Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5_s7sIAwEo3S8UjY-5KFh09aPfo.roa
File: 5_s7sIAwEo3S8UjY-5KFh09aPfo.roa (raw, json)
Hash identifier: 00BDTf4SeykPwyHdOsec/ewEuXePZPJwtbDk3l8Wcj4=
Subject key identifier: E7:FB:3B:B0:80:30:12:8D:D2:F1:48:D8:FB:92:85:87:4F:5A:3D:FA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BC6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5_s7sIAwEo3S8UjY-5KFh09aPfo.roa
Signing time: Mon 08 Apr 2024 06:52:34 +0000
ROA not before: Mon 08 Apr 2024 06:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15302 (0x3bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 06:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E7FB3BB08030128DD2F148D8FB9285874F5A3DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:80:a5:76:3e:e3:10:28:3d:ec:16:91:3b:
c8:7d:3e:de:0a:b1:cb:95:d0:f4:b8:7a:fd:b4:f9:
47:e8:4f:41:af:1f:16:63:9a:e7:34:57:a6:90:63:
10:01:9d:be:d5:cb:be:b2:65:2f:70:a2:19:90:ba:
e5:52:68:fd:3f:e6:cd:c2:bf:52:3f:97:0e:02:d3:
6a:be:11:e3:a8:69:16:1a:0d:18:e0:ab:49:6d:9d:
a4:48:90:77:7c:ff:15:ef:71:70:07:b5:5e:92:bd:
ea:a6:b0:8f:b3:92:89:97:97:99:3f:5f:a3:5a:38:
12:6f:da:1b:19:b4:0e:b2:9a:3f:d1:51:c7:6d:85:
d5:cd:d7:e7:43:04:f5:ca:5b:b4:87:cf:b3:8b:7f:
95:be:56:04:70:67:68:32:20:83:24:25:2e:7f:d5:
b4:40:f0:f8:53:a0:49:9e:86:9f:80:8e:b5:d2:96:
a0:05:2f:01:9a:f1:30:43:60:99:64:ba:dc:36:a5:
4b:18:87:fe:c1:bb:d2:5b:5b:0e:ee:38:a5:b1:81:
c0:ac:9e:6b:ba:d0:b3:d8:92:36:5e:57:89:66:74:
fc:7e:91:c7:f8:49:8d:bc:28:a9:15:86:b6:2c:a8:
2c:50:e0:99:1c:f7:21:92:75:df:79:7e:8e:29:07:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:3B:B0:80:30:12:8D:D2:F1:48:D8:FB:92:85:87:4F:5A:3D:FA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5_s7sIAwEo3S8UjY-5KFh09aPfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:a3:ba:1d:5a:5f:d1:93:d1:2d:ca:4f:78:4c:a6:5d:e3:42:
1b:a6:4d:f7:41:bf:4e:6c:e8:5d:bc:a1:77:12:c4:29:8a:e0:
88:5c:59:4d:1a:92:e9:bc:28:79:ab:db:e9:b6:a7:2b:d8:3c:
c1:27:a3:be:47:5e:5c:ef:43:f4:c9:18:74:46:ac:1e:66:be:
82:ab:90:c9:96:34:4d:a1:da:98:d6:38:04:d8:02:63:5e:f9:
a1:68:4e:0c:c1:77:9f:b8:e9:13:77:47:5d:ec:26:5b:e0:16:
0f:1d:3c:06:74:7a:ba:a0:40:91:60:e1:1b:1b:fd:e8:ec:4f:
08:1a:09:1b:71:a3:e5:39:4c:44:2e:26:cf:61:1e:a8:ca:d6:
53:09:a1:65:47:81:ce:60:ac:13:6c:e4:5f:49:98:08:ae:91:
1f:ba:ad:db:85:ff:f6:3e:a9:c2:f7:cc:81:2d:e9:2f:cc:99:
22:7f:f2:9f:6a:c6:90:9d:f1:53:2a:01:53:ac:84:7c:37:39:
5a:2c:58:06:47:1e:81:a1:58:df:19:db:15:de:88:7e:bf:cb:
88:43:2d:1f:43:46:26:86:77:87:e9:84:33:e7:9e:89:13:de:
6f:ed:a3:e7:7c:3d:b4:97:c5:ad:7b:bf:77:95:39:3e:ce:3e:
34:63:51:c0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICO8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw
NjUyMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU3RkIzQkIwODAzMDEy
OEREMkYxNDhEOEZCOTI4NTg3NEY1QTNERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS/ICldj7jECg97BaRO8h9Pt4KscuV0PS4ev20+UfoT0GvHxZj
muc0V6aQYxABnb7Vy76yZS9wohmQuuVSaP0/5s3Cv1I/lw4C02q+EeOoaRYaDRjg
q0ltnaRIkHd8/xXvcXAHtV6SveqmsI+zkomXl5k/X6NaOBJv2hsZtA6ymj/RUcdt
hdXN1+dDBPXKW7SHz7OLf5W+VgRwZ2gyIIMkJS5/1bRA8PhToEmehp+AjrXSlqAF
LwGa8TBDYJlkutw2pUsYh/7Bu9JbWw7uOKWxgcCsnmu60LPYkjZeV4lmdPx+kcf4
SY28KKkVhrYsqCxQ4Jkc9yGSdd95fo4pB7wHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU5/s7sIAwEo3S8UjY+5KFh09aPfowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzVfczdzSUF3RW8zUzhV
alktNUtGaDA5YVBmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAZ6O6HVpf0ZPRLcpPeEymXeNCG6ZN90G/
TmzoXbyhdxLEKYrgiFxZTRqS6bwoeavb6banK9g8wSejvkdeXO9D9MkYdEasHma+
gquQyZY0TaHamNY4BNgCY175oWhODMF3n7jpE3dHXewmW+AWDx08BnR6uqBAkWDh
Gxv96OxPCBoJG3Gj5TlMRC4mz2EeqMrWUwmhZUeBzmCsE2zkX0mYCK6RH7qt24X/
9j6pwvfMgS3pL8yZIn/yn2rGkJ3xUyoBU6yEfDc5WixYBkcegaFY3xnbFd6Ifr/L
iEMtH0NGJoZ3h+mEM+eeiRPeb+2j53w9tJfFrXu/d5U5Ps4+NGNRwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org