Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dmJUR8zyZ780bmbfvMPozcCHzzw.roa
File: dmJUR8zyZ780bmbfvMPozcCHzzw.roa (raw, json)
Hash identifier: uEDluNIZyVBt+y1TGWy0EV0lvUcwX9BvDGPEXzOAMEI=
Subject key identifier: 76:62:54:47:CC:F2:67:BF:34:6E:66:DF:BC:C3:E8:CD:C0:87:CF:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 368A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dmJUR8zyZ780bmbfvMPozcCHzzw.roa
Signing time: Mon 01 Apr 2024 07:25:47 +0000
ROA not before: Mon 01 Apr 2024 07:25:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13962 (0x368a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 07:25:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76625447CCF267BF346E66DFBCC3E8CDC087CF3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:97:a6:6a:a9:e3:d0:16:bc:49:4d:2e:ab:
36:73:c3:5b:76:41:b0:9f:62:53:c7:8f:cc:83:69:
ac:a9:e8:6b:4e:22:a0:20:03:17:e0:59:fb:a9:12:
d4:e7:b4:33:a0:38:a2:63:d5:2f:cc:b1:ba:af:47:
39:5f:b7:2d:c2:4b:9c:98:43:61:cc:f7:1a:13:07:
a5:07:c1:54:f8:0c:d8:39:26:91:db:e1:ff:4d:cc:
ed:94:78:49:c3:fc:f9:9e:c7:14:08:99:ca:8e:6a:
da:5c:ea:a5:f7:65:83:f6:c9:f3:d2:72:ab:c5:e8:
92:7f:ef:51:8f:a7:e2:e3:18:c0:4e:1a:2a:2d:4c:
15:76:0a:8f:e1:0c:da:a9:07:35:5d:61:94:12:a0:
fd:33:b6:d5:67:7c:9a:4c:26:ae:d4:68:fd:76:c0:
23:38:45:53:ee:cd:d9:17:e4:50:21:26:a3:0d:a0:
af:6e:f4:f0:1a:59:e1:a6:a6:64:e8:be:3c:32:66:
de:ed:80:d3:a7:c8:6c:e3:3f:82:6e:a9:03:a7:1f:
e1:e1:70:8a:5a:6a:64:f1:93:ea:87:f0:25:b8:1a:
5d:84:41:2a:67:b1:6f:ec:17:d2:72:27:00:36:59:
59:85:ee:cc:18:a3:9e:7e:b3:ff:ad:24:bc:4e:74:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:54:47:CC:F2:67:BF:34:6E:66:DF:BC:C3:E8:CD:C0:87:CF:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dmJUR8zyZ780bmbfvMPozcCHzzw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:83:0a:c1:44:d6:5a:18:90:40:4d:94:7f:4d:82:b6:01:6d:
c0:30:76:a5:44:87:2e:42:98:59:32:8a:7a:bc:bf:56:c9:5c:
d3:cd:e8:98:9d:47:f9:de:06:70:13:94:fd:f4:cb:fa:67:45:
83:69:c6:95:db:24:5e:af:d4:b5:03:f9:cf:9d:db:d3:40:d0:
5e:65:d7:9a:7c:31:80:36:73:32:db:b5:6c:6f:ed:7c:c0:e0:
76:38:7b:20:8a:90:5e:00:84:80:b8:f1:0c:00:f1:5a:80:81:
ca:31:45:e8:03:fe:fa:c3:b9:44:76:20:8d:23:e7:18:35:28:
08:8f:c8:c2:38:77:4f:ec:b6:66:b4:43:1e:1c:1d:fb:70:d6:
4a:8c:c3:53:57:94:28:8a:3e:67:2a:12:fb:86:a0:9d:dd:bd:
80:c3:58:1b:a3:f1:85:30:4b:31:31:42:90:e8:ed:7a:34:c6:
d0:60:2d:ce:02:2a:57:77:25:4f:b2:22:da:f9:2b:0f:55:74:
01:90:5b:a2:ce:4f:a4:28:0c:7b:f8:68:89:83:07:da:a6:d9:
a4:ff:ba:56:75:79:5d:ff:05:19:25:ed:f6:2f:80:94:fa:ac:
e0:99:ce:a5:12:b8:3c:53:0d:99:bc:24:97:bd:09:a6:08:91:
58:25:53:2a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICNoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEw
NzI1NDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc2NjI1NDQ3Q0NGMjY3
QkYzNDZFNjZERkJDQzNFOENEQzA4N0NGM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyiZemaqnj0Ba8SU0uqzZzw1t2QbCfYlPHj8yDaayp6GtOIqAg
AxfgWfupEtTntDOgOKJj1S/MsbqvRzlfty3CS5yYQ2HM9xoTB6UHwVT4DNg5JpHb
4f9NzO2UeEnD/PmexxQImcqOatpc6qX3ZYP2yfPScqvF6JJ/71GPp+LjGMBOGiot
TBV2Co/hDNqpBzVdYZQSoP0zttVnfJpMJq7UaP12wCM4RVPuzdkX5FAhJqMNoK9u
9PAaWeGmpmTovjwyZt7tgNOnyGzjP4JuqQOnH+HhcIpaamTxk+qH8CW4Gl2EQSpn
sW/sF9JyJwA2WVmF7swYo55+s/+tJLxOdIYRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUdmJUR8zyZ780bmbfvMPozcCHzzwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2RtSlVSOHp5Wjc4MGJt
YmZ2TVBvemNDSHp6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAH4MKwUTWWhiQQE2Uf02CtgFtwDB2pUSH
LkKYWTKKery/Vslc083omJ1H+d4GcBOU/fTL+mdFg2nGldskXq/UtQP5z53b00DQ
XmXXmnwxgDZzMtu1bG/tfMDgdjh7IIqQXgCEgLjxDADxWoCByjFF6AP++sO5RHYg
jSPnGDUoCI/Iwjh3T+y2ZrRDHhwd+3DWSozDU1eUKIo+ZyoS+4agnd29gMNYG6Px
hTBLMTFCkOjtejTG0GAtzgIqV3clT7Ii2vkrD1V0AZBbos5PpCgMe/hoiYMH2qbZ
pP+6VnV5Xf8FGSXt9i+AlPqs4JnOpRK4PFMNmbwkl70JpgiRWCVTKg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:20 2025 by rpki-client