Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GXkhqgR16TXjhu66zCElC2BBJdI.roa
File: GXkhqgR16TXjhu66zCElC2BBJdI.roa (raw, json)
Hash identifier: M7GwnDuv2nBzGspssH1+diAthP7a2kDq4efxpgQ1ums=
Subject key identifier: 19:79:21:AA:04:75:E9:35:E3:86:EE:BA:CC:21:25:0B:60:41:25:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F82
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GXkhqgR16TXjhu66zCElC2BBJdI.roa
Signing time: Sat 13 Apr 2024 06:22:49 +0000
ROA not before: Sat 13 Apr 2024 06:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16258 (0x3f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 06:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=197921AA0475E935E386EEBACC21250B604125D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:76:55:3b:6a:bf:c6:9e:ad:70:a7:b5:27:be:
bd:57:57:bf:5f:7e:31:fe:a1:dc:0b:99:18:9f:6d:
ae:52:56:a7:f6:07:90:06:00:27:0d:1c:5a:5f:9a:
72:0b:d3:e4:ae:4e:f9:d0:51:c3:c2:d8:7a:29:4c:
d3:52:80:6d:d4:d6:05:87:7b:74:90:41:ed:8b:c9:
f0:59:db:ce:03:ba:81:b2:17:cf:d2:d2:6b:c9:c3:
6a:ff:ed:68:d2:b7:5c:9f:7c:5e:c0:18:dc:0a:d2:
dc:9a:fe:cb:a5:84:d3:72:c4:48:8f:86:05:bc:73:
6a:4f:08:19:79:41:4b:d9:f6:b8:50:b2:fd:3d:9e:
9d:79:7f:d2:37:7b:e2:df:ef:04:5e:78:37:0c:40:
f1:f1:ab:7a:38:0a:10:b2:02:b9:d5:51:9c:a5:26:
a0:85:3b:a3:20:89:0e:75:03:55:36:cf:b7:e9:81:
84:4a:b5:dc:23:b6:33:6d:1f:45:bf:df:c9:06:d5:
98:1e:70:46:ef:42:98:d5:32:48:89:72:85:14:d7:
78:3e:6c:15:42:9b:ed:26:ca:58:2d:7a:f9:c5:cc:
08:e4:00:79:fd:0c:25:41:a3:7c:3d:1f:09:c7:7c:
0f:9b:df:7f:f5:c3:c8:6e:bb:25:7f:57:fb:03:1c:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:21:AA:04:75:E9:35:E3:86:EE:BA:CC:21:25:0B:60:41:25:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GXkhqgR16TXjhu66zCElC2BBJdI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:35:e0:f1:af:08:2d:6c:4d:d1:2a:a0:ba:cb:3e:f1:e9:96:
6a:6c:9d:f2:f3:87:52:f6:91:5f:e6:43:ba:18:d0:23:fa:c9:
3d:43:d9:8b:dc:e9:48:8a:55:de:bf:62:6e:53:f1:29:f6:83:
67:d9:37:ac:e4:ec:53:36:10:96:cc:5a:8d:30:c8:b7:c1:d3:
99:e7:44:17:4e:f6:9b:50:38:dc:d6:4f:77:f8:2e:b1:a9:e6:
d4:91:d4:15:c4:ee:60:9e:be:7e:f6:62:60:63:d1:9d:c4:69:
c9:75:33:58:55:38:fc:97:09:7a:1d:64:e2:a4:ca:ef:c6:8e:
80:24:71:57:19:64:84:2d:b9:23:41:37:5a:2f:91:a9:0a:37:
c4:8f:a6:cb:6d:5d:39:12:3f:e2:a0:8c:a6:6e:2f:3c:0c:f2:
a6:3b:9e:02:91:47:6a:a6:a4:06:e9:6d:c8:92:78:31:9c:62:
5d:51:e4:7e:54:b5:7b:38:c7:53:37:f8:27:66:b3:97:6b:0a:
c6:6e:41:0f:a0:af:3b:be:ec:f1:51:e4:5f:86:6d:e2:50:6d:
1f:ea:dc:86:19:f2:13:28:8c:ae:d2:58:1b:88:a8:9e:af:16:
40:9b:d7:77:86:9c:e7:26:60:5d:c9:cd:7a:86:7e:c1:61:db:
b6:10:e9:83
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICP4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMw
NjIyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE5NzkyMUFBMDQ3NUU5
MzVFMzg2RUVCQUNDMjEyNTBCNjA0MTI1RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7dlU7ar/Gnq1wp7Unvr1XV79ffjH+odwLmRifba5SVqf2B5AG
ACcNHFpfmnIL0+SuTvnQUcPC2HopTNNSgG3U1gWHe3SQQe2LyfBZ284DuoGyF8/S
0mvJw2r/7WjSt1yffF7AGNwK0tya/sulhNNyxEiPhgW8c2pPCBl5QUvZ9rhQsv09
np15f9I3e+Lf7wReeDcMQPHxq3o4ChCyArnVUZylJqCFO6MgiQ51A1U2z7fpgYRK
tdwjtjNtH0W/38kG1ZgecEbvQpjVMkiJcoUU13g+bBVCm+0mylgtevnFzAjkAHn9
DCVBo3w9HwnHfA+b33/1w8huuyV/V/sDHNInAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGXkhqgR16TXjhu66zCElC2BBJdIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dYa2hxZ1IxNlRYamh1
NjZ6Q0VsQzJCQkpkSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEALTXg8a8ILWxN0Sqguss+8emWamyd8vOH
UvaRX+ZDuhjQI/rJPUPZi9zpSIpV3r9iblPxKfaDZ9k3rOTsUzYQlsxajTDIt8HT
medEF072m1A43NZPd/gusanm1JHUFcTuYJ6+fvZiYGPRncRpyXUzWFU4/JcJeh1k
4qTK78aOgCRxVxlkhC25I0E3Wi+RqQo3xI+my21dORI/4qCMpm4vPAzypjueApFH
aqakBultyJJ4MZxiXVHkflS1ezjHUzf4J2azl2sKxm5BD6CvO77s8VHkX4Zt4lBt
H+rchhnyEyiMrtJYG4ionq8WQJvXd4ac5yZgXcnNeoZ+wWHbthDpgw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:14 2025 by rpki-client