Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8Sc6MVNqdjSWCCvSabiDTf15hwo.roa
File: 8Sc6MVNqdjSWCCvSabiDTf15hwo.roa (raw, json)
Hash identifier: utcq0V0OEHYXTHmXg2B3A4IT2IPswu6fb77tqnM2+oY=
Subject key identifier: F1:27:3A:31:53:6A:76:34:96:08:2B:D2:69:B8:83:4D:FD:79:87:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Sc6MVNqdjSWCCvSabiDTf15hwo.roa
Signing time: Tue 02 Apr 2024 22:52:39 +0000
ROA not before: Tue 02 Apr 2024 22:52:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14278 (0x37c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 22:52:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F1273A31536A763496082BD269B8834DFD79870A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:c1:b4:5a:34:f7:b3:3f:e5:da:70:4a:c8:
d5:1e:98:57:cf:83:4e:ce:5c:19:70:56:c8:6b:ab:
d4:f3:aa:02:6b:5f:82:c6:8d:44:e8:e7:19:de:9c:
7c:8a:fe:a3:9d:a5:14:98:81:df:0b:da:b4:20:a5:
97:e8:0e:49:9b:33:5e:a5:8a:10:47:6d:92:01:1d:
7c:f0:42:6e:8f:a7:16:cb:dc:89:1d:b0:3a:c9:13:
d0:33:ab:3e:d6:4e:11:4e:58:76:9a:91:a4:a3:7a:
79:02:ca:f5:60:7b:5d:75:fb:44:ca:38:61:c8:8d:
e3:56:07:7b:c7:c1:8b:9d:3f:37:31:71:ed:67:af:
81:b0:83:52:4a:2c:f6:c2:09:ab:2a:ba:79:61:44:
a6:45:a8:af:56:7c:39:cb:38:7c:85:5c:b3:7b:9a:
0b:a1:7c:19:a4:dc:4a:de:f2:05:07:04:d3:d1:19:
65:ec:b7:d2:c5:31:0f:1c:ba:65:a4:6a:a9:97:10:
f2:ca:a0:ae:86:c1:4a:fb:b1:0b:a0:19:d2:a3:86:
e1:51:f1:38:54:9a:9d:04:28:e1:19:3a:60:eb:32:
fe:ba:19:00:94:39:a8:98:d7:fa:89:02:7b:81:c5:
22:ca:c4:9d:6d:43:3a:81:7a:43:44:f3:3f:72:e4:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:3A:31:53:6A:76:34:96:08:2B:D2:69:B8:83:4D:FD:79:87:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8Sc6MVNqdjSWCCvSabiDTf15hwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:82:ba:64:53:d0:02:f9:34:2f:f7:fb:8d:26:d4:33:b9:48:
1d:6b:2b:4e:35:cf:2a:14:5f:1f:68:97:13:df:08:02:df:31:
f2:13:a4:ee:41:2a:d6:09:2c:fe:b6:99:d5:93:40:ed:2d:be:
7b:51:19:9c:6f:3d:ca:96:ff:7a:78:4b:70:62:aa:08:bd:21:
1c:59:ed:87:f8:b1:8b:d8:da:b2:38:b3:f7:d0:26:51:16:3b:
06:9c:1a:03:1c:ef:80:f0:56:45:a6:3e:48:66:f7:98:07:0e:
40:3c:57:9b:35:33:05:c7:04:c1:01:8e:dc:f9:52:9d:16:cf:
6d:c6:81:36:26:d2:94:f6:26:04:0f:a6:c2:a0:9b:6e:9c:3c:
d5:c5:2d:3f:82:83:5b:d5:d1:1f:8f:b4:64:8d:ea:51:84:71:
fa:fe:dc:ab:77:0d:1c:ac:c3:bf:50:b4:10:54:96:8c:c7:26:
72:7e:17:86:b8:f2:46:17:de:be:c4:78:83:21:f0:f2:ac:ea:
37:cc:73:aa:a5:1a:c8:66:94:c1:9e:b5:03:07:1c:c6:58:4b:
e0:ab:15:9b:4b:ca:a3:30:9f:a6:b8:63:83:46:15:32:b6:ee:
84:b3:cd:e9:bf:13:c9:db:6a:8b:3c:23:64:a2:04:50:a8:7b:
8a:70:a9:05
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICN8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDIy
MjUyMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxMjczQTMxNTM2QTc2
MzQ5NjA4MkJEMjY5Qjg4MzRERkQ3OTg3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4IsG0WjT3sz/l2nBKyNUemFfPg07OXBlwVshrq9TzqgJrX4LG
jUTo5xnenHyK/qOdpRSYgd8L2rQgpZfoDkmbM16lihBHbZIBHXzwQm6PpxbL3Ikd
sDrJE9Azqz7WThFOWHaakaSjenkCyvVge111+0TKOGHIjeNWB3vHwYudPzcxce1n
r4Gwg1JKLPbCCasqunlhRKZFqK9WfDnLOHyFXLN7mguhfBmk3Ere8gUHBNPRGWXs
t9LFMQ8cumWkaqmXEPLKoK6GwUr7sQugGdKjhuFR8ThUmp0EKOEZOmDrMv66GQCU
OaiY1/qJAnuBxSLKxJ1tQzqBekNE8z9y5CcxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8Sc6MVNqdjSWCCvSabiDTf15hwowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhTYzZNVk5xZGpTV0ND
dlNhYmlEVGYxNWh3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAE4K6ZFPQAvk0L/f7jSbUM7lIHWsrTjXP
KhRfH2iXE98IAt8x8hOk7kEq1gks/raZ1ZNA7S2+e1EZnG89ypb/enhLcGKqCL0h
HFnth/ixi9jasjiz99AmURY7BpwaAxzvgPBWRaY+SGb3mAcOQDxXmzUzBccEwQGO
3PlSnRbPbcaBNibSlPYmBA+mwqCbbpw81cUtP4KDW9XRH4+0ZI3qUYRx+v7cq3cN
HKzDv1C0EFSWjMcmcn4XhrjyRhfevsR4gyHw8qzqN8xzqqUayGaUwZ61AwccxlhL
4KsVm0vKozCfprhjg0YVMrbuhLPN6b8TydtqizwjZKIEUKh7inCpBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:25:37 2025 by rpki-client