Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ABjnu6s2wJBuOG-qPKIAtOD-_Sk.roa
File: ABjnu6s2wJBuOG-qPKIAtOD-_Sk.roa (raw, json)
Hash identifier: 1RUfKct851xj7AfDEI8Gmowa8BJB03ZjZvG++HJ/hWA=
Subject key identifier: 00:18:E7:BB:AB:36:C0:90:6E:38:6F:AA:3C:A2:00:B4:E0:FE:FD:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B56
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ABjnu6s2wJBuOG-qPKIAtOD-_Sk.roa
Signing time: Sun 07 Apr 2024 16:52:31 +0000
ROA not before: Sun 07 Apr 2024 16:52:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15190 (0x3b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 16:52:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0018E7BBAB36C0906E386FAA3CA200B4E0FEFD29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:98:12:84:eb:39:7a:61:4f:f1:68:1d:00:
2e:ca:b1:6b:a6:fb:f3:32:a9:3d:b5:e7:ae:4c:ff:
95:2e:e1:5d:cc:4f:7c:b8:11:af:8c:f3:5c:d1:df:
37:61:c1:82:e1:d3:5a:11:7f:83:0d:ac:04:5f:39:
6c:2c:61:15:70:c0:09:91:89:d5:16:32:42:cc:15:
4d:7b:d7:cf:cf:08:de:3f:d6:0d:0e:52:a9:cd:c1:
4e:ee:84:a6:db:24:0b:4f:36:8c:fb:29:cf:51:ac:
a9:38:b2:6f:92:7b:91:93:35:d5:94:11:5f:f0:c5:
ec:4c:43:3e:47:6b:25:36:d4:a7:5d:db:9b:d0:03:
68:f2:d3:91:ad:49:a3:66:f2:f8:03:4d:51:09:6d:
31:bc:f2:b0:4c:bd:fe:33:9f:a3:2c:20:b1:a8:df:
62:5a:fd:45:b9:be:13:3b:29:50:1e:fa:c7:33:61:
a3:88:dc:56:6f:88:91:3c:88:fc:5e:d0:19:73:f3:
54:04:ff:72:f8:c0:62:7d:70:67:f6:41:81:40:73:
05:85:4d:2b:df:d0:ea:01:73:a2:6c:8b:0f:f4:4b:
f5:ae:4f:f3:fd:82:1c:41:49:f0:b0:2e:40:71:a4:
73:e4:28:3b:24:ec:35:24:7a:f1:36:f0:96:5c:92:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:E7:BB:AB:36:C0:90:6E:38:6F:AA:3C:A2:00:B4:E0:FE:FD:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ABjnu6s2wJBuOG-qPKIAtOD-_Sk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:0e:1c:56:b9:43:60:48:c7:f9:0a:cd:cf:38:3e:42:a4:fe:
32:3f:f1:5b:a3:c5:5b:36:d4:9d:26:ce:4b:3f:b2:d4:c0:48:
76:33:44:2c:6c:a6:18:de:ca:61:6c:8c:a7:10:4c:de:30:3a:
4c:99:a1:fe:0b:18:f1:e5:fc:29:94:64:62:b2:9c:28:ca:4f:
77:49:ab:3a:ef:d4:9b:6a:1b:fd:97:d5:cb:d1:83:50:47:04:
7c:15:98:8d:66:6a:df:99:c2:4a:55:e4:03:79:76:76:50:47:
c7:78:f8:1c:61:23:cd:a6:21:3b:ae:bb:f3:70:f9:cf:c1:84:
53:7f:e9:f2:88:96:4a:2c:ac:67:4b:e5:f1:50:24:6b:67:12:
83:0f:c1:7d:0e:13:04:fd:2d:86:95:3b:8e:47:f4:8f:86:ff:
ea:4a:dd:ca:3c:72:05:26:e2:55:b5:b4:b2:ce:13:4a:c0:9f:
f5:95:53:d5:29:0c:17:3a:ad:72:de:57:7f:3a:5b:b9:bf:63:
53:3e:97:4e:66:e5:ac:34:fa:d1:fc:3b:cc:cb:83:0f:90:3b:
5d:6f:f4:45:a8:87:7d:84:4a:c4:91:69:85:d4:25:ac:14:21:
d7:47:58:5f:9e:bd:29:ce:eb:1e:8e:86:bb:71:57:3b:ec:0b:
47:22:0d:57
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICO1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcx
NjUyMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAwMThFN0JCQUIzNkMw
OTA2RTM4NkZBQTNDQTIwMEI0RTBGRUZEMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCf75gShOs5emFP8WgdAC7KsWum+/MyqT21565M/5Uu4V3MT3y4
Ea+M81zR3zdhwYLh01oRf4MNrARfOWwsYRVwwAmRidUWMkLMFU1718/PCN4/1g0O
UqnNwU7uhKbbJAtPNoz7Kc9RrKk4sm+Se5GTNdWUEV/wxexMQz5HayU21Kdd25vQ
A2jy05GtSaNm8vgDTVEJbTG88rBMvf4zn6MsILGo32Ja/UW5vhM7KVAe+sczYaOI
3FZviJE8iPxe0Blz81QE/3L4wGJ9cGf2QYFAcwWFTSvf0OoBc6Jsiw/0S/WuT/P9
ghxBSfCwLkBxpHPkKDsk7DUkevE28JZcki8vAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUABjnu6s2wJBuOG+qPKIAtOD+/SkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0FCam51NnMyd0pCdU9H
LXFQS0lBdE9ELV9Tay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAIQ4cVrlDYEjH+QrNzzg+QqT+Mj/xW6PF
WzbUnSbOSz+y1MBIdjNELGymGN7KYWyMpxBM3jA6TJmh/gsY8eX8KZRkYrKcKMpP
d0mrOu/Um2ob/ZfVy9GDUEcEfBWYjWZq35nCSlXkA3l2dlBHx3j4HGEjzaYhO667
83D5z8GEU3/p8oiWSiysZ0vl8VAka2cSgw/BfQ4TBP0thpU7jkf0j4b/6krdyjxy
BSbiVbW0ss4TSsCf9ZVT1SkMFzqtct5Xfzpbub9jUz6XTmblrDT60fw7zMuDD5A7
XW/0RaiHfYRKxJFphdQlrBQh10dYX569Kc7rHo6Gu3FXO+wLRyINVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:21 2024 by rpki-client on console-ams.rpki-client.org