Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LcY6X9cY19c8CCzFnRARGvjU2gM.roa
File: LcY6X9cY19c8CCzFnRARGvjU2gM.roa (raw, json)
Hash identifier: C1/bV2LHmE/A8uiJawKLW+hoWTRTPIeGgaOq63MfQNw=
Subject key identifier: 2D:C6:3A:5F:D7:18:D7:D7:3C:08:2C:C5:9D:10:11:1A:F8:D4:DA:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 580A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LcY6X9cY19c8CCzFnRARGvjU2gM.roa
Signing time: Wed 15 May 2024 23:24:14 +0000
ROA not before: Wed 15 May 2024 23:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22538 (0x580a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 23:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2DC63A5FD718D7D73C082CC59D10111AF8D4DA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:67:73:b9:6f:6f:57:78:30:1b:14:87:08:
fc:cf:31:9c:67:b7:a4:a1:4f:51:56:e2:e8:ca:d1:
79:3f:37:6a:8a:58:cf:15:51:d7:f1:21:2f:7e:a2:
57:38:57:20:1e:76:3f:6a:e9:51:56:38:f4:cb:e4:
5d:59:91:4f:09:9e:97:6a:af:9f:ed:a9:4c:2c:21:
6e:75:60:db:48:3f:b8:d4:6d:22:85:42:bc:75:4b:
b7:26:53:c6:0f:b2:c8:ef:8c:fa:b8:1d:e4:85:e2:
be:1b:9d:0e:0f:16:45:22:0b:95:3f:55:99:e6:c4:
79:de:27:cc:59:62:7e:73:cb:16:ff:dc:b6:d2:b5:
6d:54:59:39:1b:64:28:68:a8:28:7e:46:85:5d:b1:
69:a0:55:71:47:06:bb:38:e1:24:d5:08:fb:72:04:
5e:e7:90:d4:47:27:79:04:cd:b0:8f:5c:c2:1b:0a:
21:0a:7e:7b:65:ab:e3:d4:23:cf:d2:97:93:77:50:
55:63:94:76:17:a9:fd:8d:a3:c5:c4:0b:11:29:f7:
38:33:70:e9:8c:38:d6:e9:2b:39:16:4c:1d:34:f8:
88:10:fa:29:73:9e:d1:5b:59:70:2f:13:f0:05:05:
4c:f8:e5:15:09:d5:51:b3:da:aa:f7:7e:29:d5:32:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:3A:5F:D7:18:D7:D7:3C:08:2C:C5:9D:10:11:1A:F8:D4:DA:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LcY6X9cY19c8CCzFnRARGvjU2gM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:6b:67:7c:28:33:c3:01:4b:7c:1f:05:93:fe:1a:14:e9:e8:
c6:bc:f1:ea:ce:e5:8f:9b:fd:4e:63:65:98:55:e2:57:c4:31:
7d:ba:64:61:55:0d:33:95:60:69:f8:21:9d:6a:f4:1a:48:77:
de:db:1e:a8:ce:18:f5:8c:dc:32:11:e5:3f:4a:94:72:0b:06:
5f:78:00:46:91:01:07:88:f9:1f:68:4c:87:60:8e:dd:77:f3:
45:ef:83:67:72:3a:cd:dc:a2:37:16:18:f7:03:1f:cc:a9:83:
5e:3b:93:ea:c8:e8:c9:42:a7:63:e5:df:ea:ca:59:7a:da:70:
2a:a2:64:04:72:f7:c6:07:d5:0f:9f:24:9f:bc:64:3e:e5:9c:
a7:37:bd:ef:e6:59:ba:bc:61:c6:72:15:2f:78:38:ee:66:c5:
62:c7:68:7f:9d:7d:7e:74:d3:2f:a5:b9:5d:34:da:20:2f:6c:
9b:48:a1:da:7c:f2:7c:38:6c:45:02:ed:e8:00:1d:a1:40:95:
f1:e0:bb:3b:9b:48:1d:01:e6:4a:70:36:25:2c:16:2e:05:f3:
53:79:58:5a:98:7a:7f:97:40:7a:0e:9a:aa:f7:19:bc:ce:90:
e5:3b:d6:f1:1c:4f:6e:fa:e3:8a:78:3c:ac:6c:bc:42:38:f6:
99:eb:44:14
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICWAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUy
MzI0MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJEQzYzQTVGRDcxOEQ3
RDczQzA4MkNDNTlEMTAxMTFBRjhENERBMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBmGdzuW9vV3gwGxSHCPzPMZxnt6ShT1FW4ujK0Xk/N2qKWM8V
UdfxIS9+olc4VyAedj9q6VFWOPTL5F1ZkU8Jnpdqr5/tqUwsIW51YNtIP7jUbSKF
Qrx1S7cmU8YPssjvjPq4HeSF4r4bnQ4PFkUiC5U/VZnmxHneJ8xZYn5zyxb/3LbS
tW1UWTkbZChoqCh+RoVdsWmgVXFHBrs44STVCPtyBF7nkNRHJ3kEzbCPXMIbCiEK
fntlq+PUI8/Sl5N3UFVjlHYXqf2No8XECxEp9zgzcOmMONbpKzkWTB00+IgQ+ilz
ntFbWXAvE/AFBUz45RUJ1VGz2qr3finVMnIRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQULcY6X9cY19c8CCzFnRARGvjU2gMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0xjWTZYOWNZMTljOEND
ekZuUkFSR3ZqVTJnTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAgGtnfCgzwwFLfB8Fk/4aFOnoxrzx6s7l
j5v9TmNlmFXiV8QxfbpkYVUNM5VgafghnWr0Gkh33tseqM4Y9YzcMhHlP0qUcgsG
X3gARpEBB4j5H2hMh2CO3XfzRe+DZ3I6zdyiNxYY9wMfzKmDXjuT6sjoyUKnY+Xf
6spZetpwKqJkBHL3xgfVD58kn7xkPuWcpze97+ZZurxhxnIVL3g47mbFYsdof519
fnTTL6W5XTTaIC9sm0ih2nzyfDhsRQLt6AAdoUCV8eC7O5tIHQHmSnA2JSwWLgXz
U3lYWph6f5dAeg6aqvcZvM6Q5TvW8RxPbvrjing8rGy8Qjj2metEFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:33 2024 by rpki-client on console-ams.rpki-client.org