Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
File: Jyk8tW8AryRyC1pnsE9g1sN4agY.roa (raw, json)
Hash identifier: EMub7YnQ5CuYPSzcarG9tjD+kYW7UMHxIcvHb2dIXFk=
Subject key identifier: 27:29:3C:B5:6F:00:AF:24:72:0B:5A:67:B0:4F:60:D6:C3:78:6A:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 573E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
Signing time: Tue 14 May 2024 21:54:11 +0000
ROA not before: Tue 14 May 2024 21:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22334 (0x573e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 21:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27293CB56F00AF24720B5A67B04F60D6C3786A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:f1:f2:10:67:6b:02:58:28:07:e9:5e:61:
d7:c6:18:8f:5c:2a:73:d2:1a:b4:c7:e9:33:1b:50:
31:aa:46:e6:e1:fc:e2:50:f8:b7:1e:4e:8b:82:b6:
93:63:43:1f:1a:0e:6b:99:f1:29:ee:91:c0:d5:e4:
ad:2c:a2:97:59:f7:31:c1:0b:2b:e5:8e:fa:ba:92:
55:54:a0:1e:f0:be:0c:21:de:17:1b:c5:8c:c3:48:
52:68:5b:74:88:6e:ac:f2:fb:20:4d:c5:81:b0:43:
70:75:86:45:f3:58:f4:64:d6:d8:d6:74:fc:25:b7:
ed:15:6e:c6:27:ab:90:d2:c7:a8:42:a2:fc:e3:46:
ba:a9:cf:5a:1f:0b:90:81:7c:5f:88:cd:ae:a7:1f:
0d:c4:cd:8f:9b:90:92:8a:74:ce:bc:47:48:b6:08:
63:7c:e1:f6:68:7a:42:de:22:04:14:a0:03:f0:df:
ff:71:23:da:3e:4d:be:db:32:97:b0:7b:4e:72:2b:
66:ea:10:bb:ce:f6:87:3a:df:b0:c0:d3:2f:ac:81:
45:ff:3f:d5:6b:06:2e:d1:6a:e5:f7:c5:a1:c3:73:
67:ad:fd:ca:30:b6:95:bb:f9:3d:03:e2:fb:28:f2:
a4:cd:14:f0:c8:83:b4:f5:95:31:06:6a:b9:6a:59:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:3C:B5:6F:00:AF:24:72:0B:5A:67:B0:4F:60:D6:C3:78:6A:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:74:7c:43:de:1c:da:ef:95:89:46:39:f7:9b:b1:06:93:1c:
d8:2f:9f:10:18:da:3f:23:eb:20:f1:d6:40:fe:ba:63:13:04:
3a:09:a6:0e:93:e3:b3:7e:e6:75:bb:3d:4a:47:ee:60:40:f8:
60:18:e6:21:0d:96:d9:b2:f5:06:0f:5d:52:09:53:e5:18:17:
1b:1b:a9:cf:a3:ca:fe:e6:63:2b:56:f4:cc:62:7f:44:4e:63:
13:1a:ab:8a:3b:43:53:c9:aa:67:d4:d2:88:ff:bd:a7:6c:94:
8e:cf:c5:3a:28:e1:6b:a9:58:04:98:7c:1c:5c:3d:38:fb:b3:
ff:08:9f:f5:f0:38:09:b2:2c:f1:81:e9:f3:69:4d:06:cd:e4:
43:40:a5:f2:9f:1e:77:51:13:af:d1:9d:6f:77:02:0d:46:5b:
6d:1a:03:e5:6b:92:cd:0e:31:bf:9e:cc:e9:32:bb:78:07:4a:
30:24:83:e6:51:cf:28:6d:3d:97:6b:c6:4c:3b:65:99:0e:a9:
b8:83:79:c9:4e:bc:13:d1:06:de:b0:1a:91:3b:9f:c1:4b:2f:
98:9e:aa:4e:97:b4:42:cd:46:ee:33:ff:24:8f:85:f9:88:42:
4b:44:6a:9b:1d:6a:0f:f1:67:f3:8b:20:81:0c:fa:cf:e3:43:
ab:8b:7e:8e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQy
MTU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI3MjkzQ0I1NkYwMEFG
MjQ3MjBCNUE2N0IwNEY2MEQ2QzM3ODZBMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcRPHyEGdrAlgoB+leYdfGGI9cKnPSGrTH6TMbUDGqRubh/OJQ
+LceTouCtpNjQx8aDmuZ8SnukcDV5K0sopdZ9zHBCyvljvq6klVUoB7wvgwh3hcb
xYzDSFJoW3SIbqzy+yBNxYGwQ3B1hkXzWPRk1tjWdPwlt+0VbsYnq5DSx6hCovzj
Rrqpz1ofC5CBfF+Iza6nHw3EzY+bkJKKdM68R0i2CGN84fZoekLeIgQUoAPw3/9x
I9o+Tb7bMpewe05yK2bqELvO9oc637DA0y+sgUX/P9VrBi7RauX3xaHDc2et/cow
tpW7+T0D4vso8qTNFPDIg7T1lTEGarlqWQTxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJyk8tW8AryRyC1pnsE9g1sN4agYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0p5azh0VzhBcnlSeUMx
cG5zRTlnMXNONGFnWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAH3R8Q94c2u+ViUY595uxBpMc2C+fEBja
PyPrIPHWQP66YxMEOgmmDpPjs37mdbs9SkfuYED4YBjmIQ2W2bL1Bg9dUglT5RgX
Gxupz6PK/uZjK1b0zGJ/RE5jExqrijtDU8mqZ9TSiP+9p2yUjs/FOijha6lYBJh8
HFw9OPuz/wif9fA4CbIs8YHp82lNBs3kQ0Cl8p8ed1ETr9Gdb3cCDUZbbRoD5WuS
zQ4xv57M6TK7eAdKMCSD5lHPKG09l2vGTDtlmQ6puIN5yU68E9EG3rAakTufwUsv
mJ6qTpe0Qs1G7jP/JI+F+YhCS0Rqmx1qD/Fn84sggQz6z+NDq4t+jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org