Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c4zt_WkqUv-j5H_kJfcJyHfsTVU.roa
File: c4zt_WkqUv-j5H_kJfcJyHfsTVU.roa (raw, json)
Hash identifier: Rr/cN1x/WJUDITdkXA+0lxk6QJ4VKIxlq5jGZRuWHbo=
Subject key identifier: 73:8C:ED:FD:69:2A:52:FF:A3:E4:7F:E4:25:F7:09:C8:77:EC:4D:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55F2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c4zt_WkqUv-j5H_kJfcJyHfsTVU.roa
Signing time: Mon 13 May 2024 04:24:06 +0000
ROA not before: Mon 13 May 2024 04:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22002 (0x55f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 04:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=738CEDFD692A52FFA3E47FE425F709C877EC4D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:4e:96:fb:de:65:dd:67:d7:c6:74:85:aa:
f9:6e:54:e2:83:b6:c1:3d:71:04:56:3e:36:da:22:
d3:ad:4a:98:cf:be:27:25:7a:d3:31:29:15:5a:f9:
4b:a3:40:79:88:5a:68:71:69:34:bc:74:59:1c:be:
75:b7:b8:11:d5:79:ed:1e:18:0f:53:3e:4d:61:14:
53:c8:5b:1d:40:7d:f3:06:74:d3:36:c1:d5:e7:4d:
71:f9:21:3a:37:16:0c:f1:48:43:df:a4:0e:ec:63:
19:07:65:de:82:6d:71:0c:5c:fc:8e:a5:29:2a:3d:
b4:dd:cc:bf:02:f9:19:bc:ae:0b:f0:95:e1:af:89:
67:72:00:92:45:38:b5:88:3a:c2:74:54:4a:0e:6a:
7b:c0:aa:ab:6c:6f:37:90:ee:48:db:5e:68:67:9d:
46:de:64:46:62:95:f0:96:ce:2d:2c:72:08:87:bc:
7f:e7:0c:84:7f:5d:4c:98:b3:a5:30:d3:63:c8:69:
dd:6f:a9:9b:60:d9:b2:11:a2:88:10:68:6a:6d:70:
8e:70:99:3d:3f:85:d1:9d:5f:b4:fe:42:fa:aa:4e:
52:ce:be:1a:69:b6:73:1a:d4:9b:af:4c:9c:fd:40:
b4:62:8d:23:06:db:9e:65:32:fd:30:11:65:6a:11:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:ED:FD:69:2A:52:FF:A3:E4:7F:E4:25:F7:09:C8:77:EC:4D:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c4zt_WkqUv-j5H_kJfcJyHfsTVU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:1e:9d:07:42:e6:92:c1:a9:ff:0e:11:7d:33:78:af:b7:46:
ba:9a:96:8c:c3:c2:5b:a5:4b:3e:6e:78:7c:b8:d5:78:6a:22:
a4:fc:40:e2:c4:38:20:89:c9:04:89:46:52:e3:63:61:cc:d3:
a5:53:ce:9a:69:7b:c3:9b:4e:0d:11:20:25:6e:e8:9c:0f:6e:
a4:7a:63:77:8e:7e:5c:bd:32:1a:66:4d:2f:54:eb:4f:22:66:
88:ef:9b:0c:c7:c2:48:32:ea:4e:0e:30:aa:8d:00:65:57:53:
80:2e:f3:c4:24:99:1b:9d:99:60:fb:2d:bb:df:ac:1d:95:8d:
97:b2:11:6e:ef:85:03:4c:e2:c7:71:7e:b9:17:8e:14:4e:a8:
52:1c:33:12:84:3d:4d:c1:b0:a2:b6:8d:99:95:89:63:c1:62:
67:e0:b9:c1:e6:88:bd:d1:7c:bf:35:f4:0e:aa:fa:81:b5:d6:
f6:27:98:bf:fb:5f:b9:ce:53:ff:c0:f5:c2:8b:dd:40:54:56:
af:f5:60:04:ce:b8:b7:75:96:99:f3:04:89:58:83:e6:45:d7:
41:9b:62:60:af:2b:b7:e4:4e:34:91:7b:b5:44:85:55:b8:43:
9d:0a:bb:e8:f2:a9:b4:80:42:12:75:4e:2c:ff:a3:c2:e8:43:
d6:11:99:b6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTMw
NDI0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDczOENFREZENjkyQTUy
RkZBM0U0N0ZFNDI1RjcwOUM4NzdFQzRENTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkQE6W+95l3WfXxnSFqvluVOKDtsE9cQRWPjbaItOtSpjPvicl
etMxKRVa+UujQHmIWmhxaTS8dFkcvnW3uBHVee0eGA9TPk1hFFPIWx1AffMGdNM2
wdXnTXH5ITo3FgzxSEPfpA7sYxkHZd6CbXEMXPyOpSkqPbTdzL8C+Rm8rgvwleGv
iWdyAJJFOLWIOsJ0VEoOanvAqqtsbzeQ7kjbXmhnnUbeZEZilfCWzi0scgiHvH/n
DIR/XUyYs6Uw02PIad1vqZtg2bIRoogQaGptcI5wmT0/hdGdX7T+QvqqTlLOvhpp
tnMa1JuvTJz9QLRijSMG255lMv0wEWVqEWd/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUc4zt/WkqUv+j5H/kJfcJyHfsTVUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2M0enRfV2txVXYtajVI
X2tKZmNKeUhmc1RWVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAAR6dB0LmksGp/w4RfTN4r7dGupqWjMPC
W6VLPm54fLjVeGoipPxA4sQ4IInJBIlGUuNjYczTpVPOmml7w5tODREgJW7onA9u
pHpjd45+XL0yGmZNL1TrTyJmiO+bDMfCSDLqTg4wqo0AZVdTgC7zxCSZG52ZYPst
u9+sHZWNl7IRbu+FA0zix3F+uReOFE6oUhwzEoQ9TcGworaNmZWJY8FiZ+C5weaI
vdF8vzX0Dqr6gbXW9ieYv/tfuc5T/8D1wovdQFRWr/VgBM64t3WWmfMEiViD5kXX
QZtiYK8rt+RONJF7tUSFVbhDnQq76PKptIBCEnVOLP+jwuhD1hGZtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org