Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Q6ZedxjOdit5dp6NUE7tY6K4d7M.roa
File: Q6ZedxjOdit5dp6NUE7tY6K4d7M.roa (raw, json)
Hash identifier: J18z3k3np6LSo406e7czBQvlY5i+kW7z0Z04dVW/F74=
Subject key identifier: 43:A6:5E:77:18:CE:76:2B:79:76:9E:8D:50:4E:ED:63:A2:B8:77:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C9A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q6ZedxjOdit5dp6NUE7tY6K4d7M.roa
Signing time: Tue 09 Apr 2024 09:23:06 +0000
ROA not before: Tue 09 Apr 2024 09:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15514 (0x3c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 09:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=43A65E7718CE762B79769E8D504EED63A2B877B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:59:6b:65:d1:20:4d:24:71:47:69:97:b0:
6b:0c:6a:6e:5c:eb:87:85:28:3c:be:dd:b9:31:82:
6f:c5:9c:0f:8c:70:dd:04:61:2c:4c:de:75:77:1c:
60:2b:d6:10:e0:8f:57:35:37:de:b4:c9:50:da:bf:
5b:6b:f4:f0:ff:21:5b:58:fb:6e:52:f2:20:9f:cc:
ae:94:ca:a4:5f:b8:0b:4a:48:f6:08:c4:0a:e6:c6:
d4:37:a4:60:96:78:0c:70:09:c9:b4:72:2d:95:14:
4a:6e:71:b9:4a:c3:91:ba:d1:d6:b5:36:74:4c:2a:
35:b5:6e:3f:9a:15:27:52:4d:6c:5d:c3:69:f2:cb:
87:81:f5:a1:f3:f8:d9:9a:4f:53:de:03:62:8d:a3:
88:91:23:d6:a9:9f:a1:5f:e4:3e:84:f9:b8:13:53:
20:f1:c4:91:c8:4d:1a:1c:78:da:0c:79:56:e5:2f:
bf:09:83:d3:39:53:3d:d0:93:43:f3:63:6c:7d:01:
ee:57:42:ca:29:4c:08:db:53:08:32:9a:e7:f2:89:
a2:a5:82:4c:4a:af:ea:57:e2:59:92:a3:d1:af:2b:
14:a3:72:39:d5:1f:27:68:3a:e7:a0:9a:79:d1:66:
e3:9c:80:0c:7e:ae:49:03:4e:46:36:c6:84:fe:f8:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A6:5E:77:18:CE:76:2B:79:76:9E:8D:50:4E:ED:63:A2:B8:77:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q6ZedxjOdit5dp6NUE7tY6K4d7M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:93:84:ac:4a:c3:55:09:9e:02:16:a4:92:3f:ef:e4:e7:b7:
ce:a1:79:6d:0d:fc:b4:82:b9:02:f2:d4:dc:5f:d3:e3:bb:d1:
0c:bc:58:0b:b8:5c:27:64:0a:3d:dc:24:49:a3:d2:af:2f:2e:
80:9b:96:53:e8:29:cd:cd:c8:51:5c:25:a9:cd:22:7a:f4:7b:
fe:11:34:e5:1a:6b:bf:da:a0:09:16:9e:ed:65:2c:18:78:ae:
a3:60:72:5d:23:ad:eb:94:4e:9b:b2:51:d2:72:5d:8a:68:52:
ed:c1:7b:be:4d:ac:a2:89:7e:c0:74:35:ed:27:de:15:c4:c5:
87:cd:7c:bf:ef:75:a9:2a:b1:63:18:3a:d8:31:03:79:25:49:
a9:d7:97:4c:35:9a:31:c8:93:d4:fc:91:45:da:c8:78:75:ca:
1b:66:e4:a7:91:7f:bd:d7:96:c3:2a:e7:51:3a:04:70:48:0d:
fa:c1:ed:50:94:84:7a:ab:97:ef:a1:29:5f:8b:29:2f:7d:e2:
b8:2a:c6:8e:7f:23:77:ad:f2:e7:39:e8:76:e9:65:1f:89:a3:
d4:a0:c8:ec:5f:53:0e:35:68:f4:d9:88:8b:94:7c:f3:50:54:
9b:24:98:4b:03:87:aa:ed:e9:ad:12:8e:da:d8:1d:15:36:1b:
84:17:6a:8c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICPJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkw
OTIzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQzQTY1RTc3MThDRTc2
MkI3OTc2OUU4RDUwNEVFRDYzQTJCODc3QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClKllrZdEgTSRxR2mXsGsMam5c64eFKDy+3bkxgm/FnA+McN0E
YSxM3nV3HGAr1hDgj1c1N960yVDav1tr9PD/IVtY+25S8iCfzK6UyqRfuAtKSPYI
xArmxtQ3pGCWeAxwCcm0ci2VFEpucblKw5G60da1NnRMKjW1bj+aFSdSTWxdw2ny
y4eB9aHz+NmaT1PeA2KNo4iRI9apn6Ff5D6E+bgTUyDxxJHITRoceNoMeVblL78J
g9M5Uz3Qk0PzY2x9Ae5XQsopTAjbUwgymufyiaKlgkxKr+pX4lmSo9GvKxSjcjnV
HydoOuegmnnRZuOcgAx+rkkDTkY2xoT++GDNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQ6ZedxjOdit5dp6NUE7tY6K4d7MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1E2WmVkeGpPZGl0NWRw
Nk5VRTd0WTZLNGQ3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAEpOErErDVQmeAhakkj/v5Oe3zqF5bQ38
tIK5AvLU3F/T47vRDLxYC7hcJ2QKPdwkSaPSry8ugJuWU+gpzc3IUVwlqc0ievR7
/hE05Rprv9qgCRae7WUsGHiuo2ByXSOt65ROm7JR0nJdimhS7cF7vk2sool+wHQ1
7SfeFcTFh818v+91qSqxYxg62DEDeSVJqdeXTDWaMciT1PyRRdrIeHXKG2bkp5F/
vdeWwyrnUToEcEgN+sHtUJSEequX76EpX4spL33iuCrGjn8jd63y5znodullH4mj
1KDI7F9TDjVo9NmIi5R881BUmySYSwOHqu3prRKO2tgdFTYbhBdqjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:40 2024 by rpki-client on console-ams.rpki-client.org