Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QC-0uOZO3cH7e9NJGin4FXKH2a4.roa
File: QC-0uOZO3cH7e9NJGin4FXKH2a4.roa (raw, json)
Hash identifier: EgNOGges9mDuBp7J57q/r+CNvh+FtNH1EZT67+PSkRg=
Subject key identifier: 40:2F:B4:B8:E6:4E:DD:C1:FB:7B:D3:49:1A:29:F8:15:72:87:D9:AE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4DFE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QC-0uOZO3cH7e9NJGin4FXKH2a4.roa
Signing time: Thu 02 May 2024 13:53:42 +0000
ROA not before: Thu 02 May 2024 13:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19966 (0x4dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 13:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=402FB4B8E64EDDC1FB7BD3491A29F8157287D9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:c4:5c:60:5b:2a:20:d7:7a:8c:60:dd:f8:
b8:41:d6:18:78:51:b2:f6:07:c3:8c:ba:c0:fd:6c:
9b:c1:da:d9:c7:26:a2:9e:a5:9b:52:b4:cc:fb:2d:
da:df:4a:c7:81:a1:5a:b9:10:e6:57:56:fc:a6:2e:
04:cc:4e:43:c6:4e:18:c1:75:56:6f:98:46:89:3e:
69:be:ad:41:c5:73:d3:90:28:e9:92:45:9c:3e:ba:
bf:a7:b7:db:82:72:fc:6c:7d:ed:f7:a5:80:d8:8c:
a2:12:7a:1e:72:32:60:cc:2a:96:48:b1:21:84:4d:
e3:8c:c1:61:99:49:ff:d7:87:6d:bf:47:79:5d:ce:
bd:56:19:ad:15:fa:17:83:8f:d2:b6:ba:5e:e0:e7:
18:29:56:81:bb:c2:9c:63:61:0e:03:a9:cd:6c:5a:
63:6c:1b:92:cb:cd:1b:3d:48:8f:bd:8d:41:fc:49:
00:b7:98:25:80:40:73:c4:12:72:5c:3c:26:85:94:
f4:89:25:b7:ca:c7:8e:dc:3a:80:46:f0:aa:4f:00:
1f:44:29:c0:c0:ff:f0:82:05:55:91:66:16:ff:bf:
8e:cc:3c:b0:c4:3c:19:76:9e:76:4a:ba:87:10:4a:
b5:5e:ec:1a:c8:a9:99:57:75:1c:91:a9:06:a7:df:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2F:B4:B8:E6:4E:DD:C1:FB:7B:D3:49:1A:29:F8:15:72:87:D9:AE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QC-0uOZO3cH7e9NJGin4FXKH2a4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:7e:a6:00:67:5a:ce:57:54:73:ee:ac:58:10:64:3f:17:9e:
66:66:e2:58:2c:8b:b8:e3:11:fe:05:ec:e0:1e:fa:c9:f0:91:
76:20:93:35:a9:43:9c:65:68:81:96:9b:f4:3a:29:b9:8d:db:
e2:46:7f:0f:24:71:a0:37:eb:c6:cc:c3:fa:db:a0:ca:3e:f6:
7d:29:68:7c:25:21:fc:61:28:44:21:21:01:e2:7b:50:f3:38:
81:2d:64:f0:0e:7a:df:18:be:31:d0:3a:ff:37:10:f8:55:c7:
6a:a8:14:85:b8:2e:c6:8f:7a:a7:f9:47:3c:0b:cc:76:2b:57:
e6:ee:40:a9:07:8f:b7:20:11:61:2e:ce:4e:5b:c5:6c:0f:8d:
9b:fa:f8:3d:45:f2:a7:13:a3:9d:b0:b1:7e:69:bc:fe:34:f5:
87:fe:cf:08:ac:3d:58:b9:5e:c4:13:aa:b2:3a:93:c7:bd:fe:
2b:62:2a:5d:fa:20:58:34:1d:7f:f3:34:6c:b4:a7:db:f6:57:
99:41:f4:91:fd:29:cb:48:a1:ee:ee:fd:ee:15:ec:3e:11:4d:
1d:2c:94:98:2a:94:17:28:b5:94:01:88:94:67:00:30:de:74:
7b:3d:e2:85:9c:8d:b6:c3:f4:d4:64:17:de:af:29:9a:dc:18:
72:8d:a6:5a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIx
MzUzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQwMkZCNEI4RTY0RURE
QzFGQjdCRDM0OTFBMjlGODE1NzI4N0Q5QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrXcRcYFsqINd6jGDd+LhB1hh4UbL2B8OMusD9bJvB2tnHJqKe
pZtStMz7LdrfSseBoVq5EOZXVvymLgTMTkPGThjBdVZvmEaJPmm+rUHFc9OQKOmS
RZw+ur+nt9uCcvxsfe33pYDYjKISeh5yMmDMKpZIsSGETeOMwWGZSf/Xh22/R3ld
zr1WGa0V+heDj9K2ul7g5xgpVoG7wpxjYQ4Dqc1sWmNsG5LLzRs9SI+9jUH8SQC3
mCWAQHPEEnJcPCaFlPSJJbfKx47cOoBG8KpPAB9EKcDA//CCBVWRZhb/v47MPLDE
PBl2nnZKuocQSrVe7BrIqZlXdRyRqQan3+9DAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQC+0uOZO3cH7e9NJGin4FXKH2a4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FDLTB1T1pPM2NIN2U5
TkpHaW40RlhLSDJhNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAWH6mAGdazldUc+6sWBBkPxeeZmbiWCyL
uOMR/gXs4B76yfCRdiCTNalDnGVogZab9DopuY3b4kZ/DyRxoDfrxszD+tugyj72
fSlofCUh/GEoRCEhAeJ7UPM4gS1k8A563xi+MdA6/zcQ+FXHaqgUhbguxo96p/lH
PAvMditX5u5AqQePtyARYS7OTlvFbA+Nm/r4PUXypxOjnbCxfmm8/jT1h/7PCKw9
WLlexBOqsjqTx73+K2IqXfogWDQdf/M0bLSn2/ZXmUH0kf0py0ih7u797hXsPhFN
HSyUmCqUFyi1lAGIlGcAMN50ez3ihZyNtsP01GQX3q8pmtwYco2mWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org