Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UuSul1sPzQSrLogEMbcvvkeCR2o.roa
File: UuSul1sPzQSrLogEMbcvvkeCR2o.roa (raw, json)
Hash identifier: 6CONMQ3urwXN8CGBx++W5enDcqM5fu1F4Or/iu4x5FE=
Subject key identifier: 52:E4:AE:97:5B:0F:CD:04:AB:2E:88:04:31:B7:2F:BE:47:82:47:6A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 350A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UuSul1sPzQSrLogEMbcvvkeCR2o.roa
Signing time: Sat 30 Mar 2024 07:22:09 +0000
ROA not before: Sat 30 Mar 2024 07:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13578 (0x350a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 07:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52E4AE975B0FCD04AB2E880431B72FBE4782476A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:f3:01:2a:af:e2:f2:c4:e5:9a:cc:e2:5d:
6b:ac:cb:ae:c1:50:8e:0d:9b:9a:f0:97:39:5c:af:
69:e0:89:2d:cf:cd:9a:77:4e:f4:bb:fd:13:b9:64:
67:cf:92:01:8f:df:c3:39:c7:cb:59:6c:c1:d2:dd:
c7:e3:b4:5c:37:8e:67:57:71:c9:6d:3e:a4:b2:e4:
3b:f6:e8:a3:32:1a:9d:01:2a:a0:8a:4d:dd:d1:4e:
ce:77:7d:22:97:af:ab:56:b2:7c:e0:de:06:f1:ff:
12:2a:66:e4:11:25:22:c0:25:c3:1f:b3:23:85:01:
71:c0:b0:5f:84:84:dd:83:34:a5:15:af:78:b6:73:
21:99:a2:05:eb:f5:87:35:66:a9:cf:f1:76:16:ae:
8a:1d:7a:b9:e9:7d:c6:96:e8:f1:00:8c:e6:00:0a:
b3:7c:31:11:64:a8:df:2e:1d:65:fa:15:6c:89:67:
ad:83:61:2d:2c:e6:24:15:61:9e:ce:69:61:6a:06:
f0:58:67:9c:2d:ab:69:82:15:f9:ab:fd:fd:dc:19:
32:d7:7d:3c:1d:24:ee:f3:9c:63:e8:92:0f:43:86:
af:3c:18:66:5d:63:b6:59:0a:72:59:29:36:38:72:
20:a4:23:aa:db:aa:6f:92:af:41:8b:7f:4d:b5:00:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:AE:97:5B:0F:CD:04:AB:2E:88:04:31:B7:2F:BE:47:82:47:6A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UuSul1sPzQSrLogEMbcvvkeCR2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:08:98:fa:c6:ca:8f:40:ed:69:9e:e7:6e:42:dd:e0:c9:77:
0f:c6:fd:71:a8:89:59:ea:cf:e0:b0:ff:28:84:19:68:37:9b:
56:fe:75:e8:cc:c9:ed:58:92:d2:ca:0c:94:60:f4:70:f0:b6:
f0:ac:21:05:1f:73:47:b1:bf:b7:10:75:44:4e:cd:9d:10:04:
2e:ae:61:b8:b8:cc:45:44:ff:48:7d:ea:20:43:34:7c:59:f3:
1c:75:85:db:6d:47:45:b6:ef:75:00:fc:6c:78:62:25:eb:df:
2c:ba:a1:05:d4:79:f5:c3:a8:cf:f1:2e:03:2b:9d:64:c4:c7:
63:8e:77:d4:9c:13:73:11:57:8e:4a:88:ae:e4:a0:a6:e0:10:
1f:97:c3:b7:84:fc:7b:c5:7d:0d:b8:8d:35:3e:6b:ad:c8:77:
5e:87:f5:57:ff:24:27:f3:74:32:b0:7a:ab:77:4e:f5:0f:c5:
53:cf:70:87:57:7b:b4:11:5f:3f:3a:d7:cc:4d:28:fc:93:2a:
15:73:4b:c8:bb:b5:b1:dd:68:43:f1:29:d8:26:5b:8b:ee:eb:
be:f6:47:6e:22:65:53:54:00:39:d2:63:e2:2b:bc:25:90:e9:
ae:24:b7:7e:4a:90:8c:05:73:5a:ca:08:8e:d2:30:a0:02:2c:
cb:89:fc:e3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
NzIyMDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUyRTRBRTk3NUIwRkNE
MDRBQjJFODgwNDMxQjcyRkJFNDc4MjQ3NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXSfMBKq/i8sTlmsziXWusy67BUI4Nm5rwlzlcr2ngiS3PzZp3
TvS7/RO5ZGfPkgGP38M5x8tZbMHS3cfjtFw3jmdXccltPqSy5Dv26KMyGp0BKqCK
Td3RTs53fSKXr6tWsnzg3gbx/xIqZuQRJSLAJcMfsyOFAXHAsF+EhN2DNKUVr3i2
cyGZogXr9Yc1ZqnP8XYWroodernpfcaW6PEAjOYACrN8MRFkqN8uHWX6FWyJZ62D
YS0s5iQVYZ7OaWFqBvBYZ5wtq2mCFfmr/f3cGTLXfTwdJO7znGPokg9Dhq88GGZd
Y7ZZCnJZKTY4ciCkI6rbqm+Sr0GLf021AK/LAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUUuSul1sPzQSrLogEMbcvvkeCR2owHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1V1U3VsMXNQelFTckxv
Z0VNYmN2dmtlQ1Iyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAswiY+sbKj0DtaZ7nbkLd4Ml3D8b9caiJ
WerP4LD/KIQZaDebVv516MzJ7ViS0soMlGD0cPC28KwhBR9zR7G/txB1RE7NnRAE
Lq5huLjMRUT/SH3qIEM0fFnzHHWF221HRbbvdQD8bHhiJevfLLqhBdR59cOoz/Eu
AyudZMTHY4531JwTcxFXjkqIruSgpuAQH5fDt4T8e8V9DbiNNT5rrch3Xof1V/8k
J/N0MrB6q3dO9Q/FU89wh1d7tBFfPzrXzE0o/JMqFXNLyLu1sd1oQ/Ep2CZbi+7r
vvZHbiJlU1QAOdJj4iu8JZDpriS3fkqQjAVzWsoIjtIwoAIsy4n84w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:18 2025 by rpki-client