Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cPtu2qmNg8VJh-OHdD49IZPbxlM.roa
File: cPtu2qmNg8VJh-OHdD49IZPbxlM.roa (raw, json)
Hash identifier: 3v72t5D2j5VqhiuWJdtFzLTmddD3xcY0eR5tsUm4lgY=
Subject key identifier: 70:FB:6E:DA:A9:8D:83:C5:49:87:E3:87:74:3E:3D:21:93:DB:C6:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B1A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cPtu2qmNg8VJh-OHdD49IZPbxlM.roa
Signing time: Sun 07 Apr 2024 09:22:59 +0000
ROA not before: Sun 07 Apr 2024 09:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15130 (0x3b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 09:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=70FB6EDAA98D83C54987E387743E3D2193DBC653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:df:e0:bb:0c:84:27:61:98:4f:36:da:26:
3a:9f:6c:7a:87:ff:c8:cf:1a:79:92:b8:31:f5:0c:
fa:33:f6:72:af:8a:65:f2:ad:9d:08:2b:ed:df:29:
80:04:a7:2c:21:9f:23:81:e2:6d:9a:ea:c6:7a:ca:
43:a3:9e:75:7f:64:24:c5:fa:68:78:93:4a:ac:85:
58:88:cd:76:89:5c:3e:4e:9c:40:dd:04:e4:38:90:
4d:bb:52:eb:c1:9f:6a:1b:44:e4:1a:fd:d0:d6:05:
70:31:53:15:66:ca:89:ca:00:2c:9a:d6:f3:6c:18:
1c:e9:37:64:48:92:7e:ff:56:a4:c9:42:c9:f8:8c:
5d:88:de:58:f7:9e:95:92:db:cc:de:5b:7a:68:71:
20:b3:70:9c:7e:05:17:07:75:ae:aa:ff:8f:f7:d7:
af:30:1d:c2:7b:8b:e8:b3:f2:97:9c:83:ae:5b:af:
58:43:89:27:01:62:a0:a1:ca:65:78:7a:42:22:93:
c2:30:a6:b5:97:cc:bb:31:23:64:db:40:fc:85:51:
01:28:41:49:c6:d4:5f:5b:2c:cd:d8:49:19:71:1a:
a7:97:38:e2:0a:9c:61:31:14:10:dd:42:23:50:9c:
8f:f9:5e:df:b2:4f:a5:51:11:ad:f3:f9:a1:17:37:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:6E:DA:A9:8D:83:C5:49:87:E3:87:74:3E:3D:21:93:DB:C6:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cPtu2qmNg8VJh-OHdD49IZPbxlM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:9e:98:32:6a:ed:96:33:37:f2:72:d8:7c:96:26:0b:b7:d5:
1e:9e:0b:e6:2c:c6:79:63:84:69:6b:f5:ae:b6:2b:70:ac:f6:
c7:e5:2a:29:34:2f:50:d1:8d:8d:40:b0:e1:d1:80:18:ff:7a:
43:48:ed:2c:d5:19:88:1f:b0:ff:22:5e:fb:78:29:13:8e:af:
b3:31:c6:7d:4c:96:03:d2:d6:38:59:dc:c5:a1:ec:1a:77:50:
0c:63:f0:06:c2:1c:76:89:da:c3:32:98:56:6c:90:35:a7:7e:
fa:ec:12:a6:c5:28:3f:08:65:74:ac:d2:08:7d:10:a1:6c:ea:
91:e4:aa:0a:af:a3:b5:59:e7:d0:5c:f1:f0:21:3d:48:65:16:
d9:8c:c5:5d:88:15:69:fc:4d:59:bf:10:6d:d1:47:63:ab:80:
1a:e9:49:8d:9b:87:bb:6e:02:70:ea:67:f0:03:ac:4c:02:f1:
df:e3:c2:cc:b5:ca:22:a3:5c:38:e7:dc:14:0c:4b:46:0c:1a:
aa:35:42:dc:46:a3:70:a0:6e:6b:08:4f:a9:64:01:a1:54:05:
91:c8:85:d2:c8:a7:32:fe:f0:a9:a3:a8:19:51:4d:8a:62:24:
1a:3b:53:8f:d4:4c:3f:43:af:96:83:1d:e9:61:d5:7f:61:c4:
f8:81:8a:09
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcw
OTIyNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDcwRkI2RURBQTk4RDgz
QzU0OTg3RTM4Nzc0M0UzRDIxOTNEQkM2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6Cd/guwyEJ2GYTzbaJjqfbHqH/8jPGnmSuDH1DPoz9nKvimXy
rZ0IK+3fKYAEpywhnyOB4m2a6sZ6ykOjnnV/ZCTF+mh4k0qshViIzXaJXD5OnEDd
BOQ4kE27UuvBn2obROQa/dDWBXAxUxVmyonKACya1vNsGBzpN2RIkn7/VqTJQsn4
jF2I3lj3npWS28zeW3pocSCzcJx+BRcHda6q/4/3168wHcJ7i+iz8pecg65br1hD
iScBYqChymV4ekIik8IwprWXzLsxI2TbQPyFUQEoQUnG1F9bLM3YSRlxGqeXOOIK
nGExFBDdQiNQnI/5Xt+yT6VREa3z+aEXN5d9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUcPtu2qmNg8VJh+OHdD49IZPbxlMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2NQdHUycW1OZzhWSmgt
T0hkRDQ5SVpQYnhsTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEALZ6YMmrtljM38nLYfJYmC7fVHp4L5izG
eWOEaWv1rrYrcKz2x+UqKTQvUNGNjUCw4dGAGP96Q0jtLNUZiB+w/yJe+3gpE46v
szHGfUyWA9LWOFncxaHsGndQDGPwBsIcdonawzKYVmyQNad++uwSpsUoPwhldKzS
CH0QoWzqkeSqCq+jtVnn0Fzx8CE9SGUW2YzFXYgVafxNWb8QbdFHY6uAGulJjZuH
u24CcOpn8AOsTALx3+PCzLXKIqNcOOfcFAxLRgwaqjVC3EajcKBuawhPqWQBoVQF
kciF0sinMv7wqaOoGVFNimIkGjtTj9RMP0OvloMd6WHVf2HE+IGKCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org