Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JcILNw_LWKVPMO_zOdIbFKjlgZU.roa
File: JcILNw_LWKVPMO_zOdIbFKjlgZU.roa (raw, json)
Hash identifier: VMxbxw0PyW/T/97uNwqPEVldrFRqYUsRWwtNMrujKAQ=
Subject key identifier: 25:C2:0B:37:0F:CB:58:A5:4F:30:EF:F3:39:D2:1B:14:A8:E5:81:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41FE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JcILNw_LWKVPMO_zOdIbFKjlgZU.roa
Signing time: Tue 16 Apr 2024 13:52:57 +0000
ROA not before: Tue 16 Apr 2024 13:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16894 (0x41fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 13:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=25C20B370FCB58A54F30EFF339D21B14A8E58195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:4e:82:aa:6b:e5:9a:f3:93:7a:e9:a2:5d:
15:00:05:26:48:6b:1d:eb:43:fc:c2:d4:34:b2:6b:
f8:d8:87:83:27:ae:e2:3f:46:41:10:32:b7:c2:dc:
21:c8:6e:41:3d:a4:00:b8:a1:a4:8b:21:3d:6f:36:
a6:cb:05:09:a9:24:36:af:ca:2f:81:c9:86:53:31:
9c:af:b3:a2:79:9d:cd:77:6d:56:ad:0b:ab:af:e3:
da:cc:87:7c:e8:d6:6f:09:c7:15:97:f1:2e:26:1f:
2e:36:ee:55:3f:13:4a:14:aa:7d:1a:b0:2e:91:2c:
fd:fd:af:8c:50:7d:c3:d3:f7:f8:b9:be:dd:1f:74:
a6:8c:4c:37:61:48:09:a8:64:ec:b1:0d:6e:1c:d6:
6c:05:08:f5:25:0c:42:68:cf:e7:1d:73:1b:7d:82:
48:57:68:0f:3f:3a:ec:ac:44:df:87:7d:05:d2:3e:
0d:63:8b:45:1d:d4:11:ad:81:34:d3:3e:c4:2a:d6:
cf:d9:b3:e7:2b:11:b9:54:e4:8b:bd:1a:a8:73:9e:
28:24:87:e0:c1:f7:50:86:bc:de:ec:59:13:92:e1:
85:31:2d:34:93:02:c2:81:de:c2:ed:c2:35:4b:d4:
8a:3e:a0:11:90:3c:29:9e:26:ed:31:50:6c:9f:b6:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:0B:37:0F:CB:58:A5:4F:30:EF:F3:39:D2:1B:14:A8:E5:81:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JcILNw_LWKVPMO_zOdIbFKjlgZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:d0:1a:a2:67:48:80:9c:11:b9:cd:35:0e:46:3b:f6:28:65:
fd:0b:f8:c0:fb:5c:3f:f8:bd:f4:5b:05:f3:f0:a3:e6:89:65:
ce:53:61:5e:8c:3d:b9:d8:2b:90:32:ed:21:fb:d3:50:b0:fa:
59:c7:3e:eb:8a:af:34:02:0d:ed:13:1b:01:a8:57:a5:71:47:
bb:06:27:48:6a:4c:96:21:17:ae:2a:c6:b0:1f:70:55:cc:dc:
cc:08:48:52:85:8e:31:60:db:5b:bf:2a:5c:30:27:2f:cc:f0:
8d:06:84:92:2a:2a:68:04:84:b6:f3:98:87:4f:d9:b4:09:7a:
9d:c7:c8:cd:ae:98:37:72:f5:f7:d0:c5:43:16:93:90:73:d7:
d6:5b:1d:94:d8:79:d1:b9:c8:39:b3:07:98:45:a7:be:63:e5:
8e:65:64:70:17:12:35:f5:79:6e:d1:c3:95:16:b3:d2:21:d3:
30:75:b8:05:30:7a:59:36:ba:0d:31:fd:3f:f5:cf:94:bb:47:
ee:4b:bb:47:b7:90:19:91:02:22:99:1a:0b:20:3e:18:27:89:
59:6b:15:af:c4:60:1e:9d:05:07:d8:f7:54:00:12:3a:56:c7:
88:92:1f:4a:4a:c6:d9:53:d2:f4:9c:d3:97:65:3d:a0:1e:54:
8f:f1:9c:07
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYx
MzUyNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI1QzIwQjM3MEZDQjU4
QTU0RjMwRUZGMzM5RDIxQjE0QThFNTgxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyoE6CqmvlmvOTeumiXRUABSZIax3rQ/zC1DSya/jYh4MnruI/
RkEQMrfC3CHIbkE9pAC4oaSLIT1vNqbLBQmpJDavyi+ByYZTMZyvs6J5nc13bVat
C6uv49rMh3zo1m8JxxWX8S4mHy427lU/E0oUqn0asC6RLP39r4xQfcPT9/i5vt0f
dKaMTDdhSAmoZOyxDW4c1mwFCPUlDEJoz+cdcxt9gkhXaA8/OuysRN+HfQXSPg1j
i0Ud1BGtgTTTPsQq1s/Zs+crEblU5Iu9Gqhznigkh+DB91CGvN7sWROS4YUxLTST
AsKB3sLtwjVL1Io+oBGQPCmeJu0xUGyftrIpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJcILNw/LWKVPMO/zOdIbFKjlgZUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0pjSUxOd19MV0tWUE1P
X3pPZEliRktqbGdaVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAuNAaomdIgJwRuc01DkY79ihl/Qv4wPtc
P/i99FsF8/Cj5ollzlNhXow9udgrkDLtIfvTULD6Wcc+64qvNAIN7RMbAahXpXFH
uwYnSGpMliEXrirGsB9wVczczAhIUoWOMWDbW78qXDAnL8zwjQaEkioqaASEtvOY
h0/ZtAl6ncfIza6YN3L199DFQxaTkHPX1lsdlNh50bnIObMHmEWnvmPljmVkcBcS
NfV5btHDlRaz0iHTMHW4BTB6WTa6DTH9P/XPlLtH7ku7R7eQGZECIpkaCyA+GCeJ
WWsVr8RgHp0FB9j3VAASOlbHiJIfSkrG2VPS9JzTl2U9oB5Uj/GcBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:31 2024 by rpki-client on console-ams.rpki-client.org