Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/a9ckdb1XLNG9Pkte-pMfiCDHTN4.roa
File: a9ckdb1XLNG9Pkte-pMfiCDHTN4.roa (raw, json)
Hash identifier: Pr0WL5H9nS5r9o6kRdYh9Y8A4rUOWkJFiiz6hi2PnLY=
Subject key identifier: 6B:D7:24:75:BD:57:2C:D1:BD:3E:4B:5E:FA:93:1F:88:20:C7:4C:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5216
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a9ckdb1XLNG9Pkte-pMfiCDHTN4.roa
Signing time: Wed 08 May 2024 00:53:55 +0000
ROA not before: Wed 08 May 2024 00:53:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21014 (0x5216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 00:53:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6BD72475BD572CD1BD3E4B5EFA931F8820C74CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:c6:2b:97:34:f5:cf:46:25:9d:65:6f:ed:
8d:f1:d3:c6:25:42:e0:85:f6:62:ea:b3:c6:7e:da:
3f:3b:9f:48:94:e2:4d:2b:66:92:3a:c6:3e:d5:06:
67:43:c1:e8:d4:c7:59:1f:31:45:1a:09:67:37:05:
3d:c0:ff:12:d1:6d:8f:a1:cd:b6:ab:58:89:5b:09:
9a:71:15:e0:75:fa:b1:f6:8a:f0:f2:31:bd:04:6e:
75:d6:97:cc:6b:bb:0c:72:5b:b3:97:9e:0b:15:5f:
13:ca:34:9e:fa:e7:4d:42:cc:a0:28:6a:6c:c1:15:
27:f2:e4:59:17:4e:f8:65:bf:b9:5a:ea:8e:34:d7:
eb:1b:79:54:a4:8d:7d:34:aa:ff:a5:64:02:8e:6c:
d6:20:c5:53:7f:d2:50:ef:0c:c2:e8:a9:05:f3:9c:
9c:98:2d:aa:30:8b:95:97:19:fd:c9:48:9a:97:d2:
b9:7d:c0:73:f7:bd:b8:73:0c:2b:1b:44:88:d2:23:
be:77:d7:ea:53:af:de:67:ff:76:ea:33:25:ff:c4:
48:29:d6:e5:44:dc:fd:d6:b5:f1:26:96:82:9a:a2:
09:6a:e2:95:25:14:27:8a:4f:c1:24:f5:5a:5a:de:
e6:16:a6:86:bb:be:9a:35:37:66:db:2a:93:ae:6a:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:24:75:BD:57:2C:D1:BD:3E:4B:5E:FA:93:1F:88:20:C7:4C:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a9ckdb1XLNG9Pkte-pMfiCDHTN4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:7f:43:8c:eb:71:16:e8:9e:a0:f2:1b:1c:d7:2f:97:f5:a5:
19:2e:b9:55:c9:79:12:33:82:00:2a:86:ee:00:9a:e0:eb:61:
6c:1b:22:e9:d2:a3:ed:7d:a0:15:86:da:c0:b3:2d:1f:05:c9:
45:c8:14:85:50:3a:3c:0c:76:f2:4e:41:4c:4e:7d:28:f9:7d:
41:09:8b:a2:72:13:ab:b9:b8:11:2b:86:0b:48:73:ac:08:65:
20:59:7c:23:61:20:1b:59:ad:46:db:ff:ff:cb:af:07:f8:bd:
76:7b:b6:94:95:7f:92:28:19:db:e3:aa:a3:3d:95:9b:f1:7e:
91:a6:68:35:fb:2e:79:a2:d9:bc:a8:58:55:32:05:0c:00:f0:
7b:f5:52:3f:da:1e:d3:09:9c:8e:c2:71:77:ca:0f:c3:81:dd:
2e:01:6c:2a:f5:a4:42:a7:52:e6:e1:57:3a:55:6c:40:38:be:
9d:0b:6a:51:25:fd:47:61:bb:97:10:37:23:01:59:ec:05:8a:
b2:cc:fd:9f:b0:95:ee:83:90:8f:ef:07:be:e6:a5:d2:98:4e:
b4:c5:be:c9:74:65:24:fc:81:7f:3f:4f:19:40:2a:a7:a0:23:
0b:1e:74:ef:a0:0d:ea:10:2f:ec:0e:e9:e2:d7:c1:da:30:ed:
80:09:01:e2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICUhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDgw
MDUzNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZCRDcyNDc1QkQ1NzJD
RDFCRDNFNEI1RUZBOTMxRjg4MjBDNzRDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDirMYrlzT1z0YlnWVv7Y3x08YlQuCF9mLqs8Z+2j87n0iU4k0r
ZpI6xj7VBmdDwejUx1kfMUUaCWc3BT3A/xLRbY+hzbarWIlbCZpxFeB1+rH2ivDy
Mb0EbnXWl8xruwxyW7OXngsVXxPKNJ76501CzKAoamzBFSfy5FkXTvhlv7la6o40
1+sbeVSkjX00qv+lZAKObNYgxVN/0lDvDMLoqQXznJyYLaowi5WXGf3JSJqX0rl9
wHP3vbhzDCsbRIjSI7531+pTr95n/3bqMyX/xEgp1uVE3P3WtfEmloKaoglq4pUl
FCeKT8Ek9Vpa3uYWpoa7vpo1N2bbKpOuavnXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUa9ckdb1XLNG9Pkte+pMfiCDHTN4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2E5Y2tkYjFYTE5HOVBr
dGUtcE1maUNESFRONC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEALH9DjOtxFuieoPIbHNcvl/WlGS65Vcl5
EjOCACqG7gCa4OthbBsi6dKj7X2gFYbawLMtHwXJRcgUhVA6PAx28k5BTE59KPl9
QQmLonITq7m4ESuGC0hzrAhlIFl8I2EgG1mtRtv//8uvB/i9dnu2lJV/kigZ2+Oq
oz2Vm/F+kaZoNfsueaLZvKhYVTIFDADwe/VSP9oe0wmcjsJxd8oPw4HdLgFsKvWk
QqdS5uFXOlVsQDi+nQtqUSX9R2G7lxA3IwFZ7AWKssz9n7CV7oOQj+8Hvual0phO
tMW+yXRlJPyBfz9PGUAqp6AjCx5076AN6hAv7A7p4tfB2jDtgAkB4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:34 2024 by rpki-client on console-fra.rpki-client.org