Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S_Nfrj_dAU1extIXG37ahX41YqE.roa
File: S_Nfrj_dAU1extIXG37ahX41YqE.roa (raw, json)
Hash identifier: PuuknwmLd76oRQ1kX4efgqttI5DZs+lSZlqKum7NFno=
Subject key identifier: 4B:F3:5F:AE:3F:DD:01:4D:5E:C6:D2:17:1B:7E:DA:85:7E:35:62:A1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D52
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S_Nfrj_dAU1extIXG37ahX41YqE.roa
Signing time: Wed 10 Apr 2024 08:22:40 +0000
ROA not before: Wed 10 Apr 2024 08:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15698 (0x3d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 08:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4BF35FAE3FDD014D5EC6D2171B7EDA857E3562A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:ab:43:ae:97:30:1f:fc:c9:29:66:0c:40:
b6:de:a4:a4:1e:ec:0f:00:44:73:62:bb:13:d9:7c:
10:55:18:f9:ae:1f:0b:cf:3d:c1:88:1d:3d:f0:ba:
62:fd:07:51:6c:10:61:3c:32:79:71:41:58:1b:1a:
91:ff:9e:32:20:93:64:e3:44:f1:69:3c:c8:04:6a:
78:93:97:3b:8d:28:aa:8d:08:f8:5c:49:bb:b1:1d:
3c:8d:4c:b1:d9:be:5e:bd:a3:73:f3:d8:92:55:79:
ce:08:94:2f:f7:b5:38:3c:c8:4a:75:39:da:01:81:
0d:e0:b0:ab:f2:73:60:8d:da:23:94:0d:72:46:5f:
4d:70:f4:ba:45:f0:9a:d1:09:e2:05:b2:da:3a:5c:
b4:49:e7:a7:c6:1f:32:b4:52:0a:b6:a6:d4:42:5a:
de:f3:5e:8a:c0:28:7f:75:be:c7:ee:a0:63:fa:8b:
93:3c:5f:53:cf:61:02:35:8c:5a:6a:0f:d7:07:25:
50:54:42:f3:7b:4a:a9:aa:a9:53:59:a6:75:97:78:
92:4c:3d:f7:f0:97:bc:77:4d:a0:4e:2d:d2:55:6a:
a2:e2:7b:d1:66:c7:a7:1f:d7:b4:c4:e1:5c:64:e7:
48:c2:22:10:ba:39:53:bd:96:2c:f6:ed:25:39:fb:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:5F:AE:3F:DD:01:4D:5E:C6:D2:17:1B:7E:DA:85:7E:35:62:A1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S_Nfrj_dAU1extIXG37ahX41YqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:3d:4e:08:ab:98:eb:63:e9:cf:eb:da:9a:c8:62:15:d5:a6:
99:35:22:a9:c8:8f:53:56:72:aa:2f:37:fd:7d:7f:93:fb:df:
fe:05:b5:b2:e6:21:93:56:9d:8b:93:2a:36:02:39:eb:4c:28:
12:24:80:34:3d:e8:c6:4a:d1:6e:66:f4:4d:21:76:17:34:da:
cb:c5:a0:a3:75:7e:f8:a7:28:e9:58:1f:72:59:28:eb:60:c8:
33:a6:d4:52:83:d5:60:1c:5c:9b:78:9e:d4:e3:f4:1b:b6:bd:
9a:bd:af:10:1f:66:52:34:8f:b8:d9:9b:f6:ec:8a:dd:d3:0a:
b3:aa:38:6e:4a:ad:6f:a2:37:84:99:c5:22:f0:09:65:70:61:
bf:7d:d4:b2:45:7b:df:68:da:a7:86:e3:e4:f2:d1:05:90:cc:
29:93:10:fb:81:88:b7:c1:3d:52:40:11:73:4b:33:5c:cf:38:
c0:6b:d5:2a:df:d2:0e:83:eb:94:7a:45:21:bf:1f:2d:84:ae:
c4:ea:ea:26:42:1f:ad:05:76:e8:12:1e:cb:8f:df:67:75:c6:
ad:22:3c:5f:3b:a9:ca:a4:5a:72:ad:2a:f9:b6:7f:73:52:a7:
98:da:a1:5b:2f:a0:f5:04:7e:e9:60:c6:59:26:0e:bc:40:b3:
eb:73:6b:d6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICPVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAw
ODIyNDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRCRjM1RkFFM0ZERDAx
NEQ1RUM2RDIxNzFCN0VEQTg1N0UzNTYyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+EKtDrpcwH/zJKWYMQLbepKQe7A8ARHNiuxPZfBBVGPmuHwvP
PcGIHT3wumL9B1FsEGE8MnlxQVgbGpH/njIgk2TjRPFpPMgEaniTlzuNKKqNCPhc
SbuxHTyNTLHZvl69o3Pz2JJVec4IlC/3tTg8yEp1OdoBgQ3gsKvyc2CN2iOUDXJG
X01w9LpF8JrRCeIFsto6XLRJ56fGHzK0Ugq2ptRCWt7zXorAKH91vsfuoGP6i5M8
X1PPYQI1jFpqD9cHJVBUQvN7SqmqqVNZpnWXeJJMPffwl7x3TaBOLdJVaqLie9Fm
x6cf17TE4Vxk50jCIhC6OVO9liz27SU5+zRLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUS/Nfrj/dAU1extIXG37ahX41YqEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1NfTmZyal9kQVUxZXh0
SVhHMzdhaFg0MVlxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAOT1OCKuY62Ppz+vamshiFdWmmTUiqciP
U1Zyqi83/X1/k/vf/gW1suYhk1adi5MqNgI560woEiSAND3oxkrRbmb0TSF2FzTa
y8Wgo3V++Kco6Vgfclko62DIM6bUUoPVYBxcm3ie1OP0G7a9mr2vEB9mUjSPuNmb
9uyK3dMKs6o4bkqtb6I3hJnFIvAJZXBhv33UskV732jap4bj5PLRBZDMKZMQ+4GI
t8E9UkARc0szXM84wGvVKt/SDoPrlHpFIb8fLYSuxOrqJkIfrQV26BIey4/fZ3XG
rSI8XzupyqRacq0q+bZ/c1KnmNqhWy+g9QR+6WDGWSYOvECz63Nr1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:43 2024 by rpki-client on console-ams.rpki-client.org