Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eq3KkOTUwWoWnu3FkUC-VlEGGK0.roa
File: eq3KkOTUwWoWnu3FkUC-VlEGGK0.roa (raw, json)
Hash identifier: 9UOf9RaXChP7VB5GpxZNeEnzDdxyJsy7dpjqmNeRK8s=
Subject key identifier: 7A:AD:CA:90:E4:D4:C1:6A:16:9E:ED:C5:91:40:BE:56:51:06:18:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CC2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eq3KkOTUwWoWnu3FkUC-VlEGGK0.roa
Signing time: Tue 30 Apr 2024 22:23:35 +0000
ROA not before: Tue 30 Apr 2024 22:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19650 (0x4cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 22:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7AADCA90E4D4C16A169EEDC59140BE56510618AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:88:80:df:44:40:80:a4:d7:cf:95:0c:2a:
63:cd:18:bf:fd:74:79:45:38:44:64:05:cd:38:34:
c7:7a:be:98:37:6e:8c:49:1f:9c:62:35:2a:08:5b:
42:7d:24:3f:9b:96:e6:a4:1a:c6:c8:b1:34:01:96:
51:8b:c2:58:b5:ef:ea:d4:e9:2f:73:aa:39:3a:ec:
43:be:da:3d:70:bc:c6:a5:47:a7:6c:45:00:ea:86:
3d:e7:0d:17:91:ba:e7:75:64:32:e6:de:78:24:e8:
68:3f:33:8a:5e:cc:93:c1:c3:5d:19:94:8a:90:a8:
46:c2:58:c9:1e:87:81:dc:35:67:6c:b0:f1:50:21:
e4:27:de:4c:af:3b:6b:d9:57:d4:7a:b2:09:b4:5f:
8d:1e:f2:9a:1d:de:e5:ad:0b:aa:7c:fe:68:d2:2a:
00:ca:70:56:e9:fc:67:1d:17:21:b4:96:62:ae:90:
b6:15:32:2a:7e:8f:e1:f2:52:47:fd:d7:09:36:bf:
73:46:23:c6:c5:7b:cd:bb:bd:d2:40:a3:01:b0:cd:
74:86:4d:54:fa:e8:10:3f:bc:65:df:52:78:fa:17:
a1:7f:d7:6a:bb:de:03:7b:19:9b:d0:30:e2:81:c9:
07:05:52:89:06:e5:03:b0:2d:7a:ac:08:52:2c:69:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:CA:90:E4:D4:C1:6A:16:9E:ED:C5:91:40:BE:56:51:06:18:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eq3KkOTUwWoWnu3FkUC-VlEGGK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:01:c2:82:ff:3f:68:db:84:d4:0b:74:5e:0a:51:0c:b9:8a:
57:fc:08:1c:84:b9:8c:07:e0:bc:bc:a6:47:4a:4c:3e:14:67:
0d:0e:3a:78:65:bc:fb:cb:5d:1e:f8:07:f0:b5:ef:7a:eb:f1:
99:0f:42:dd:b5:93:c2:bc:f3:48:d7:70:1b:43:9b:42:05:55:
9d:d1:b8:dc:5b:05:2e:73:1d:0a:09:fd:2b:16:d1:5e:e0:55:
95:54:98:10:06:c3:e5:46:ee:f7:bc:a2:b1:ec:a0:2c:7b:96:
33:0f:55:6a:db:41:d2:bd:ac:21:9a:0d:a8:06:31:49:5e:02:
70:8e:9a:a2:0a:35:43:ec:df:70:11:f1:d8:8a:8e:ac:e3:5b:
2d:28:1e:c6:9c:06:b7:85:c3:e2:cd:88:e9:79:7a:a5:42:27:
64:80:5f:cd:38:09:ad:96:16:49:25:5a:b5:b0:10:46:46:cd:
42:89:51:c0:97:60:95:b4:1f:17:28:40:63:12:c0:df:fd:88:
45:51:1d:24:b5:f5:cf:7a:70:cc:80:8e:9f:df:6e:b9:67:3d:
c4:71:20:05:6c:10:e3:97:f3:ff:dc:ca:ee:7e:fe:c7:65:11:
79:92:e2:54:74:75:a3:a9:a1:3c:5c:8f:b7:26:98:fe:36:0e:
ac:9e:bb:15
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MzAy
MjIzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdBQURDQTkwRTRENEMx
NkExNjlFRURDNTkxNDBCRTU2NTEwNjE4QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9eIiA30RAgKTXz5UMKmPNGL/9dHlFOERkBc04NMd6vpg3boxJ
H5xiNSoIW0J9JD+bluakGsbIsTQBllGLwli17+rU6S9zqjk67EO+2j1wvMalR6ds
RQDqhj3nDReRuud1ZDLm3ngk6Gg/M4pezJPBw10ZlIqQqEbCWMkeh4HcNWdssPFQ
IeQn3kyvO2vZV9R6sgm0X40e8pod3uWtC6p8/mjSKgDKcFbp/GcdFyG0lmKukLYV
Mip+j+HyUkf91wk2v3NGI8bFe827vdJAowGwzXSGTVT66BA/vGXfUnj6F6F/12q7
3gN7GZvQMOKByQcFUokG5QOwLXqsCFIsaXZVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUeq3KkOTUwWoWnu3FkUC+VlEGGK0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2VxM0trT1RVd1dvV251
M0ZrVUMtVmxFR0dLMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAXgHCgv8/aNuE1At0XgpRDLmKV/wIHIS5
jAfgvLymR0pMPhRnDQ46eGW8+8tdHvgH8LXveuvxmQ9C3bWTwrzzSNdwG0ObQgVV
ndG43FsFLnMdCgn9KxbRXuBVlVSYEAbD5Ubu97yiseygLHuWMw9VattB0r2sIZoN
qAYxSV4CcI6aogo1Q+zfcBHx2IqOrONbLSgexpwGt4XD4s2I6Xl6pUInZIBfzTgJ
rZYWSSVatbAQRkbNQolRwJdglbQfFyhAYxLA3/2IRVEdJLX1z3pwzICOn99uuWc9
xHEgBWwQ45fz/9zK7n7+x2UReZLiVHR1o6mhPFyPtyaY/jYOrJ67FQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:59 2024 by rpki-client on console-ams.rpki-client.org