Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9cSEwx2yGjgNTc5GFBRU2Sxu_ms.roa
File: 9cSEwx2yGjgNTc5GFBRU2Sxu_ms.roa (raw, json)
Hash identifier: HJhBjyMIh9YAFX376i2MTNMSB0gGXxn3usoNR2hdLkg=
Subject key identifier: F5:C4:84:C3:1D:B2:1A:38:0D:4D:CE:46:14:14:54:D9:2C:6E:FE:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3322
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9cSEwx2yGjgNTc5GFBRU2Sxu_ms.roa
Signing time: Wed 27 Mar 2024 18:22:02 +0000
ROA not before: Wed 27 Mar 2024 18:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13090 (0x3322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 18:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5C484C31DB21A380D4DCE46141454D92C6EFE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:75:37:8c:8f:11:71:c8:96:5f:12:3e:31:
d8:b4:fc:7a:51:a3:b7:28:2b:c1:44:41:aa:bc:cc:
bd:d5:9c:4d:81:52:1e:f4:88:a2:e1:53:01:fe:3d:
b7:6f:d1:63:90:c2:10:51:98:76:97:ff:37:cb:2f:
7d:18:34:e6:e7:fa:8f:5a:13:c9:04:3b:eb:6e:5b:
98:63:ac:0e:a0:0b:13:d2:e2:b2:5d:12:5d:c6:2d:
63:e0:70:88:10:3e:be:8b:b1:ce:a5:3b:d7:a7:21:
3f:59:49:9d:00:77:6b:6d:62:70:39:36:2c:1d:7e:
e2:52:2a:73:73:ad:39:d6:54:af:9c:a8:e3:5a:da:
cb:43:7b:8b:03:8d:1d:95:6e:35:fa:09:41:17:72:
57:8f:2d:3c:22:81:de:ad:f3:f8:9c:f8:48:4d:e0:
c1:40:97:23:86:d0:55:f5:34:c6:10:65:03:3a:44:
6d:ce:71:0c:51:63:35:b5:87:da:d2:d2:ca:27:33:
71:df:5d:3a:7e:48:52:e0:8b:ea:e2:45:a2:5b:a1:
26:a5:ba:8b:04:88:42:63:cf:e4:aa:21:87:c3:a9:
1a:77:28:dd:8e:21:97:72:9a:bf:ed:0a:f3:23:63:
01:02:41:8d:d4:d3:5a:56:b3:7f:02:7d:6f:ac:5f:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:84:C3:1D:B2:1A:38:0D:4D:CE:46:14:14:54:D9:2C:6E:FE:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9cSEwx2yGjgNTc5GFBRU2Sxu_ms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:78:d8:b1:ee:ef:a6:0a:60:44:37:1a:bc:2c:ab:0e:05:da:
cb:6c:ce:63:f8:9d:90:9a:f8:8e:e1:1f:22:74:cb:4d:6a:2e:
92:9c:9d:0f:83:67:bb:52:fd:48:99:07:2b:dd:58:e9:54:87:
00:50:be:38:84:af:33:0a:e0:b0:a6:a6:ce:14:db:42:c9:fb:
7b:c5:a7:b8:20:1d:1a:2c:2f:ec:e6:40:6f:f1:ec:23:a0:6f:
83:8d:76:fd:27:98:1c:33:93:8f:a9:48:b0:09:10:e0:c3:95:
fa:28:30:0e:bd:ff:26:f4:7f:79:cd:18:47:76:a1:43:aa:1d:
36:14:0c:a0:31:79:bb:d7:6f:bb:b1:15:61:57:54:de:76:43:
42:61:a0:2a:da:67:1b:01:f8:5c:5c:f9:ec:d5:36:21:23:34:
47:71:82:3a:8a:99:5f:e7:a5:dd:6d:7c:4b:3a:41:bb:35:bc:
c8:55:19:0b:1b:f9:54:94:d4:4a:d8:44:00:65:b4:df:63:ef:
9f:0c:4b:44:17:50:b4:57:86:53:ab:d3:92:f3:78:9e:30:9d:
63:07:8f:62:da:aa:9f:e4:b2:6a:99:5e:de:33:a1:7b:f1:e7:
80:1d:c0:1b:9b:fb:e6:c8:f4:b7:a9:bd:05:f4:36:d6:0c:88:
12:59:18:cb
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICMyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjcx
ODIyMDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY1QzQ4NEMzMURCMjFB
MzgwRDREQ0U0NjE0MTQ1NEQ5MkM2RUZFNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI+XU3jI8RcciWXxI+Mdi0/HpRo7coK8FEQaq8zL3VnE2BUh70
iKLhUwH+Pbdv0WOQwhBRmHaX/zfLL30YNObn+o9aE8kEO+tuW5hjrA6gCxPS4rJd
El3GLWPgcIgQPr6Lsc6lO9enIT9ZSZ0Ad2ttYnA5NiwdfuJSKnNzrTnWVK+cqONa
2stDe4sDjR2VbjX6CUEXclePLTwigd6t8/ic+EhN4MFAlyOG0FX1NMYQZQM6RG3O
cQxRYzW1h9rS0sonM3HfXTp+SFLgi+riRaJboSaluosEiEJjz+SqIYfDqRp3KN2O
IZdymr/tCvMjYwECQY3U01pWs38CfW+sX4t1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU9cSEwx2yGjgNTc5GFBRU2Sxu/mswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzljU0V3eDJ5R2pnTlRj
NUdGQlJVMlN4dV9tcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAVHjYse7vpgpgRDcavCyrDgXay2zOY/id
kJr4juEfInTLTWoukpydD4Nnu1L9SJkHK91Y6VSHAFC+OISvMwrgsKamzhTbQsn7
e8WnuCAdGiwv7OZAb/HsI6Bvg412/SeYHDOTj6lIsAkQ4MOV+igwDr3/JvR/ec0Y
R3ahQ6odNhQMoDF5u9dvu7EVYVdU3nZDQmGgKtpnGwH4XFz57NU2ISM0R3GCOoqZ
X+el3W18SzpBuzW8yFUZCxv5VJTUSthEAGW032PvnwxLRBdQtFeGU6vTkvN4njCd
YwePYtqqn+Syaple3jOhe/HngB3AG5v75sj0t6m9BfQ21gyIElkYyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org