Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/d4j1INyiyWxV1Y_xB1TTANYajbM.roa
File: d4j1INyiyWxV1Y_xB1TTANYajbM.roa (raw, json)
Hash identifier: 0ntZkmkyLEc8bif97aJEIUHkUdA06s0qmsLnR6G0tBY=
Subject key identifier: 77:88:F5:20:DC:A2:C9:6C:55:D5:8F:F1:07:54:D3:00:D6:1A:8D:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4416
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d4j1INyiyWxV1Y_xB1TTANYajbM.roa
Signing time: Fri 19 Apr 2024 08:53:23 +0000
ROA not before: Fri 19 Apr 2024 08:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17430 (0x4416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 08:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7788F520DCA2C96C55D58FF10754D300D61A8DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:69:7a:55:16:52:21:5f:d8:8c:61:f9:a2:
c3:2c:c0:e2:af:49:3a:f4:0f:e9:4f:d0:c4:19:62:
8f:e3:c4:33:c0:ab:94:16:56:05:08:9b:8a:a0:90:
a3:ac:cd:87:53:a7:9d:71:3d:60:c9:e0:7b:c2:e8:
0c:18:f8:6f:f8:fd:32:5e:41:49:b9:59:f3:37:90:
59:52:10:75:75:b6:e1:a0:af:fc:56:86:72:5e:10:
2f:e3:89:c5:85:47:71:9d:69:11:e7:c9:ab:8a:2e:
a5:1f:28:9f:60:5a:33:50:ee:d3:f5:e1:08:7c:1e:
95:35:29:84:0e:f8:dd:10:ca:e7:48:d3:b4:cf:d2:
c2:db:e1:eb:ac:8e:32:7b:a4:87:a4:ed:10:94:d8:
14:20:8c:9b:38:5b:d9:74:8e:f3:e0:81:75:2a:4c:
f5:ad:84:8b:31:ec:90:25:26:29:75:2d:b7:7e:b7:
6c:83:27:b8:b0:aa:b1:e5:06:ea:2f:62:94:8f:20:
e1:6d:c9:d2:74:40:ec:13:2b:40:74:eb:86:44:9f:
0c:0a:05:f6:5c:b4:aa:ec:06:8f:ae:1a:8c:79:cd:
f9:61:6f:04:de:e6:60:84:da:6c:14:c2:2f:7e:cf:
dd:19:2e:70:cc:a2:c4:44:c1:9a:69:6b:78:01:1a:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:88:F5:20:DC:A2:C9:6C:55:D5:8F:F1:07:54:D3:00:D6:1A:8D:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/d4j1INyiyWxV1Y_xB1TTANYajbM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:0e:9d:29:78:f5:e1:eb:ea:b7:2f:32:ef:87:39:e3:62:b9:
36:ab:e9:98:7f:85:08:52:1c:0a:2c:fd:4d:47:41:0e:47:a6:
7c:01:82:c8:12:ab:33:9a:83:2f:65:de:58:6f:a5:f8:a0:df:
e1:a2:f3:b2:1a:4a:02:2c:20:3f:85:17:6d:2b:92:d2:ff:ec:
4d:74:80:ec:b2:bb:34:6d:5c:9f:48:52:a8:96:d3:32:26:05:
73:7b:44:62:b7:40:ed:30:c0:0f:d1:9a:3d:8a:33:57:03:dc:
0c:5f:54:6c:41:3a:53:4c:ab:fc:64:3e:0b:53:76:00:40:b5:
2a:16:b2:84:4e:75:aa:65:36:b7:5c:2f:c5:b8:7e:33:85:ac:
a6:da:ed:f7:c5:a5:9f:81:22:7d:28:86:d5:39:d8:a1:2e:90:
ba:e7:c0:6d:3b:90:26:fb:d7:64:1d:6e:49:06:2a:71:f4:4c:
7b:53:61:31:d5:ac:74:b2:8f:92:2a:aa:98:19:df:c8:bf:87:
2f:3c:45:62:c4:e2:95:72:12:89:2a:61:7c:1a:fc:e9:77:2c:
3f:f1:da:06:b8:b1:98:18:b6:f4:00:e4:90:06:a2:a5:0b:5d:
25:52:3f:23:81:96:99:2c:e5:73:2a:4b:e5:51:ec:12:4c:86:
4b:55:f1:42
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICRBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkw
ODUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc3ODhGNTIwRENBMkM5
NkM1NUQ1OEZGMTA3NTREMzAwRDYxQThEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0lWl6VRZSIV/YjGH5osMswOKvSTr0D+lP0MQZYo/jxDPAq5QW
VgUIm4qgkKOszYdTp51xPWDJ4HvC6AwY+G/4/TJeQUm5WfM3kFlSEHV1tuGgr/xW
hnJeEC/jicWFR3GdaRHnyauKLqUfKJ9gWjNQ7tP14Qh8HpU1KYQO+N0QyudI07TP
0sLb4eusjjJ7pIek7RCU2BQgjJs4W9l0jvPggXUqTPWthIsx7JAlJil1Lbd+t2yD
J7iwqrHlBuovYpSPIOFtydJ0QOwTK0B064ZEnwwKBfZctKrsBo+uGox5zflhbwTe
5mCE2mwUwi9+z90ZLnDMosREwZppa3gBGh3HAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUd4j1INyiyWxV1Y/xB1TTANYajbMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Q0ajFJTnlpeVd4VjFZ
X3hCMVRUQU5ZYWpiTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAFw6dKXj14evqty8y74c542K5NqvpmH+F
CFIcCiz9TUdBDkemfAGCyBKrM5qDL2XeWG+l+KDf4aLzshpKAiwgP4UXbSuS0v/s
TXSA7LK7NG1cn0hSqJbTMiYFc3tEYrdA7TDAD9GaPYozVwPcDF9UbEE6U0yr/GQ+
C1N2AEC1KhayhE51qmU2t1wvxbh+M4Wsptrt98Wln4EifSiG1TnYoS6QuufAbTuQ
JvvXZB1uSQYqcfRMe1NhMdWsdLKPkiqqmBnfyL+HLzxFYsTilXISiSphfBr86Xcs
P/HaBrixmBi29ADkkAaipQtdJVI/I4GWmSzlcypL5VHsEkyGS1XxQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org