Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Vq2q_5juuMONAlGG_KTQnkH_X3o.roa
File: Vq2q_5juuMONAlGG_KTQnkH_X3o.roa (raw, json)
Hash identifier: kSB1wSXy+RhDYz/XqsdZj8l6ghJPa5rgsdeDsmVqiG0=
Subject key identifier: 56:AD:AA:FF:98:EE:B8:C3:8D:02:51:86:FC:A4:D0:9E:41:FF:5F:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37EA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vq2q_5juuMONAlGG_KTQnkH_X3o.roa
Signing time: Wed 03 Apr 2024 03:22:41 +0000
ROA not before: Wed 03 Apr 2024 03:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14314 (0x37ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 03:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=56ADAAFF98EEB8C38D025186FCA4D09E41FF5F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:69:3a:8c:33:e4:3a:7a:01:d8:f6:70:ce:
59:31:73:27:c7:27:7a:a4:e0:f7:06:be:86:48:ea:
d7:49:f0:f0:6d:14:3d:99:4a:87:e0:40:15:7c:03:
e2:86:63:3a:9f:e3:66:53:22:10:fe:b4:6c:08:71:
00:41:12:a1:74:9c:04:47:7d:93:f0:e8:8c:b7:55:
65:77:9a:8c:99:05:78:34:13:e8:c5:3f:0b:58:14:
f8:3a:f0:0f:50:91:ac:c5:ab:93:c8:bb:e3:b6:51:
0d:be:7c:75:88:ef:80:0f:1c:6f:7c:f9:91:4e:72:
cb:2e:b3:63:c0:f7:ce:b9:ca:30:16:98:c5:4e:48:
e6:cd:50:b8:72:65:7e:a3:c5:a1:eb:af:76:a0:ec:
ab:2b:25:28:ca:a2:f5:b3:a3:7f:0e:fb:eb:d1:cb:
d0:c8:0f:d4:b9:db:df:f3:f4:a7:b2:d1:4b:5d:7e:
06:e1:0f:65:2a:98:01:f3:9a:56:fa:91:0c:1e:0b:
a4:5e:4c:e3:e1:a8:72:9a:fe:9a:82:7b:a9:9d:35:
be:4b:2f:f5:ee:91:50:92:0b:8e:32:61:98:4f:03:
ee:c4:da:6e:98:84:9d:30:55:99:f8:c7:96:91:24:
c8:e9:22:07:98:b2:97:6d:e1:b4:07:6a:0e:8a:26:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:AA:FF:98:EE:B8:C3:8D:02:51:86:FC:A4:D0:9E:41:FF:5F:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vq2q_5juuMONAlGG_KTQnkH_X3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:1e:05:7c:f3:96:61:be:38:8a:b2:21:2d:01:bb:a7:60:30:
70:86:ae:13:c8:25:74:5a:4b:26:49:32:81:b9:ef:a9:74:c1:
93:82:75:bb:95:11:e8:a1:42:6c:0c:d6:67:93:33:7a:09:18:
1a:c8:d7:2a:cd:9e:10:13:46:ff:84:dc:78:57:ff:b4:03:1e:
c7:75:a1:f5:1c:78:0b:7b:b8:cf:ad:12:dd:34:0d:27:4f:7b:
36:a5:2b:ea:74:eb:f9:31:0e:5f:ac:91:3a:53:f6:da:c9:a8:
c0:f2:43:11:f9:e5:a0:0e:1b:4f:61:33:5b:6a:b3:90:b7:56:
27:4a:3a:cc:25:72:87:37:16:1b:e9:d7:01:15:8f:85:35:af:
60:c0:d2:85:4d:b9:ba:1d:9a:15:e1:4f:82:e3:ca:b9:4a:48:
02:37:58:ce:56:0c:03:7c:39:c0:14:9a:1c:f1:37:67:ec:b6:
14:92:c7:a8:06:1d:e3:e0:ca:bf:c0:73:19:a1:2c:09:79:fc:
ad:c9:73:bc:42:6e:58:6d:54:0b:22:21:aa:a9:e3:b1:28:d0:
0d:8a:e0:90:96:49:24:58:eb:8f:64:f1:fa:2b:4c:16:89:7f:
98:b0:fd:16:65:fc:d5:dd:1e:91:da:dc:50:f2:49:1c:9f:c5:
95:1f:1e:c6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICN+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDMw
MzIyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU2QURBQUZGOThFRUI4
QzM4RDAyNTE4NkZDQTREMDlFNDFGRjVGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+lGk6jDPkOnoB2PZwzlkxcyfHJ3qk4PcGvoZI6tdJ8PBtFD2Z
SofgQBV8A+KGYzqf42ZTIhD+tGwIcQBBEqF0nARHfZPw6Iy3VWV3moyZBXg0E+jF
PwtYFPg68A9QkazFq5PIu+O2UQ2+fHWI74APHG98+ZFOcssus2PA9865yjAWmMVO
SObNULhyZX6jxaHrr3ag7KsrJSjKovWzo38O++vRy9DID9S529/z9Key0Utdfgbh
D2UqmAHzmlb6kQweC6ReTOPhqHKa/pqCe6mdNb5LL/XukVCSC44yYZhPA+7E2m6Y
hJ0wVZn4x5aRJMjpIgeYspdt4bQHag6KJhKhAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUVq2q/5juuMONAlGG/KTQnkH/X3owHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ZxMnFfNWp1dU1PTkFs
R0dfS1RRbmtIX1gzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAsx4FfPOWYb44irIhLQG7p2AwcIauE8gl
dFpLJkkygbnvqXTBk4J1u5UR6KFCbAzWZ5MzegkYGsjXKs2eEBNG/4TceFf/tAMe
x3Wh9Rx4C3u4z60S3TQNJ097NqUr6nTr+TEOX6yROlP22smowPJDEfnloA4bT2Ez
W2qzkLdWJ0o6zCVyhzcWG+nXARWPhTWvYMDShU25uh2aFeFPguPKuUpIAjdYzlYM
A3w5wBSaHPE3Z+y2FJLHqAYd4+DKv8BzGaEsCXn8rclzvEJuWG1UCyIhqqnjsSjQ
DYrgkJZJJFjrj2Tx+itMFol/mLD9FmX81d0ekdrcUPJJHJ/FlR8exg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:05 2025 by rpki-client