Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/brFOqjt5gtdxY88bg7tDJxzaJLc.roa
File: brFOqjt5gtdxY88bg7tDJxzaJLc.roa (raw, json)
Hash identifier: jQk2Bv3gzdW1kqnRrB3F7nXyhI9UHDhgyXca0Sz7cZs=
Subject key identifier: 6E:B1:4E:AA:3B:79:82:D7:71:63:CF:1B:83:BB:43:27:1C:DA:24:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F72
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/brFOqjt5gtdxY88bg7tDJxzaJLc.roa
Signing time: Sat 13 Apr 2024 04:22:52 +0000
ROA not before: Sat 13 Apr 2024 04:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16242 (0x3f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 04:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6EB14EAA3B7982D77163CF1B83BB43271CDA24B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:48:42:12:f0:30:2c:c2:1d:a3:15:cb:5d:
bc:ba:a6:76:5d:3e:79:d9:03:23:37:b2:81:52:1c:
86:cc:a3:4c:95:27:3c:7b:71:02:77:0e:dd:7f:e0:
38:b6:19:d4:7a:e9:6f:ef:a8:1e:40:ff:dc:09:1c:
4a:c2:da:50:9f:82:9c:ef:1a:22:14:f4:e9:38:55:
f9:2e:62:7b:98:38:0b:d5:b0:0c:67:f6:8b:64:b8:
a8:68:6d:8d:45:2d:0a:9d:5a:7f:9b:2b:4f:76:31:
4c:5d:49:3f:b4:13:d3:b8:60:a8:c9:bf:c8:89:41:
6a:4e:a7:48:31:47:cd:02:1d:45:66:91:bd:73:c8:
2c:1a:28:ee:4c:55:b2:ee:3f:61:12:72:ef:18:0b:
95:92:fd:d4:d5:0f:57:ff:31:ee:86:9b:d0:a5:84:
e7:0e:8d:c2:0a:02:2e:ad:0b:08:5c:cf:c0:f7:02:
10:a3:d9:4a:ba:a9:cf:62:23:c9:0d:ec:9f:51:c0:
40:60:8d:8e:b3:6c:0a:7d:7e:c4:c6:51:b7:4e:9b:
29:ae:3c:9b:ba:98:67:39:f4:96:81:c2:7c:e1:14:
1f:d5:98:db:59:66:04:25:a9:7a:98:4d:97:c5:41:
ab:37:f3:95:74:99:af:15:ea:b9:bc:72:cd:9c:18:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:4E:AA:3B:79:82:D7:71:63:CF:1B:83:BB:43:27:1C:DA:24:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/brFOqjt5gtdxY88bg7tDJxzaJLc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:93:01:90:ec:c7:b9:86:80:d1:d2:0d:3a:42:b0:eb:2b:6b:
56:6b:a6:fc:31:56:db:e6:a8:ba:73:59:3b:88:75:74:77:44:
2a:02:13:c6:52:e6:50:b2:11:46:dc:c0:67:12:10:dc:39:e6:
b5:1b:8a:0d:ed:ba:a1:1f:fb:71:df:e9:e0:11:13:17:61:01:
7e:5e:5f:ba:b4:db:6d:3a:9f:87:ac:00:72:7a:1d:e3:28:52:
d4:1b:ef:90:ef:e0:65:43:bf:c7:5b:f6:3b:71:bf:7b:e0:78:
63:b2:64:e6:8c:3f:11:c5:3b:1a:65:0e:ec:94:ba:1f:06:3d:
f8:57:85:64:5f:76:74:bb:bf:6c:44:a2:e8:26:1d:85:81:77:
32:05:95:43:f9:e1:4a:c9:f2:bf:cb:eb:08:47:5d:fc:35:db:
fb:df:6d:27:2c:7d:e2:39:1d:22:f9:88:89:01:b9:57:b0:0e:
43:ec:6f:b9:e8:21:f0:3e:92:b4:4e:36:5f:bf:fc:c7:47:31:
60:c6:a8:48:ba:58:37:db:7d:c9:53:69:0c:78:09:9f:ad:77:
a1:50:25:33:e5:55:cc:2e:dc:f3:56:a3:3a:74:a9:5e:f8:cf:
88:3b:9a:a3:78:0e:44:1a:36:03:65:0d:8a:32:80:30:92:aa:
8d:e1:05:93
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICP3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMw
NDIyNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZFQjE0RUFBM0I3OTgy
RDc3MTYzQ0YxQjgzQkI0MzI3MUNEQTI0QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAuEhCEvAwLMIdoxXLXby6pnZdPnnZAyM3soFSHIbMo0yVJzx7
cQJ3Dt1/4Di2GdR66W/vqB5A/9wJHErC2lCfgpzvGiIU9Ok4VfkuYnuYOAvVsAxn
9otkuKhobY1FLQqdWn+bK092MUxdST+0E9O4YKjJv8iJQWpOp0gxR80CHUVmkb1z
yCwaKO5MVbLuP2EScu8YC5WS/dTVD1f/Me6Gm9ClhOcOjcIKAi6tCwhcz8D3AhCj
2Uq6qc9iI8kN7J9RwEBgjY6zbAp9fsTGUbdOmymuPJu6mGc59JaBwnzhFB/VmNtZ
ZgQlqXqYTZfFQas385V0ma8V6rm8cs2cGCyvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUbrFOqjt5gtdxY88bg7tDJxzaJLcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2JyRk9xanQ1Z3RkeFk4
OGJnN3RESnh6YUpMYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAH5MBkOzHuYaA0dINOkKw6ytrVmum/DFW
2+aounNZO4h1dHdEKgITxlLmULIRRtzAZxIQ3DnmtRuKDe26oR/7cd/p4BETF2EB
fl5furTbbTqfh6wAcnod4yhS1BvvkO/gZUO/x1v2O3G/e+B4Y7Jk5ow/EcU7GmUO
7JS6HwY9+FeFZF92dLu/bESi6CYdhYF3MgWVQ/nhSsnyv8vrCEdd/DXb+99tJyx9
4jkdIvmIiQG5V7AOQ+xvuegh8D6StE42X7/8x0cxYMaoSLpYN9t9yVNpDHgJn613
oVAlM+VVzC7c81ajOnSpXvjPiDuao3gORBo2A2UNijKAMJKqjeEFkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org