Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_ELeSi_HtGW4U4YGpsJ059RwLow.roa
File: _ELeSi_HtGW4U4YGpsJ059RwLow.roa (raw, json)
Hash identifier: Uaqio/0dj7gAlDc2pMMjSBRm5mLoGswoGj3nyB6tMOg=
Subject key identifier: FC:42:DE:4A:2F:C7:B4:65:B8:53:86:06:A6:C2:74:E7:D4:70:2E:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3946
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_ELeSi_HtGW4U4YGpsJ059RwLow.roa
Signing time: Thu 04 Apr 2024 22:52:25 +0000
ROA not before: Thu 04 Apr 2024 22:52:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14662 (0x3946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 22:52:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC42DE4A2FC7B465B8538606A6C274E7D4702E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:69:70:20:de:dd:7c:94:cb:cc:6a:ca:19:
4f:e7:bb:06:e7:7a:96:89:ef:d7:12:ca:06:67:b1:
bd:45:bd:f2:10:e2:ac:53:22:cb:71:bd:16:d2:51:
f0:ee:c6:e0:4f:00:37:e1:7d:c9:3a:fa:03:53:71:
e9:01:27:95:f2:48:b6:7c:49:4a:a7:b4:ea:70:b3:
85:25:e2:07:ff:eb:54:01:52:81:9c:25:70:c8:d6:
c4:a7:4d:dd:e0:e0:33:11:de:30:6b:08:6c:f7:9d:
bf:1f:81:5a:11:e1:44:f9:60:0b:98:f9:9a:10:42:
f2:b2:52:44:65:2b:41:35:55:88:0e:a7:9c:46:b2:
e8:14:ea:88:64:be:e4:c5:e1:e9:cb:f7:86:41:37:
0a:14:8e:11:7d:fd:8e:4c:2a:1b:1b:1e:4a:56:5f:
d7:96:7b:c9:76:28:18:e6:26:91:66:d6:5f:a1:95:
a3:2c:a3:c7:9b:87:fa:47:a0:bf:3e:06:9f:39:72:
cb:26:5d:a6:25:6f:6f:1a:7f:70:65:22:38:25:21:
5a:15:16:c9:e2:ba:2f:05:f9:9d:ee:0e:d2:bd:ec:
66:7e:f2:ca:3c:d1:11:93:21:8a:94:6b:8d:d3:77:
1d:e2:dc:2f:b9:19:13:15:f5:34:a7:16:b3:2a:f7:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:DE:4A:2F:C7:B4:65:B8:53:86:06:A6:C2:74:E7:D4:70:2E:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_ELeSi_HtGW4U4YGpsJ059RwLow.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:26:bb:19:c4:e2:41:e2:a7:c6:97:8e:1c:5e:9c:6b:6d:75:
ff:d7:0f:d3:bb:c3:00:06:30:be:6a:b9:bc:ec:71:67:dd:33:
c2:4b:e6:39:d9:d2:bf:a8:97:78:22:70:d9:29:ac:5a:ad:06:
fe:0c:3a:4d:e1:d6:03:31:4d:ed:a8:9f:e1:a8:2e:50:fd:7e:
11:f4:d7:31:2d:6b:19:6d:f8:34:25:c1:39:e6:3f:69:10:e4:
99:ba:6e:06:b2:16:0d:61:15:77:08:57:02:b4:13:c2:3b:59:
81:d5:88:cc:22:db:75:f6:fe:c4:8c:d7:fe:69:76:f7:3a:16:
d1:c8:4f:d2:99:ca:79:ff:2b:d1:33:a7:12:0c:41:7e:28:46:
b4:60:ce:f0:61:11:79:9e:58:24:91:20:d5:ba:35:49:90:69:
70:5c:d6:10:15:8d:58:9a:3a:33:23:a7:c7:eb:71:f7:e9:54:
42:1d:d3:c1:bb:7e:b3:cb:7d:9d:af:5b:09:34:68:76:61:1d:
d7:dd:e0:5f:29:6d:69:d9:86:57:e9:2e:ce:22:97:91:d6:36:
6d:f6:75:ae:86:eb:f2:58:88:49:72:e3:ab:c9:1e:d0:1f:08:
1e:4e:ea:0a:39:0a:c9:31:a1:10:9f:17:0d:e5:35:33:0e:1f:
bd:11:c6:77
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQy
MjUyMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDNDJERTRBMkZDN0I0
NjVCODUzODYwNkE2QzI3NEU3RDQ3MDJFOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp02lwIN7dfJTLzGrKGU/nuwbnepaJ79cSygZnsb1FvfIQ4qxT
IstxvRbSUfDuxuBPADfhfck6+gNTcekBJ5XySLZ8SUqntOpws4Ul4gf/61QBUoGc
JXDI1sSnTd3g4DMR3jBrCGz3nb8fgVoR4UT5YAuY+ZoQQvKyUkRlK0E1VYgOp5xG
sugU6ohkvuTF4enL94ZBNwoUjhF9/Y5MKhsbHkpWX9eWe8l2KBjmJpFm1l+hlaMs
o8ebh/pHoL8+Bp85cssmXaYlb28af3BlIjglIVoVFsniui8F+Z3uDtK97GZ+8so8
0RGTIYqUa43Tdx3i3C+5GRMV9TSnFrMq96JPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/ELeSi/HtGW4U4YGpsJ059RwLowwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19FTGVTaV9IdEdXNFU0
WUdwc0owNTlSd0xvdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAdya7GcTiQeKnxpeOHF6ca211/9cP07vD
AAYwvmq5vOxxZ90zwkvmOdnSv6iXeCJw2SmsWq0G/gw6TeHWAzFN7aif4aguUP1+
EfTXMS1rGW34NCXBOeY/aRDkmbpuBrIWDWEVdwhXArQTwjtZgdWIzCLbdfb+xIzX
/ml29zoW0chP0pnKef8r0TOnEgxBfihGtGDO8GEReZ5YJJEg1bo1SZBpcFzWEBWN
WJo6MyOnx+tx9+lUQh3Twbt+s8t9na9bCTRodmEd193gXyltadmGV+kuziKXkdY2
bfZ1robr8liISXLjq8ke0B8IHk7qCjkKyTGhEJ8XDeU1Mw4fvRHGdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org