Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GaQzOR2zt5anz15XH-rMJ8Rhh_E.roa
File: GaQzOR2zt5anz15XH-rMJ8Rhh_E.roa (raw, json)
Hash identifier: dYSdDdh5wjgkfKHS75Kh2++Y9Nk5Fme8CqQHiwZm5l4=
Subject key identifier: 19:A4:33:39:1D:B3:B7:96:A7:CF:5E:57:1F:EA:CC:27:C4:61:87:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 490E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GaQzOR2zt5anz15XH-rMJ8Rhh_E.roa
Signing time: Thu 25 Apr 2024 23:53:19 +0000
ROA not before: Thu 25 Apr 2024 23:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18702 (0x490e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 23:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=19A433391DB3B796A7CF5E571FEACC27C46187F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:75:e4:2c:0f:bb:e2:61:6c:60:ac:8b:78:
be:8b:41:7e:25:7d:dc:0c:05:17:62:f1:7a:4d:64:
3f:cd:0e:a1:19:86:a5:8a:93:85:0c:ff:ae:d0:e7:
64:5e:3b:62:33:89:9a:2e:e8:e4:e4:35:1d:5c:2a:
98:6c:a0:48:fd:8f:a7:ee:3c:56:0c:dd:6b:d4:a5:
87:54:71:52:93:59:4e:da:29:42:e8:f9:60:ea:48:
ad:cf:73:08:44:25:a4:3c:c6:99:91:9a:35:1e:83:
06:d9:7b:3c:ee:fc:ee:77:88:0e:73:01:68:93:0a:
e3:99:c4:b9:5b:4a:9f:46:31:83:68:09:2a:fb:7f:
10:96:10:bf:62:d8:0e:97:80:61:cc:28:3b:40:42:
72:2f:fc:39:5a:eb:a8:e0:23:59:ff:df:a2:6b:db:
d6:88:46:e7:78:da:b4:b7:5d:8c:de:b4:9a:b9:7c:
2b:09:7f:e0:61:0b:e7:9e:ca:d6:cd:56:e1:a5:3a:
58:3f:39:c3:23:b0:6c:49:e6:a1:9f:26:b7:08:45:
08:21:71:18:aa:e1:44:48:ff:20:11:c8:9a:ff:7e:
d9:e0:1a:38:6a:9f:d4:93:51:a0:61:2f:01:9c:ae:
96:60:75:4e:21:03:aa:25:cd:e2:2c:3a:61:29:cb:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A4:33:39:1D:B3:B7:96:A7:CF:5E:57:1F:EA:CC:27:C4:61:87:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GaQzOR2zt5anz15XH-rMJ8Rhh_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:89:35:e9:ed:69:96:39:9a:2d:56:77:ca:58:b5:87:13:55:
e2:14:aa:ee:5d:22:24:41:0f:0c:5e:71:b9:a9:49:17:84:26:
11:9b:aa:68:50:58:bd:65:ad:ff:57:0a:9b:5a:3f:2e:99:67:
70:b4:8c:be:b6:31:84:bd:66:a2:cf:ae:ff:da:ff:01:64:5e:
ed:40:83:5b:fb:c6:9b:39:1a:ec:27:e4:66:19:e0:83:f6:66:
1c:47:e8:2f:46:c2:e1:d7:f3:32:97:c7:3a:64:17:ac:5d:b2:
19:05:09:b9:72:88:10:f7:d6:72:25:87:c3:f9:76:36:0e:a2:
de:5f:34:3a:d1:5c:22:f2:0a:76:a6:e1:80:43:14:91:f9:96:
1e:bb:2a:dc:ca:22:ff:e6:4a:fd:bf:48:65:2e:4e:2b:3c:33:
9e:4d:f6:31:aa:c2:4e:19:3b:c7:ff:31:c7:c5:18:e0:b5:74:
c6:7c:f9:50:e3:d4:b2:eb:38:15:ac:6b:e1:44:13:03:bc:fb:
a0:b4:aa:aa:31:3d:7c:5d:6b:6a:20:0a:27:e2:b9:35:84:d6:
76:6d:5b:b5:fe:72:49:df:01:ab:01:5b:8c:9e:99:50:be:2c:
9a:80:41:3d:a8:ae:1a:f4:cf:85:f1:c0:2b:56:62:2b:c6:bf:
58:f5:01:f1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICSQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUy
MzUzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE5QTQzMzM5MURCM0I3
OTZBN0NGNUU1NzFGRUFDQzI3QzQ2MTg3RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDh7XXkLA+74mFsYKyLeL6LQX4lfdwMBRdi8XpNZD/NDqEZhqWK
k4UM/67Q52ReO2IziZou6OTkNR1cKphsoEj9j6fuPFYM3WvUpYdUcVKTWU7aKULo
+WDqSK3PcwhEJaQ8xpmRmjUegwbZezzu/O53iA5zAWiTCuOZxLlbSp9GMYNoCSr7
fxCWEL9i2A6XgGHMKDtAQnIv/Dla66jgI1n/36Jr29aIRud42rS3XYzetJq5fCsJ
f+BhC+eeytbNVuGlOlg/OcMjsGxJ5qGfJrcIRQghcRiq4URI/yARyJr/ftngGjhq
n9STUaBhLwGcrpZgdU4hA6olzeIsOmEpy0WBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGaQzOR2zt5anz15XH+rMJ8Rhh/EwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dhUXpPUjJ6dDVhbnox
NVhILXJNSjhSaGhfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAaYk16e1pljmaLVZ3yli1hxNV4hSq7l0i
JEEPDF5xualJF4QmEZuqaFBYvWWt/1cKm1o/LplncLSMvrYxhL1mos+u/9r/AWRe
7UCDW/vGmzka7CfkZhngg/ZmHEfoL0bC4dfzMpfHOmQXrF2yGQUJuXKIEPfWciWH
w/l2Ng6i3l80OtFcIvIKdqbhgEMUkfmWHrsq3Moi/+ZK/b9IZS5OKzwznk32MarC
Thk7x/8xx8UY4LV0xnz5UOPUsus4Faxr4UQTA7z7oLSqqjE9fF1raiAKJ+K5NYTW
dm1btf5ySd8BqwFbjJ6ZUL4smoBBPaiuGvTPhfHAK1ZiK8a/WPUB8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org