:ce:c5:c7:04:31:e1:7b:31:35:89:8f:59:
20:0c:9d:3e:1a:f5:71:49:c2:1a:c4:cc:87:77:55:ac:03:c7:
88:dd:ad:b9:12:e8:67:5c:44:57:62:71:3c:7d:6e:ee:bb:e9:
1e:9c:5c:32
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVrYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQw
NDU0MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUwRkNFQTM3QTM1Mjg1
MTNDMTM2MDQyNzYxOUYxQzhGNzVCNkM5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpUL8tQUblycPl0cWCI9WC69qQ2ETlR4e3xDJ3unhCkNMiMC4a
3LLlp5HkQL5pSO1doxn/n+WTJdMGkSBjd4G0Pb2cxOUd1AT1+5DZAohOdSyOfQ7U
kbsxw3wJT5XDy3y/Y+SxNfIJKGZTCPihx5F5PXPFJV2boro0Nkl2Pd/N/j3qz02G
iPymFVtEztrFifNNcK/1PG4fCai1o5q4CsfCFgD4vZGZyO18ZhNxcLktVSbh9xJO
so7a4cSmyo6eDz8VW2ySPRymyv6rulnjpJgipj6UUlf9ntvGLbS6NVBUtOJI/r9B
2VnGz9vBW0WH6QyxH+111SCS4mFFNy2IOusFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4PzqN6NShRPBNgQnYZ8cj3W2yVgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzRQenFONk5TaFJQQk5n
UW5ZWjhjajNXMnlWZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAgRXAn69ffNn26+RpQMA0B1QtCyNfumls
rUIDfpPVrIr/oo/axn0FsnaWcPkFPDOmuOq0pUrWNNCE4BuL7DqRElwQ1MWIZ3j4
lpkmvNfDybUC9n44XBXMwee84eul0m42czrohje8kWWX9jwee50j9P8N4P1g2MpT
RDEu37+ognk69gsvtQ0wSlYo2p9VfUxO8JuFWwQ/bUX8CDKECYLIPn5S9RNPkT4M
O16BUDsnrCqZ3va0BRzhwrhq0SOsPwlzFkJb7uJILqxs10FszsXHBDHhezE1iY9Z
IAydPhr1cUnCGsTMh3dVrAPHiN2tuRLoZ1xEV2JxPH1u7rvpHpxcMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org