Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FR_ykc5093mjQtu9uHcSei08-Ho.roa
File: FR_ykc5093mjQtu9uHcSei08-Ho.roa (raw, json)
Hash identifier: 3uu1sdl4n/tqpdhyRvzoaKm4nOBlTXBMbJgXhzdS+qY=
Subject key identifier: 15:1F:F2:91:CE:74:F7:79:A3:42:DB:BD:B8:77:12:7A:2D:3C:F8:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5046
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FR_ykc5093mjQtu9uHcSei08-Ho.roa
Signing time: Sun 05 May 2024 14:54:06 +0000
ROA not before: Sun 05 May 2024 14:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20550 (0x5046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 14:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=151FF291CE74F779A342DBBDB877127A2D3CF87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:48:a9:01:be:25:6b:62:80:5c:18:98:24:
1b:0e:ee:95:75:49:0b:61:63:69:8f:08:06:0f:4f:
49:1c:dc:98:5f:fa:5f:c5:1c:9d:50:77:82:ea:54:
2d:82:8b:7a:3b:21:f7:3b:7e:e6:25:92:39:ff:0a:
c2:12:52:2d:f4:68:4c:8b:a3:a8:81:83:c2:bd:ea:
a8:fb:b5:eb:e7:f5:f7:73:84:65:59:f6:08:84:0b:
9a:16:85:c7:f3:5a:e5:8c:b1:0c:e5:18:cf:70:fb:
03:d0:e9:3b:19:51:75:04:20:2c:91:15:2b:e2:09:
b3:df:22:c0:08:0b:62:d7:da:f6:04:78:6e:4b:4b:
65:45:96:2f:ae:2a:e9:77:10:68:df:e2:84:df:88:
79:27:29:77:33:ce:90:4a:52:1b:ba:c4:45:af:d1:
8a:76:7e:94:3c:ef:23:bc:a6:c0:4c:e4:72:ea:1b:
da:c4:bf:99:59:63:38:17:b8:34:7c:e9:0c:52:01:
f6:30:e3:b4:3b:e3:f8:b1:7f:9e:48:0a:c1:a5:b7:
84:f4:01:79:b1:5d:02:cc:17:98:ac:be:20:b5:4b:
4c:5a:35:9a:e7:f1:68:ad:81:25:e0:51:a6:f1:0c:
ba:ff:58:45:3e:c4:54:48:bc:dd:e2:02:05:82:36:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:F2:91:CE:74:F7:79:A3:42:DB:BD:B8:77:12:7A:2D:3C:F8:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FR_ykc5093mjQtu9uHcSei08-Ho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:5e:e8:8b:01:5f:78:57:35:eb:17:42:54:4c:55:dd:80:85:
1e:ea:5a:22:a0:bc:4a:b2:d5:b8:ae:62:85:77:e0:1d:3d:fd:
c3:7f:86:ae:42:82:13:85:39:85:30:7b:ec:9f:61:2e:40:7f:
5f:3f:1c:93:91:2e:b4:28:8f:e4:3c:b1:d7:91:9b:b6:ed:08:
35:b1:6a:82:ff:70:74:41:98:ce:ef:ba:d7:91:e8:92:c1:e5:
63:39:f8:e5:ee:14:af:ef:69:c6:d3:be:5e:96:6f:87:fb:61:
89:cf:8e:e9:94:e0:34:33:26:ad:1e:87:12:82:32:0d:c9:64:
4e:f8:97:01:5c:29:fc:66:d4:c0:af:8a:de:91:09:31:d5:6c:
73:cd:aa:41:e2:99:9e:2d:23:73:49:2a:1b:b5:56:9c:33:af:
12:c9:bd:3a:4c:e2:d1:81:2c:59:66:3e:2c:e2:82:6a:43:17:
d9:12:8b:ee:da:10:83:cd:88:19:23:e4:ff:f6:8f:ff:52:68:
22:89:cb:fc:7f:c5:da:ba:88:ff:48:cd:12:38:ac:0a:02:2f:
d1:3e:1e:7c:aa:69:f9:1a:69:3b:2b:fd:26:5c:0c:29:dd:0f:
97:5f:4f:20:ab:bf:07:33:44:82:72:4e:1d:cc:70:91:eb:07:
bb:e8:9f:d3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICUEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDUx
NDU0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE1MUZGMjkxQ0U3NEY3
NzlBMzQyREJCREI4NzcxMjdBMkQzQ0Y4N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClCEipAb4la2KAXBiYJBsO7pV1SQthY2mPCAYPT0kc3Jhf+l/F
HJ1Qd4LqVC2Ci3o7Ifc7fuYlkjn/CsISUi30aEyLo6iBg8K96qj7tevn9fdzhGVZ
9giEC5oWhcfzWuWMsQzlGM9w+wPQ6TsZUXUEICyRFSviCbPfIsAIC2LX2vYEeG5L
S2VFli+uKul3EGjf4oTfiHknKXczzpBKUhu6xEWv0Yp2fpQ87yO8psBM5HLqG9rE
v5lZYzgXuDR86QxSAfYw47Q74/ixf55ICsGlt4T0AXmxXQLMF5isviC1S0xaNZrn
8WitgSXgUabxDLr/WEU+xFRIvN3iAgWCNiJBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFR/ykc5093mjQtu9uHcSei08+HowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZSX3lrYzUwOTNtalF0
dTl1SGNTZWkwOC1Iby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAqV7oiwFfeFc16xdCVExV3YCFHupaIqC8
SrLVuK5ihXfgHT39w3+GrkKCE4U5hTB77J9hLkB/Xz8ck5EutCiP5Dyx15Gbtu0I
NbFqgv9wdEGYzu+615HoksHlYzn45e4Ur+9pxtO+XpZvh/thic+O6ZTgNDMmrR6H
EoIyDclkTviXAVwp/GbUwK+K3pEJMdVsc82qQeKZni0jc0kqG7VWnDOvEsm9Okzi
0YEsWWY+LOKCakMX2RKL7toQg82IGSPk//aP/1JoIonL/H/F2rqI/0jNEjisCgIv
0T4efKpp+RppOyv9JlwMKd0Pl19PIKu/BzNEgnJOHcxwkesHu+if0w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:55 2025 by rpki-client